Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5ZPIQMDwf-7ftSB6FSA3jcXjCug.roa
File: 5ZPIQMDwf-7ftSB6FSA3jcXjCug.roa (raw, json)
Hash identifier: nZTra+clTIqjNvzkuNNXmNEG9IpsBR39AWUZTzeZues=
Subject key identifier: E5:93:C8:40:C0:F0:7F:EE:DF:B5:20:7A:15:20:37:8D:C5:E3:0A:E8
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01933ED1DCFDBC9C04FCC5836110245505AD
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5ZPIQMDwf-7ftSB6FSA3jcXjCug.roa
Signing time: Mon 18 Nov 2024 10:29:21 +0000
ROA not before: Mon 18 Nov 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215921
IP address blocks: 195.28.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:d1:dc:fd:bc:9c:04:fc:c5:83:61:10:24:55:05:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Nov 18 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e593c840c0f07feedfb5207a1520378dc5e30ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:3a:bc:40:04:4d:ad:55:9a:ea:57:a1:30:
65:ff:46:16:57:c7:fc:8e:a0:d7:9c:5c:94:3e:76:
21:2f:86:a9:4e:99:4b:54:3d:eb:16:25:80:60:8b:
10:32:6a:3f:4f:1c:66:7a:f7:20:47:ce:63:2e:c0:
ec:04:fa:cc:97:fd:f2:b3:84:b1:24:7e:ca:30:00:
80:d3:39:01:db:67:5c:4a:1a:02:37:0e:e2:d7:bf:
58:fc:38:d0:16:a7:5a:f1:65:2f:cc:e8:2b:42:ba:
36:f2:cb:70:f9:05:8a:94:f9:b6:32:73:9f:b8:08:
7c:6d:6b:d0:70:20:a0:83:93:a4:65:82:b6:8e:ee:
a2:0d:fa:c5:5a:8a:7a:07:ab:e0:96:af:92:a7:7e:
99:1c:ee:dc:16:d9:6f:e9:97:99:d6:15:85:fa:dc:
5d:1f:83:91:c9:9c:6c:22:7e:30:a6:7a:73:b2:70:
2b:74:f4:96:fc:98:c3:30:0f:b6:95:73:67:93:7e:
fe:e7:7c:b0:75:76:ec:59:96:38:fc:25:29:f9:b7:
f9:49:31:b7:a9:83:70:7e:31:08:b6:94:c8:1e:c9:
58:56:7d:eb:bf:4b:a3:c0:20:b3:21:f3:1e:91:d4:
19:72:63:77:33:3b:a0:4c:f4:f3:f5:17:43:6b:d1:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:93:C8:40:C0:F0:7F:EE:DF:B5:20:7A:15:20:37:8D:C5:E3:0A:E8
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5ZPIQMDwf-7ftSB6FSA3jcXjCug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.188.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f9:24:44:95:0e:23:28:bc:17:0a:23:fb:00:f9:62:d7:d4:
2e:ff:90:6b:87:03:72:08:90:aa:43:fc:26:57:ad:52:1c:55:
4b:cd:6b:ff:7d:24:40:e6:f7:b6:fe:a0:db:f2:92:76:b7:f3:
d1:36:53:99:5f:05:d2:34:f7:66:dc:42:30:d9:13:0f:c8:b4:
1f:89:8b:12:8a:ff:be:11:84:fd:3f:3d:12:50:aa:72:cf:44:
0c:48:51:34:ca:4e:01:1e:12:f7:a2:89:e2:4c:c0:cf:87:37:
ae:ce:d9:9d:16:0b:9d:f8:8a:1a:5b:6e:bd:b2:c8:bf:44:8c:
fc:53:8f:19:5b:c4:a7:d5:2c:62:9b:3a:65:a0:53:c4:05:89:
b6:67:c2:13:38:d2:ee:32:88:07:90:ed:9b:80:1f:be:e4:ff:
8c:17:7c:da:21:32:a1:7e:b7:4f:6d:5b:9a:5f:58:c7:1c:b4:
4d:87:2b:b4:1b:ae:b6:01:c2:6d:cf:a2:ae:3a:a5:47:73:7e:
ae:12:99:d1:b0:63:dd:83:fb:eb:f0:01:72:2a:6c:d0:f0:85:
1e:71:84:ea:09:49:4f:fb:9a:c8:eb:bc:d8:13:02:80:ac:85:
9a:f1:36:94:d6:d0:7f:57:c1:6a:86:62:d1:ac:a1:40:6a:e1:
8c:bf:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:14:10 2024 by rpki-client on console.sobornost.net