Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f191ee-04de-4894-adf2-c8d309c1040c/1/gmH1zvUdXML6_7GolIJ0Izzuv3s.roa
File: gmH1zvUdXML6_7GolIJ0Izzuv3s.roa (raw, json)
Hash identifier: W6uatrdah4UNNqYWX7hBI0/9XH40u16k95j1kG/ynLE=
Subject key identifier: 82:61:F5:CE:F5:1D:5C:C2:FA:FF:B1:A8:94:82:74:23:3C:EE:BF:7B
Certificate issuer: /CN=932a9ce105d08b2488789c355b898accce8a9087
Certificate serial: 018E6054E00BA2EF0233E0FABF0C219B713E
Authority key identifier: 93:2A:9C:E1:05:D0:8B:24:88:78:9C:35:5B:89:8A:CC:CE:8A:90:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyqc4QXQiySIeJw1W4mKzM6KkIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f191ee-04de-4894-adf2-c8d309c1040c/1/gmH1zvUdXML6_7GolIJ0Izzuv3s.roa
Signing time: Thu 21 Mar 2024 09:25:58 +0000
ROA not before: Thu 21 Mar 2024 09:25:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 195.64.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:54:e0:0b:a2:ef:02:33:e0:fa:bf:0c:21:9b:71:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932a9ce105d08b2488789c355b898accce8a9087
Validity
Not Before: Mar 21 09:25:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8261f5cef51d5cc2faffb1a8948274233ceebf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:b4:36:6f:68:e9:69:86:d6:e1:b4:f2:31:
9b:76:f0:65:c1:1b:27:63:96:93:15:f9:59:c8:f1:
9e:a4:a0:d6:d7:c3:79:1c:9c:c9:e3:3e:9e:8e:8f:
02:57:84:f0:3c:a8:08:e6:d9:c6:a9:95:2a:57:4c:
e8:16:3f:8b:5f:0e:86:e6:f8:c6:af:74:bf:2c:be:
c8:f9:d1:4b:e8:af:b9:a8:9c:d6:50:b1:77:53:51:
e3:8d:07:85:64:d3:5c:83:0f:e0:56:93:0d:5e:9b:
60:a5:1d:7a:7a:2e:28:ec:bb:50:85:4a:fe:4c:5b:
46:ab:79:71:d9:60:ad:72:07:96:22:e3:c0:75:f3:
18:26:0c:ad:7f:76:1e:6c:d3:56:4d:1e:0b:ed:a0:
a6:23:e7:18:39:7f:77:92:b2:ab:20:83:65:cf:1a:
bf:2c:ae:de:2a:2c:9a:46:47:51:6b:02:03:e5:39:
2d:35:38:e7:da:cc:78:3e:ea:90:c5:7a:e5:25:1a:
da:f0:d8:96:ef:7f:b0:71:60:80:c4:b5:d5:81:21:
b4:b3:1c:9c:3d:4f:60:4c:73:d6:55:bc:65:03:92:
aa:75:4c:e6:b0:6d:be:8e:06:1f:ee:2f:5e:af:ea:
7e:87:7e:96:ea:24:78:04:25:e1:a3:e8:0c:5b:8a:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:61:F5:CE:F5:1D:5C:C2:FA:FF:B1:A8:94:82:74:23:3C:EE:BF:7B
X509v3 Authority Key Identifier:
keyid:93:2A:9C:E1:05:D0:8B:24:88:78:9C:35:5B:89:8A:CC:CE:8A:90:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyqc4QXQiySIeJw1W4mKzM6KkIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f191ee-04de-4894-adf2-c8d309c1040c/1/gmH1zvUdXML6_7GolIJ0Izzuv3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f191ee-04de-4894-adf2-c8d309c1040c/1/kyqc4QXQiySIeJw1W4mKzM6KkIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.99.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c9:8c:3b:e4:88:a6:09:77:38:ca:3b:66:6a:d5:e1:1f:ca:
96:cc:0a:ad:63:3c:f8:38:55:b1:65:92:27:4f:95:62:be:5e:
3f:ad:4b:24:48:f3:b7:18:f0:47:0f:32:49:4e:a1:ca:e1:a9:
3a:f9:f2:70:18:e3:7f:77:92:20:f9:fd:79:2c:5f:0d:1d:08:
ea:50:a0:75:77:1e:e4:a7:88:61:be:7e:5b:08:05:dc:21:0d:
83:90:4e:d9:f0:3b:60:32:b8:d7:9d:87:d6:4d:a6:13:41:ee:
c2:88:da:64:db:88:d4:7e:e4:93:8c:b9:77:59:5e:ad:81:b9:
be:37:c1:00:9b:0e:1c:9d:f6:4d:6e:61:d2:e4:68:43:c1:ce:
0f:d4:f8:1e:55:9d:66:6d:2a:82:31:29:a6:4d:2e:e2:68:a3:
61:fc:a5:fa:1a:1c:94:0a:20:4c:d8:b7:34:0f:02:c4:11:6b:
1d:9f:2e:d8:06:27:cb:06:81:c9:b5:f3:35:d7:79:72:b4:0a:
79:f7:b1:f9:35:c8:5e:0e:97:4b:56:95:63:52:10:da:33:5a:
d6:23:db:ef:ac:df:72:8e:b1:0d:7f:4b:0f:e1:d3:c7:a5:5b:
a8:6e:dd:22:4c:0d:90:9d:9d:d8:ba:e3:8a:db:98:81:89:43:
db:af:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 18:23:16 2024 by rpki-client on console.sobornost.net