Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/241FAZ_2Mdv44bWcEGmEyrowB0E.roa
File: 241FAZ_2Mdv44bWcEGmEyrowB0E.roa (raw, json)
Hash identifier: 5W2wAnaz7kKAZWS4yWGjrygdciLPaTWbKTarzS399P4=
Subject key identifier: DB:8D:45:01:9F:F6:31:DB:F8:E1:B5:9C:10:69:84:CA:BA:30:07:41
Certificate issuer: /CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Certificate serial: 01922CE1CDDE01F24822BC5C9CA7B28A69EC
Authority key identifier: 63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/241FAZ_2Mdv44bWcEGmEyrowB0E.roa
Signing time: Thu 26 Sep 2024 05:50:48 +0000
ROA not before: Thu 26 Sep 2024 05:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51073
IP address blocks: 195.254.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2c:e1:cd:de:01:f2:48:22:bc:5c:9c:a7:b2:8a:69:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Validity
Not Before: Sep 26 05:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db8d45019ff631dbf8e1b59c106984caba300741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:76:72:7c:2c:2d:f8:e1:43:6f:d8:71:76:
0d:aa:77:2f:7b:a6:5e:8e:e3:55:95:8d:c4:5f:72:
50:06:aa:12:cc:74:33:f0:09:f8:83:98:9a:8c:c3:
1f:a9:9a:d1:2a:6d:57:bb:35:da:45:89:e2:3e:6c:
74:53:de:fd:d7:35:22:cc:ca:88:5c:e9:3a:e2:b8:
e2:9a:2b:f4:64:eb:d5:54:4d:b1:1e:1e:d6:57:57:
99:0a:a5:9e:13:12:93:32:11:68:89:16:23:1a:f4:
32:de:cb:e3:05:04:35:70:ce:7d:ef:b3:c8:0e:b0:
63:a0:f8:79:b9:6c:1a:5e:45:62:d6:3f:00:a0:0a:
c8:a1:6f:7b:22:a7:31:09:dc:9b:29:0b:0b:f7:31:
78:7d:8d:a7:6b:ba:a4:24:9c:a7:de:a5:6c:bb:58:
e0:47:65:fe:0e:8e:fd:13:4e:85:1c:78:67:90:0e:
b9:cd:7e:ab:96:2b:ef:31:21:2c:2b:14:5e:f9:82:
1f:67:ef:b5:70:a0:da:8d:05:5d:41:f2:de:1c:85:
e4:6b:e0:4a:40:a6:30:3f:1d:20:19:8e:23:b1:6e:
c9:55:8c:23:75:a2:e6:cc:76:5f:b7:48:f2:8a:c4:
61:8a:9a:9a:f3:e6:83:f4:57:24:f8:7d:5d:8c:3f:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8D:45:01:9F:F6:31:DB:F8:E1:B5:9C:10:69:84:CA:BA:30:07:41
X509v3 Authority Key Identifier:
keyid:63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/241FAZ_2Mdv44bWcEGmEyrowB0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.168.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:42:0d:ad:5c:02:2a:98:f1:4e:12:48:86:58:26:7e:b3:e2:
54:ae:f6:08:3c:53:12:c8:15:b4:f8:3f:c3:f2:07:d7:a8:bf:
6e:ea:ad:fc:fb:5d:78:02:33:3c:88:b6:a7:77:84:84:bc:dc:
bf:4a:12:f6:49:a4:ee:0d:01:a1:d9:50:18:53:08:c0:00:0f:
2b:7a:b0:e0:70:92:60:2a:2e:62:82:73:0c:09:7e:54:20:69:
e6:04:d8:11:4d:44:53:6a:9a:04:ff:54:5e:b9:59:19:90:27:
62:28:66:48:08:57:d2:2b:65:ec:69:56:d9:05:26:eb:7b:30:
3e:bd:b0:f0:ef:76:7d:ca:74:b1:8e:c8:b8:35:f4:18:ba:b1:
a0:93:de:e3:b2:b0:c6:51:91:5a:95:e3:86:41:c8:e1:84:3f:
9d:91:0f:f1:87:5c:bb:85:2d:3b:6a:c3:ea:4d:2e:89:9a:4f:
63:00:f8:99:28:e4:0d:b2:f0:7a:99:c1:7f:f9:bd:a9:c7:64:
dc:db:2e:0b:14:de:13:fe:fd:69:41:a0:bb:6f:ea:2d:21:62:
1d:b6:40:58:0a:71:43:5e:e6:77:c9:71:52:70:36:77:7b:f4:
9b:44:cd:cb:a7:fc:94:29:09:74:e3:c5:00:f2:f5:9c:4e:1c:
ed:e1:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:10 2024 by rpki-client on console.sobornost.net