Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/v-697rzlCa1KpXNwxCJX1XchmPg.roa
File: v-697rzlCa1KpXNwxCJX1XchmPg.roa (raw, json)
Hash identifier: kLimymsZPPrPyQfQVZJayW4qM0mF2oOj+iKwABh25IE=
Subject key identifier: BF:EE:BD:EE:BC:E5:09:AD:4A:A5:73:70:C4:22:57:D5:77:21:98:F8
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018392D4964913E8EE65926043195F7E2AF6
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/v-697rzlCa1KpXNwxCJX1XchmPg.roa
Signing time: Sat 01 Oct 2022 09:15:49 +0000
ROA not before: Sat 01 Oct 2022 09:15:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 193.25.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:92:d4:96:49:13:e8:ee:65:92:60:43:19:5f:7e:2a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 1 09:15:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfeebdeebce509ad4aa57370c42257d5772198f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:71:48:3a:6e:e3:f5:df:6b:30:38:d4:e3:ae:
a0:b7:fe:4d:da:32:00:de:bf:5c:e3:64:2a:c6:41:
4e:72:be:e3:f0:bf:34:1e:72:0a:af:48:77:9c:0e:
e1:e9:a9:f2:82:6e:59:a7:11:09:71:b6:1c:31:4e:
bf:60:a7:74:77:2d:a0:d4:58:7a:12:82:6e:66:0d:
61:9e:3e:49:e3:ed:d4:be:53:ff:6b:8b:28:66:d1:
23:cd:b9:cc:39:6a:da:dc:45:dd:65:c0:f4:6c:de:
a6:0b:b4:89:72:79:c0:01:11:90:57:6d:86:8d:d6:
fc:c1:3c:58:75:f1:18:f3:82:9a:e6:14:de:4b:93:
39:59:ce:7c:21:d2:8e:39:5d:73:a5:19:6d:de:06:
66:e2:0c:e7:00:33:0f:65:67:45:e9:4c:d3:99:d6:
74:6f:39:3b:ea:3b:b9:8e:3f:38:37:d0:9c:bc:07:
28:82:e6:b4:70:61:1b:cb:c8:92:de:48:ee:0a:bb:
c1:b4:50:8d:83:29:b8:85:f7:24:c9:76:dc:af:03:
04:ba:36:5c:10:85:56:b3:f5:a7:4e:7c:16:65:7e:
30:bc:ef:04:7a:c7:e6:93:86:46:46:8d:7f:6f:71:
36:5d:02:6e:56:b4:9b:4d:e6:58:6c:88:2f:3a:79:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EE:BD:EE:BC:E5:09:AD:4A:A5:73:70:C4:22:57:D5:77:21:98:F8
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/v-697rzlCa1KpXNwxCJX1XchmPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:01:8b:e9:b4:a3:05:19:e1:b0:3d:7b:fc:39:b6:94:e4:29:
e2:16:90:a7:2a:08:7e:d8:ac:c3:06:a3:27:54:d3:6c:d5:43:
fe:ca:3c:88:d9:0d:31:ed:ea:16:c3:69:df:a2:8d:3e:e6:d0:
19:04:a9:14:da:f4:5f:27:44:05:ca:85:c6:93:d8:b7:1a:d2:
65:2f:47:f8:6e:42:c3:19:ec:0c:90:d6:ee:4f:14:bd:70:76:
6b:9c:9d:a7:50:53:01:d7:fe:cc:e3:ac:c3:c6:ba:09:65:2c:
f3:50:bf:9c:0b:a8:8e:37:e8:92:8b:51:82:70:fd:f7:eb:9d:
6f:85:61:5f:0f:ae:67:45:93:a9:c4:3c:83:50:ce:30:19:b8:
cd:e3:a4:6d:4f:2c:78:18:04:f2:4c:66:7b:c0:71:48:33:91:
9d:26:76:b6:19:ef:44:7a:9d:af:ce:1d:a8:33:ff:bb:05:c5:
85:fb:be:e5:05:17:8f:40:d8:00:b3:0b:0a:79:63:01:58:e2:
bb:7c:03:d8:9c:1d:8c:64:62:56:67:96:5d:d4:c0:99:7f:22:
44:9a:f4:5b:5c:63:86:2c:c5:c2:f5:eb:8e:6f:e5:d6:7e:96:
ad:22:53:28:31:05:ae:2e:1e:56:9d:d7:d4:5c:ed:da:4c:07:
07:e3:44:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net