Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/8W_CpPeF-exZI59KB_PFepNWbbM.roa
File: 8W_CpPeF-exZI59KB_PFepNWbbM.roa (raw, json)
Hash identifier: jRS2kAc/ARw6ucwOZwAnUJM3WOdLdEgarxoKR+Xy+2Y=
Subject key identifier: F1:6F:C2:A4:F7:85:F9:EC:59:23:9F:4A:07:F3:C5:7A:93:56:6D:B3
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 018CC56E9493327B9BDEDED86E7D801707E9
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/8W_CpPeF-exZI59KB_PFepNWbbM.roa
Signing time: Mon 01 Jan 2024 14:30:07 +0000
ROA not before: Mon 01 Jan 2024 14:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44738
IP address blocks: 195.28.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:94:93:32:7b:9b:de:de:d8:6e:7d:80:17:07:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Jan 1 14:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f16fc2a4f785f9ec59239f4a07f3c57a93566db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:86:c0:79:e5:50:43:7f:ed:b3:ab:3f:0a:
f5:06:c2:bc:3d:c0:c5:ee:62:2c:45:58:3b:7a:05:
c1:37:6f:24:fb:db:62:38:0c:bb:bb:7d:d9:2d:9d:
70:2a:e3:ee:f1:09:6d:a8:3f:db:a9:5f:34:12:89:
b2:81:81:c6:f9:a7:50:97:8c:20:de:66:41:f5:54:
ac:2c:3d:b5:4c:2c:88:cd:35:14:d7:d2:a2:6f:34:
a5:6a:05:99:b6:54:78:74:68:a4:32:8f:e1:0e:83:
5c:8d:6d:d6:07:09:8b:f4:ed:9e:41:0f:c1:e9:4f:
ec:86:0b:14:89:13:bc:be:82:e3:73:e6:35:e3:c4:
72:79:4a:0e:df:5b:57:d6:02:6a:e0:f8:99:0a:76:
db:c9:11:51:73:5f:6d:2b:ac:93:71:5e:d5:b8:85:
a4:c7:18:61:d2:34:21:f3:83:4e:7f:a5:93:8c:d8:
23:b3:76:38:7c:5b:d4:d9:a3:40:73:5b:c0:5b:68:
da:98:d9:c7:fe:e3:18:21:c7:88:64:1f:a0:f9:ac:
b1:31:59:ab:1c:19:39:ef:23:b3:e5:7d:b5:c0:80:
cc:3f:9b:14:c3:cd:b9:cb:7e:15:e2:0e:75:e5:e9:
b2:f8:19:76:bd:fe:38:c8:20:4a:8d:ee:7c:41:88:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6F:C2:A4:F7:85:F9:EC:59:23:9F:4A:07:F3:C5:7A:93:56:6D:B3
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/8W_CpPeF-exZI59KB_PFepNWbbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.4.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:b1:84:a3:f5:a9:23:37:c9:17:a8:04:43:1a:83:3d:ff:dc:
ed:39:be:98:c1:78:38:87:8e:72:ed:d7:4d:f9:bc:b5:f3:9b:
67:23:2f:a2:22:61:94:a9:8a:60:88:20:70:f9:13:2d:d9:47:
b9:23:4e:ca:dd:f8:ea:f1:f2:05:99:56:9a:80:ae:27:19:ec:
a9:95:ac:1f:8f:b3:e1:b3:82:9d:77:9f:af:c3:11:e3:11:59:
cb:56:f6:bc:48:1d:ce:b8:b7:f0:0b:90:c5:77:e4:71:f8:27:
ca:56:34:ea:9f:29:bd:4e:a3:6b:3c:47:43:7b:4c:d8:91:43:
6a:de:b6:6e:8c:29:5a:24:39:4e:b3:92:88:49:00:ae:c7:3b:
c0:bb:6c:b1:2d:e7:d2:c8:05:b4:af:be:86:6f:c2:e5:d7:10:
d2:d0:23:12:9e:0d:60:9a:2e:4c:b9:0f:2a:83:60:41:4c:1d:
ba:86:95:7d:41:bf:46:b9:ee:63:5b:cb:5b:0b:7a:4e:73:85:
22:b7:d0:37:e1:b4:9a:ea:94:97:d1:a0:93:b2:fa:87:94:64:
d8:03:6e:d1:3a:8e:f9:5e:ea:9e:21:f9:e6:3c:c3:a8:58:c4:
ee:cb:a8:7b:e3:6f:21:c9:96:a0:7f:3b:ad:f1:c7:86:be:10:
3f:cc:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:12 2024 by rpki-client on console.sobornost.net