Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/uIcq2FT3f-lDjv9G_11bIz-eHF8.roa
File: uIcq2FT3f-lDjv9G_11bIz-eHF8.roa (raw, json)
Hash identifier: /3oVZFMy/dPKxRjojjJVfLaVA7mFexWFIEHexaZwOXc=
Subject key identifier: B8:87:2A:D8:54:F7:7F:E9:43:8E:FF:46:FF:5D:5B:23:3F:9E:1C:5F
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0193B5E9DB80AE3A5A16ABCAD716F062437B
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/uIcq2FT3f-lDjv9G_11bIz-eHF8.roa
Signing time: Wed 11 Dec 2024 13:30:22 +0000
ROA not before: Wed 11 Dec 2024 13:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 147.78.68.0/22 maxlen: 22
193.187.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:e9:db:80:ae:3a:5a:16:ab:ca:d7:16:f0:62:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 11 13:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8872ad854f77fe9438eff46ff5d5b233f9e1c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:7e:56:18:82:e8:0b:58:03:33:31:a4:01:
e2:4a:8a:e9:09:38:6b:ec:be:b4:f3:3d:0f:53:0f:
ea:db:4c:7c:d8:15:1a:3d:ea:f8:55:68:f5:cf:a4:
9e:99:dd:72:2c:25:50:f3:42:c8:15:5b:62:44:49:
ca:c5:15:3a:2d:46:d9:d1:2c:89:20:ad:25:2a:47:
6f:14:e6:b3:6b:ca:13:e7:f9:87:d2:27:aa:ee:91:
d0:8d:d3:53:36:2f:7e:a4:bd:df:d1:ef:a1:ed:19:
f8:3d:af:ec:0c:af:f0:9f:e3:b6:df:78:a3:0f:e9:
15:66:7b:f7:af:50:bf:f2:5f:c8:b1:f0:bd:0b:d9:
c2:db:6d:a4:c6:72:4f:7c:6f:f0:66:69:c5:38:a8:
a6:2f:73:25:e8:aa:15:4b:28:fa:40:0b:18:fc:6f:
4e:34:84:33:c9:38:9d:0b:44:ca:b7:b8:be:26:21:
48:c5:77:99:df:31:6d:c0:bd:78:4c:b4:67:e8:76:
1b:6c:68:f9:69:da:ac:ee:9a:f4:42:9d:37:41:98:
a6:22:7c:22:49:e7:5f:a0:d8:13:83:fd:02:75:23:
f5:1e:1a:e8:fb:b3:91:64:e1:1a:60:63:81:1d:3a:
2d:29:51:a0:a5:92:87:e2:f2:95:06:1e:c8:2f:3a:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:2A:D8:54:F7:7F:E9:43:8E:FF:46:FF:5D:5B:23:3F:9E:1C:5F
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/uIcq2FT3f-lDjv9G_11bIz-eHF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.68.0/22
193.187.140.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c2:6a:54:ac:69:87:a7:8c:23:61:c6:8b:9c:1c:bb:bc:eb:
cb:62:dd:aa:a9:9c:a8:ce:a9:b3:32:57:83:13:d8:1b:38:b8:
3f:7a:9c:33:ad:98:6f:4e:18:3a:2d:20:1b:14:cd:c9:24:a0:
ac:a5:46:72:1a:75:bb:70:6f:65:1f:17:fa:ab:7b:1b:5f:12:
8a:06:13:bd:1c:01:e6:cd:f1:a2:bb:d1:98:9d:a7:9f:ae:2c:
46:16:d6:0c:eb:f1:ae:79:f8:e6:b9:85:c8:23:c0:78:18:63:
d6:62:17:f3:13:af:e9:16:39:86:dd:10:7b:cc:cc:4a:89:8f:
bc:8c:f9:9b:c0:91:18:29:59:b5:63:e5:12:97:40:c7:31:61:
f5:e4:c6:2b:7b:dc:95:87:26:93:e0:97:72:88:74:1c:85:c7:
a2:b8:93:3d:22:46:52:cd:ff:f6:cf:df:b6:bc:97:68:a2:aa:
20:26:c5:d7:d1:b0:c3:51:1b:66:96:9a:c2:2e:2c:00:ff:ab:
cc:c0:1f:a8:18:1a:05:6a:98:ea:6d:d9:99:0f:98:b8:31:d5:
ea:ef:11:2b:57:9d:b9:cf:bc:1d:2c:10:e6:c0:92:a4:58:83:
92:ba:de:d8:0d:a2:93:6f:d3:52:b1:fa:f9:32:99:e0:79:97:
a8:c1:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net