Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/UOUgGyLTp0P4eOXWA70ICxbUGOM.roa
File: UOUgGyLTp0P4eOXWA70ICxbUGOM.roa (raw, json)
Hash identifier: UymWont6r1PAexzE87ynb33kGlvikH5b3U6nZzDysGI=
Subject key identifier: 50:E5:20:1B:22:D3:A7:43:F8:78:E5:D6:03:BD:08:0B:16:D4:18:E3
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0193054C388C539E70F92849AB9FB7276C3C
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/UOUgGyLTp0P4eOXWA70ICxbUGOM.roa
Signing time: Thu 07 Nov 2024 06:25:01 +0000
ROA not before: Thu 07 Nov 2024 06:25:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.206.0/23 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:4c:38:8c:53:9e:70:f9:28:49:ab:9f:b7:27:6c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 7 06:25:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50e5201b22d3a743f878e5d603bd080b16d418e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:37:5e:9b:51:37:1f:f8:55:6d:7d:b0:8d:
b4:5f:0f:8d:8a:8d:19:de:ec:4c:90:27:e1:75:cc:
34:05:c0:d7:8c:f3:6a:82:d7:a8:fb:0d:23:d5:bb:
ea:af:55:ea:96:3e:79:b3:11:51:55:54:9b:55:4a:
64:23:a0:12:74:06:a7:25:6b:8c:1c:32:16:e1:4a:
ac:f1:47:69:56:c0:ff:64:a7:ba:9f:e5:e2:4b:58:
25:6c:19:fa:14:7a:18:99:84:20:b7:16:da:57:8d:
c8:01:d6:52:20:0a:54:e3:f1:f6:4c:12:c9:82:96:
fd:0d:3c:85:d1:09:c6:25:a3:d9:e8:43:29:fa:d9:
e6:1a:12:23:95:34:04:15:ed:9a:9c:5a:04:f8:ff:
8d:3d:82:0e:e6:77:ff:6e:2c:24:e7:7f:82:76:95:
0d:36:5c:4a:56:75:cc:9d:e2:f0:95:6e:02:ad:32:
09:fe:1b:20:7f:4f:9e:5a:c9:1b:c4:9a:09:b5:62:
aa:18:84:30:a8:55:0f:0c:8a:31:10:dd:ea:4e:d2:
c3:ed:67:dd:89:37:0e:d1:f8:6c:5b:2e:fc:36:0c:
b1:36:cb:9e:e0:59:dc:b0:01:9c:c7:bb:4a:de:58:
0a:2c:83:13:94:83:b6:ab:b4:e4:1e:dd:3c:81:ab:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E5:20:1B:22:D3:A7:43:F8:78:E5:D6:03:BD:08:0B:16:D4:18:E3
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/UOUgGyLTp0P4eOXWA70ICxbUGOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
89.249.206.0/23
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:27:1f:44:8b:1c:73:07:0c:29:44:db:39:e7:ad:40:4d:62:
31:1d:64:ff:d8:4f:e8:e7:14:42:19:b3:64:65:f9:48:a4:ff:
e8:e6:5b:1d:d7:35:31:5e:c8:95:e8:25:80:11:2a:18:0e:a0:
fe:d9:ab:c9:e1:cb:15:e8:6b:25:36:69:c4:03:c9:8e:1f:f0:
85:31:90:22:cb:77:4a:c4:a2:e9:28:65:5f:03:99:90:81:f7:
5b:27:c6:fb:92:64:cd:63:3d:cc:d0:f1:a9:c8:8e:70:7b:31:
61:83:dc:be:85:f9:c7:97:71:f9:0f:86:47:56:35:b7:68:bc:
a6:82:52:ae:d9:e1:8e:e4:07:52:e9:14:fe:13:89:d8:28:cc:
48:e4:54:46:9e:6a:d8:8f:3b:a0:08:60:99:7f:08:69:ac:7d:
cf:5c:9e:0c:26:b4:d9:e7:18:a2:e2:0c:c6:fa:d3:25:aa:48:
f0:46:9b:6c:b2:42:38:a1:22:c3:1e:f2:ef:2f:05:b9:97:55:
6f:fa:9b:7f:a0:9a:b1:65:c0:84:e6:9a:2e:fb:08:31:c4:13:
fc:15:d2:ab:1c:5c:d6:45:8a:7a:55:dd:b8:b8:d8:4e:10:c5:
49:60:14:07:6a:41:bb:51:04:09:85:63:1e:82:f9:32:1b:8c:
0a:04:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:13:33 2024 by rpki-client on console.sobornost.net