Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/NGUZvYBmRpJyKwXnloA0L9OcPB0.roa
File: NGUZvYBmRpJyKwXnloA0L9OcPB0.roa (raw, json)
Hash identifier: gBfwg+D3kv1WhYWjo2oGHkeGKCACkchjuOZPjmLYPGU=
Subject key identifier: 34:65:19:BD:80:66:46:92:72:2B:05:E7:96:80:34:2F:D3:9C:3C:1D
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 018FB52DB4CD42D69048097501CE5CAC592E
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/NGUZvYBmRpJyKwXnloA0L9OcPB0.roa
Signing time: Sun 26 May 2024 13:53:42 +0000
ROA not before: Sun 26 May 2024 13:53:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206880
IP address blocks: 193.164.147.0/24 maxlen: 24
2a12:6ac0:5121::/48 maxlen: 48
2a12:6ac0:dc10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b5:2d:b4:cd:42:d6:90:48:09:75:01:ce:5c:ac:59:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: May 26 13:53:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346519bd80664692722b05e79680342fd39c3c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:8d:33:b1:61:40:e0:e9:f3:b6:ca:58:1b:
38:54:61:5b:8b:40:10:09:b6:60:5b:90:73:8e:55:
29:63:88:e7:64:2d:67:5f:41:5c:d4:4a:b5:2a:1f:
b0:47:b5:b0:0e:3e:5c:fe:63:e4:79:64:62:c8:a7:
20:77:6c:86:fc:92:e7:c3:41:25:ff:80:a6:6e:75:
20:a0:15:64:e5:3e:e9:a0:19:b7:20:52:01:7e:2c:
2c:ea:34:ad:88:af:c2:33:00:00:aa:e7:f4:b0:d1:
ef:58:ed:44:16:61:91:0a:ec:b2:91:5b:d7:82:ca:
ec:36:5a:f2:cf:58:5c:d6:42:96:af:b7:65:b3:43:
46:f5:76:67:a6:0b:76:57:bb:db:80:09:1f:c6:2e:
32:45:06:3b:c8:da:a9:0d:ae:e3:52:d5:af:5a:d6:
74:ff:88:a8:0a:d6:68:e7:d9:22:4d:0a:39:a0:fe:
1f:9d:a2:39:1f:10:24:79:02:c8:1d:77:e7:37:1c:
7d:9c:04:42:7c:0b:ed:b6:db:9a:c8:19:0a:2c:f4:
42:70:01:a1:f2:e2:54:25:a9:74:99:ff:99:df:60:
d5:02:59:f4:1f:99:55:67:f6:1c:11:e7:f5:45:69:
25:f5:87:d1:99:04:6d:87:7e:2e:f4:de:e7:47:94:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:65:19:BD:80:66:46:92:72:2B:05:E7:96:80:34:2F:D3:9C:3C:1D
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/NGUZvYBmRpJyKwXnloA0L9OcPB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.147.0/24
IPv6:
2a12:6ac0:5121::/48
2a12:6ac0:dc10::/48
Signature Algorithm: sha256WithRSAEncryption
34:b1:61:e7:c8:6b:bf:76:50:f3:45:1b:21:be:b0:5b:ed:78:
18:08:d7:2f:88:46:08:79:b6:39:97:88:28:65:c7:09:e5:ad:
6f:a5:e9:f0:bd:7a:f6:b0:85:0f:74:b8:83:5a:d7:73:37:26:
ac:15:33:59:5d:5a:d7:86:f8:cd:b7:14:e9:9b:65:85:ec:be:
c0:ab:f5:58:e9:7b:91:79:c1:02:15:2d:33:98:82:a1:45:bf:
da:b0:69:56:b8:b4:66:03:63:83:ba:2c:90:45:ae:08:5b:3d:
98:a5:e2:e4:7e:e1:e0:ba:ad:bc:68:13:69:f7:9f:37:42:9e:
96:b4:2f:97:9e:24:22:cb:44:c9:09:ac:ba:e5:65:bf:c1:eb:
a0:e8:d3:0f:8d:8c:4c:e0:0b:cc:19:7f:e7:f5:ba:8c:60:e7:
af:56:31:9f:f2:e5:b7:49:e0:30:0c:b2:9d:a9:6a:83:6c:ae:
9c:ea:dd:0f:65:bc:d1:2f:12:d0:7c:fc:0d:69:23:92:6c:87:
30:c5:6f:2e:34:79:5d:ff:49:04:8d:87:fe:34:9b:7a:0b:98:
c9:5f:bc:d0:bb:b5:5b:de:fc:31:c7:12:07:52:6c:48:f5:08:
46:3d:3e:30:85:a9:1d:38:39:2b:4a:a0:22:fe:42:c0:cc:5a:
cc:a5:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net