Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/TeBbgunzbeTPLazERpNlUaCuSqw.roa
File: TeBbgunzbeTPLazERpNlUaCuSqw.roa (raw, json)
Hash identifier: a2J219jr9KGim5km50ASSNia+Ds/n1Nq/7l2GXSePeE=
Subject key identifier: 4D:E0:5B:82:E9:F3:6D:E4:CF:2D:AC:C4:46:93:65:51:A0:AE:4A:AC
Certificate issuer: /CN=564136b1195bdd5cb006e6cfa6091c44432e4be9
Certificate serial: 018964C054C0D7FE6F4C28CE043B333D6062
Authority key identifier: 56:41:36:B1:19:5B:DD:5C:B0:06:E6:CF:A6:09:1C:44:43:2E:4B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkE2sRlb3VywBubPpgkcREMuS-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/TeBbgunzbeTPLazERpNlUaCuSqw.roa
Signing time: Mon 17 Jul 2023 16:47:53 +0000
ROA not before: Mon 17 Jul 2023 16:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.26.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:54:c0:d7:fe:6f:4c:28:ce:04:3b:33:3d:60:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564136b1195bdd5cb006e6cfa6091c44432e4be9
Validity
Not Before: Jul 17 16:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4de05b82e9f36de4cf2dacc446936551a0ae4aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:8b:8a:c8:be:ab:a9:f8:06:6a:61:f9:ae:
70:08:d8:2e:00:b3:b0:56:71:5f:70:db:b1:9c:7c:
25:44:96:29:33:96:4c:ab:b1:ff:a5:28:66:d1:50:
20:19:14:7a:88:07:84:ae:11:9a:58:cb:de:f0:7b:
76:71:53:e9:0b:e6:96:a6:a5:06:11:e7:e6:da:b0:
0e:e6:d1:7f:5b:7d:50:55:72:fd:b4:0f:30:e0:6b:
14:15:7f:d5:3a:5e:99:c5:df:b8:39:d4:0b:0f:66:
dd:24:9a:33:ff:83:b6:ec:a5:07:b4:56:23:6a:f0:
90:3c:c4:f0:47:10:69:77:28:bc:c1:c6:32:64:20:
4a:8a:7f:30:f7:c3:f7:e3:80:05:60:88:10:29:d3:
60:f2:0d:21:85:3f:25:56:50:7f:ce:91:50:f2:01:
63:99:60:97:f3:35:d7:e6:f5:b0:88:30:96:de:95:
5b:82:c4:e3:8b:cf:10:62:cf:ac:f2:c5:71:2f:d4:
59:8b:a9:b4:9f:63:28:4a:2e:57:85:12:8d:18:60:
c6:f5:db:f9:25:3e:35:b7:9a:8a:43:c4:c0:7c:54:
cc:55:db:cc:d2:b7:03:7d:4e:8d:bf:76:d1:a0:ba:
37:85:ed:b7:44:b0:69:79:79:d7:c5:15:78:32:95:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E0:5B:82:E9:F3:6D:E4:CF:2D:AC:C4:46:93:65:51:A0:AE:4A:AC
X509v3 Authority Key Identifier:
keyid:56:41:36:B1:19:5B:DD:5C:B0:06:E6:CF:A6:09:1C:44:43:2E:4B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkE2sRlb3VywBubPpgkcREMuS-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/TeBbgunzbeTPLazERpNlUaCuSqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/VkE2sRlb3VywBubPpgkcREMuS-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.136.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4c:2a:1e:2d:b3:de:fa:5d:13:d5:b5:87:0e:fd:68:fd:f5:
e2:09:19:9b:35:25:9c:06:bd:3a:26:56:ca:46:a2:15:e7:1b:
e4:f2:29:6f:c8:50:42:3b:d9:29:f9:a5:64:a5:0d:ac:dd:1c:
43:50:22:23:e6:a5:cb:91:5a:3e:52:d5:bd:eb:ba:b3:23:d6:
6e:31:cb:b0:0c:0b:b6:52:ec:7a:25:c4:33:92:9a:81:6a:d9:
ac:e0:65:a9:8a:c5:9c:fa:3a:28:1b:5b:e0:52:8a:ba:da:26:
d5:13:a1:43:6a:cf:b9:a9:d4:14:33:1c:9d:44:21:ee:92:d3:
df:d2:32:29:30:a5:0a:16:5f:e5:d4:88:33:dd:e5:92:21:ea:
5a:b2:6c:6d:de:62:9f:c1:5b:80:cd:5e:ea:17:85:79:38:82:
56:18:76:50:d0:04:fd:fc:59:fc:fb:46:b9:23:97:9b:57:b0:
91:cf:e5:11:4e:9d:29:39:da:c7:fa:ab:19:f6:77:a3:0e:f5:
f7:85:f6:33:41:b7:32:64:05:ac:78:2b:b4:49:cf:5a:9e:2b:
d4:b4:09:da:2c:12:87:c0:b4:88:09:c4:94:1c:fa:36:a4:85:
0c:75:76:7e:ec:c5:ff:51:0b:16:ea:83:8b:59:d3:8a:32:fe:
a9:6f:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:45 2023 by rpki-client on console.sobornost.net