Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lf2djVUYaKrOEdjRzL7drQCY7QA.roa
File: lf2djVUYaKrOEdjRzL7drQCY7QA.roa (raw, json)
Hash identifier: hJM+7SCZLXdxBJYZXMx+xMYXJU5grEwfXbWGAac5E1Y=
Subject key identifier: 95:FD:9D:8D:55:18:68:AA:CE:11:D8:D1:CC:BE:DD:AD:00:98:ED:00
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183F0F4661EAADB55B42DFF05626EF0EA75
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lf2djVUYaKrOEdjRzL7drQCY7QA.roa
Signing time: Wed 19 Oct 2022 15:54:52 +0000
ROA not before: Wed 19 Oct 2022 15:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:f4:66:1e:aa:db:55:b4:2d:ff:05:62:6e:f0:ea:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 19 15:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95fd9d8d551868aace11d8d1ccbeddad0098ed00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:02:e8:13:6f:2f:57:6a:90:9f:ae:fa:fc:53:
ba:d9:bc:79:11:a2:6e:36:38:9d:b3:8e:85:04:38:
77:0b:09:88:2d:c1:f4:7d:eb:b0:8e:48:0f:ac:db:
ca:94:ee:f5:4e:21:46:75:be:11:0f:77:90:46:cf:
5a:b4:d9:ca:ea:d8:c7:cc:23:f8:ec:34:03:cf:7d:
28:ba:ae:1a:ed:31:ea:fa:30:56:12:fc:4d:8f:b9:
86:d5:a8:d9:20:8a:c6:55:97:5f:88:a3:9a:70:e4:
f5:72:7b:55:fe:92:fc:47:75:7f:28:60:f1:fe:b4:
05:bc:44:cb:2e:7a:c0:2d:4f:26:16:9f:0e:b8:f3:
c4:6c:3f:33:a9:a2:7a:b7:ff:67:5b:f7:bb:d7:c4:
a0:14:da:d0:58:cb:13:22:f1:62:1a:92:fd:97:67:
b8:47:41:d5:65:a6:81:f3:ad:c1:8f:73:a4:85:8b:
60:42:5f:8d:ba:0a:94:9f:f6:44:ec:8e:3d:d9:17:
24:8e:ff:6a:0f:95:62:fa:ea:26:3c:35:bd:5c:6c:
f5:f8:62:1a:48:2a:74:c0:76:cc:22:52:b7:ad:a1:
d8:0c:92:5c:98:18:fe:64:45:1a:9e:f4:8b:8a:3a:
c5:69:5a:a4:6d:a5:82:7f:5b:3b:c5:d4:2a:6c:14:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:9D:8D:55:18:68:AA:CE:11:D8:D1:CC:BE:DD:AD:00:98:ED:00
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lf2djVUYaKrOEdjRzL7drQCY7QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
58:0d:20:ab:3a:10:35:a1:ff:c4:d0:ed:07:c8:09:98:cd:e7:
95:8a:c1:40:e4:85:52:5b:26:b3:89:09:a5:58:71:74:8d:03:
98:45:a3:e7:9d:7f:52:5c:46:0a:a3:5f:fb:dd:35:f8:c7:e9:
3d:64:e8:32:c8:bf:5e:77:2f:92:58:a1:66:11:b6:b2:a2:9b:
08:91:0e:4d:0d:b4:51:5c:c6:c1:07:69:59:7e:75:48:9c:31:
b5:c0:75:34:a2:38:f8:b2:ac:e3:eb:bb:0e:2b:a6:b3:40:64:
d3:e5:2a:c6:c5:fd:79:ee:ff:84:96:12:b1:ac:78:fa:9f:41:
c2:f2:90:21:20:4c:cd:de:12:6d:6e:fb:c9:93:40:7c:5f:a5:
8a:ac:aa:e1:c0:20:73:ed:c4:2c:ce:13:ee:b7:46:b8:de:ff:
24:00:d4:e6:ec:12:bc:2f:61:53:31:43:c3:de:e7:0e:58:bc:
7c:1f:17:2b:77:8b:00:57:76:d6:b5:43:25:d0:8b:e7:7c:c3:
b1:9c:13:b6:21:08:5a:01:a6:1c:6f:c1:8f:2e:d8:cd:7a:4a:
07:9e:44:3a:ce:b6:ea:4b:ad:dd:82:7d:dd:3d:a4:8b:76:50:
c7:86:9b:ff:68:bc:e6:8e:fa:c8:44:6c:be:5f:d3:b0:b3:e6:
2e:2b:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net