
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_DwHGkp7HEMBdQEDC5gJ0DTP2YM.roa
File: _DwHGkp7HEMBdQEDC5gJ0DTP2YM.roa (raw, json)
Hash identifier: eMOk305Cgj5HXb9SBQxc7ghsdG/sLnpJbX8Xu+bIl9U=
Subject key identifier: FC:3C:07:1A:4A:7B:1C:43:01:75:01:03:0B:98:09:D0:34:CF:D9:83
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01920A690904D4E88F2441702D2833B41295
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_DwHGkp7HEMBdQEDC5gJ0DTP2YM.roa
Signing time: Thu 19 Sep 2024 13:11:48 +0000
ROA not before: Thu 19 Sep 2024 13:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215157
IP address blocks: 5.134.84.0/23 maxlen: 24
217.113.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:69:09:04:d4:e8:8f:24:41:70:2d:28:33:b4:12:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Sep 19 13:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc3c071a4a7b1c43017501030b9809d034cfd983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:71:a7:84:cc:e0:8c:be:93:85:4f:c8:92:
15:96:57:5b:d1:b8:29:85:35:53:de:a6:2c:4c:9b:
87:70:8a:db:7f:d8:df:12:a3:05:11:c6:6f:01:72:
75:ae:8d:3a:ff:4f:a2:29:f1:24:c4:62:25:31:d2:
af:e4:65:af:8b:e7:3c:f4:dc:39:e4:02:53:64:ae:
dc:d9:e2:ea:d5:49:d5:77:f1:9b:c9:a0:71:dd:e3:
c5:53:5c:f3:b3:9f:ae:7a:b7:09:44:49:f8:59:1e:
d9:58:f5:ef:bd:83:35:e8:a4:a2:99:4a:ec:4e:7b:
f9:ea:9c:31:be:f4:ec:1e:6b:c5:e7:c8:d8:0a:b2:
6d:0f:1f:9e:f5:db:11:3a:56:04:bd:ba:e6:57:f9:
46:89:14:5c:b6:0c:64:3b:c4:12:af:36:8c:c4:2d:
a3:77:36:4f:2d:7c:32:48:be:5f:2b:e6:b4:63:6d:
49:9e:de:63:74:38:75:72:4a:8c:ba:4f:42:0f:89:
ad:ec:95:38:7c:27:35:b9:93:d1:c8:42:df:53:7a:
c1:a6:36:a0:05:c1:3c:18:73:e1:ef:66:4c:14:61:
a8:65:41:6a:21:8a:4c:9b:72:f0:99:56:b8:69:56:
9c:c0:57:d0:e1:d8:62:05:8d:a3:37:9b:4c:b2:1f:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:07:1A:4A:7B:1C:43:01:75:01:03:0B:98:09:D0:34:CF:D9:83
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_DwHGkp7HEMBdQEDC5gJ0DTP2YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/23
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:89:b9:f4:4c:3e:c7:98:55:2d:59:5f:ae:da:4e:0e:5d:10:
4e:1a:dd:46:9c:31:15:c3:dd:8d:4c:13:b7:ae:19:59:73:34:
e3:fc:73:70:71:03:ea:59:26:76:5f:b3:cf:03:ee:00:53:4d:
6f:4a:6a:28:d6:28:06:e4:dc:fd:1a:63:73:7a:3f:fc:22:28:
5a:ea:fd:a2:88:2d:b5:10:ba:d9:cb:65:7f:29:61:d8:bf:46:
63:26:8f:aa:63:af:9a:b9:ee:31:3f:e6:b0:3a:87:4b:45:4e:
a3:df:50:f8:16:fa:9b:4e:55:4e:c1:c5:63:7d:2d:da:16:51:
7a:a8:78:88:2b:8c:e1:9e:ab:35:01:4b:b4:cd:68:fd:aa:2f:
e8:7b:69:f1:c9:94:21:0d:8a:0e:6a:17:24:ed:83:83:fa:15:
1e:08:f3:ac:f3:0f:93:45:a7:51:c2:82:d6:11:1e:e3:6c:77:
b4:43:73:f3:58:37:23:d7:75:36:b9:61:b2:5c:d6:20:58:dd:
90:20:e0:e3:d2:de:6c:5c:01:8e:e7:98:1e:3e:df:12:53:84:
77:7e:1f:f8:52:5f:6c:2c:c5:0a:96:f0:fe:ba:85:dd:31:c7:
98:5a:cb:c8:f6:1a:3e:27:c6:84:ec:d2:3a:7a:bf:cf:4f:1e:
3e:f8:89:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:21 2024 by rpki-client on console.sobornost.net