Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/1-yafylJt7QtQyw6PXiaKZ_vGRG8.roa
File: 1-yafylJt7QtQyw6PXiaKZ_vGRG8.roa (raw, json)
Hash identifier: 7wmLpQxymezyQ6c7FvtW2FToFi/3cynWb53dJOCov5w=
Subject key identifier: FB:26:9F:CA:52:6D:ED:0B:50:CB:0E:8F:5E:26:8A:67:FB:C6:44:6F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 018CC2DAB81742F9FD84B6DF952D2478EB99
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/1-yafylJt7QtQyw6PXiaKZ_vGRG8.roa
Signing time: Mon 01 Jan 2024 02:29:22 +0000
ROA not before: Mon 01 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15943
IP address blocks: 193.31.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b8:17:42:f9:fd:84:b6:df:95:2d:24:78:eb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb269fca526ded0b50cb0e8f5e268a67fbc6446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:8f:d7:33:63:42:76:c4:d5:40:fb:4e:d1:
2a:a0:77:6d:85:2e:7c:2f:4e:1a:df:b7:b9:36:f3:
00:6c:ba:06:84:03:aa:97:11:3b:26:09:ac:a7:3b:
01:e5:cf:d4:92:95:c2:8b:f5:19:42:7c:a7:a1:81:
26:39:91:7f:22:e5:f0:66:47:e4:9f:c3:64:52:85:
b8:3d:56:68:a1:88:e8:bb:a4:86:ff:65:d4:e0:44:
cb:19:b9:25:7b:3d:9e:b2:5b:47:1f:57:39:1b:ab:
fc:8e:f9:66:8e:f2:4d:bf:41:5a:fb:08:97:e6:8a:
90:e9:5a:10:ec:74:10:0c:e1:14:71:6d:1d:c7:f3:
33:ba:01:da:4b:03:14:17:ba:20:f8:e3:bd:d8:00:
5a:a1:98:ed:c2:a9:eb:82:04:59:76:6b:56:33:7f:
bc:ab:9d:6d:47:44:49:9b:96:b3:00:0d:c5:49:df:
e8:3d:63:75:45:00:62:1c:a9:35:f1:38:b8:f2:6a:
37:05:96:b1:7d:b1:63:5c:48:e8:04:cd:0e:25:73:
25:e0:4b:74:f8:81:ec:e8:41:1c:8f:d2:a3:43:e8:
18:ab:95:25:95:2f:c0:f4:d1:f4:25:cc:60:38:e5:
c8:f3:d6:63:f7:ae:2c:3e:69:a4:60:dc:32:7d:2f:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:9F:CA:52:6D:ED:0B:50:CB:0E:8F:5E:26:8A:67:FB:C6:44:6F
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/1-yafylJt7QtQyw6PXiaKZ_vGRG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:32:34:a5:af:ea:6f:b8:48:b9:21:1e:a1:49:a6:0f:17:87:
15:14:5b:a6:0f:45:9d:5e:45:6f:c8:93:6a:ef:df:c4:69:5b:
92:b4:63:34:ab:c7:78:ab:4b:4e:8a:7b:44:df:ac:71:3a:74:
0a:75:79:fd:73:1a:f3:b3:e8:dd:8c:6b:10:aa:b2:b6:a2:5a:
75:b1:55:1f:e9:eb:04:19:b8:bf:d5:81:4b:e2:57:98:c0:d7:
fe:18:3b:75:a3:d2:56:e8:5e:82:f2:b3:36:eb:e8:5a:b0:d7:
fb:d8:86:c6:f2:bd:f3:31:e9:c3:e5:a7:57:30:ef:e9:3c:4c:
bc:2a:16:d5:4e:ab:9e:8b:04:3b:8e:b7:69:e2:20:85:3b:56:
0a:65:bb:22:0c:aa:65:38:45:2d:f0:dc:82:ba:63:22:e0:bf:
8f:92:2a:e6:d0:65:da:47:05:8f:91:bd:e2:a0:04:9b:c6:7a:
34:3d:8f:1a:ed:83:c4:0d:05:b7:5c:7b:10:9d:04:d6:c0:ad:
8c:5c:0c:46:d1:83:31:d8:1c:bb:f4:c7:40:c9:ee:80:6b:4d:
6d:b7:fe:96:ad:a3:78:55:ea:de:a6:4c:0d:ce:4b:e5:06:f0:
67:3b:0f:3b:2e:c3:2d:04:0c:76:93:16:95:77:4e:52:71:62:
99:ba:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:25 2024 by rpki-client on console.sobornost.net