Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/y5JKwp5P7T6sShbpCLeAVqzFXNg.roa
File: y5JKwp5P7T6sShbpCLeAVqzFXNg.roa (raw, json)
Hash identifier: WGV7UiqS0nHb/5B0mHFXpfA9Wg17lO6rkpDJpyxZMMc=
Subject key identifier: CB:92:4A:C2:9E:4F:ED:3E:AC:4A:16:E9:08:B7:80:56:AC:C5:5C:D8
Certificate issuer: /CN=208fa2b8733f5318267ad13bec0794346277cf25
Certificate serial: 018FC9AE337105709429987D4D42B40F26D9
Authority key identifier: 20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/y5JKwp5P7T6sShbpCLeAVqzFXNg.roa
Signing time: Thu 30 May 2024 13:26:27 +0000
ROA not before: Thu 30 May 2024 13:26:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215921
IP address blocks: 195.28.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:ae:33:71:05:70:94:29:98:7d:4d:42:b4:0f:26:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208fa2b8733f5318267ad13bec0794346277cf25
Validity
Not Before: May 30 13:26:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb924ac29e4fed3eac4a16e908b78056acc55cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:75:0f:7b:3d:f4:87:52:28:08:e0:16:94:
10:ce:9b:96:2c:a3:1f:43:2a:74:bf:61:77:1f:87:
db:62:b5:ae:cf:4d:e7:7a:93:dc:d4:e2:51:f5:ec:
59:b1:2d:0d:f2:66:5b:af:8e:3f:fa:f1:7b:16:f4:
f3:75:37:2f:a1:ec:ba:03:7e:18:87:d7:06:3f:b7:
e7:4d:e4:b4:ec:5c:75:ac:eb:7e:e5:0e:c0:db:92:
61:29:4e:01:32:b8:e3:8e:f8:99:be:95:d3:79:79:
e1:f0:a8:87:d7:76:b7:e8:80:d9:99:99:39:94:8d:
a8:22:0d:29:5e:f5:29:76:c7:65:d4:17:4d:c1:23:
b2:54:1b:32:a0:4f:76:bc:fb:18:ec:6a:3d:6b:0c:
58:f6:f0:09:a6:1b:1c:9b:16:29:ab:33:6a:e0:41:
f4:7b:66:47:29:5c:3d:1c:61:07:d9:59:a9:53:28:
46:cf:9e:17:be:44:e3:28:51:f7:74:16:a3:d9:78:
aa:50:b9:da:90:c9:44:12:d7:6c:4d:94:31:27:88:
0b:c2:a7:4c:5f:97:72:59:27:2c:9c:c4:f3:f9:16:
9d:ef:17:a3:8f:be:ab:2e:5d:8f:36:d5:74:2c:b1:
ec:e4:ff:9d:18:0e:92:7d:98:dd:36:8a:5e:b3:48:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:4A:C2:9E:4F:ED:3E:AC:4A:16:E9:08:B7:80:56:AC:C5:5C:D8
X509v3 Authority Key Identifier:
keyid:20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/y5JKwp5P7T6sShbpCLeAVqzFXNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.188.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e6:ae:f3:d6:bb:82:a1:52:c0:6c:3e:c4:fd:e4:93:24:b6:
1c:46:12:af:ab:56:a5:81:23:55:63:5f:4a:f6:2d:89:92:56:
20:ba:f6:9c:87:8c:7c:25:66:15:8a:b0:f2:d7:1c:e5:91:37:
ed:31:30:5d:48:b1:80:9b:8a:b0:9f:d5:4f:87:05:e9:a9:44:
5e:28:19:01:47:9c:68:94:e5:69:49:8c:47:47:4d:19:84:d1:
16:dd:aa:92:8b:9a:79:e5:fd:7a:3c:2a:4a:04:5f:e5:98:bf:
48:ff:22:2c:e6:76:34:c7:7a:e0:1b:3e:eb:e7:44:c5:a8:ff:
93:67:40:ce:a0:f4:2a:59:f6:a6:27:c5:a9:f9:74:89:ef:53:
32:b1:6d:7e:06:7a:b6:9a:8b:e3:91:63:dd:d1:d9:c0:7e:fd:
64:06:a9:67:f3:cb:7c:bb:93:4c:f5:e1:d1:19:87:8f:37:e2:
f7:2a:1c:ef:a8:48:fb:8e:24:53:2d:84:3f:27:d9:19:df:90:
42:b1:7e:ec:c9:7f:bb:f7:62:f7:90:0b:78:0a:27:4f:80:6e:
38:f8:b1:3b:6e:40:5e:e8:4d:e4:19:a6:b4:37:b2:bf:72:54:
74:c7:9b:8f:1a:23:90:21:0b:64:27:07:5f:09:66:41:46:6b:
ef:73:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 00:56:20 2024 by rpki-client on console.sobornost.net