Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/8bQGqk-oNt7mBr3Bsf4bVrNPC6I.roa
File: 8bQGqk-oNt7mBr3Bsf4bVrNPC6I.roa (raw, json)
Hash identifier: YPQkExPvxEuYPR5g03BRfEuUe8JqcQ3UwSKWou3O9cA=
Subject key identifier: F1:B4:06:AA:4F:A8:36:DE:E6:06:BD:C1:B1:FE:1B:56:B3:4F:0B:A2
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 01936E3E7FFDC87AC849C2800E9875A567EA
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/8bQGqk-oNt7mBr3Bsf4bVrNPC6I.roa
Signing time: Wed 27 Nov 2024 15:30:09 +0000
ROA not before: Wed 27 Nov 2024 15:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214659
IP address blocks: 193.143.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:3e:7f:fd:c8:7a:c8:49:c2:80:0e:98:75:a5:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Nov 27 15:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1b406aa4fa836dee606bdc1b1fe1b56b34f0ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:48:02:58:b6:6e:0a:48:83:be:4d:69:c9:
e1:47:1d:97:6f:b8:6d:56:29:c1:f6:0e:a3:a1:5b:
4e:d5:eb:7c:95:5d:cd:0a:2e:d6:24:06:fe:34:3c:
af:b5:2e:ad:d6:f0:93:49:0a:2f:b3:b2:90:e9:31:
02:0e:87:aa:55:01:a4:59:60:b0:7d:cf:28:81:8f:
7c:9b:e9:d5:66:ca:de:a6:68:a2:c8:be:45:11:b8:
9a:54:d4:87:da:02:7f:5f:e1:39:80:10:2d:09:42:
ab:60:ec:b4:26:db:d8:e4:41:2a:c8:ac:6d:bd:c8:
97:91:16:f6:fd:a0:2f:44:47:7d:aa:45:7e:2c:b0:
e7:fe:60:37:f3:f0:33:dd:a7:b7:3b:3a:7c:a2:07:
8e:e6:6d:52:13:0b:49:74:d0:e8:0b:58:aa:fa:9f:
4a:c4:b9:60:74:5b:8e:50:44:86:f5:e9:1f:4f:d7:
69:2d:b8:86:65:51:cc:d1:b4:50:e6:e5:e8:e5:f2:
70:b2:4d:92:d4:c5:56:5f:3a:c5:3c:9d:7c:38:db:
f0:81:31:b7:6b:0b:c5:37:d1:10:86:51:58:51:ce:
47:c3:19:b6:c2:09:44:58:9b:e3:ce:09:70:c5:74:
bf:20:5b:86:28:0b:76:db:75:a5:82:25:e4:28:fd:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B4:06:AA:4F:A8:36:DE:E6:06:BD:C1:B1:FE:1B:56:B3:4F:0B:A2
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/8bQGqk-oNt7mBr3Bsf4bVrNPC6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c0:22:57:2a:11:34:3d:3c:5b:ca:82:f0:07:2e:77:76:bf:
1a:a7:c8:e4:e0:d3:85:c0:0b:b7:15:98:f4:c0:67:b2:14:b8:
5e:9e:21:c9:c0:03:ee:9a:16:de:0c:03:75:e7:8c:06:b0:b9:
32:d2:71:05:c7:ce:ea:ee:40:07:cb:49:cc:6a:d7:6a:01:5d:
f5:a2:10:63:b5:d5:2a:a6:5b:d5:bb:6f:2d:4d:3a:c3:56:2c:
b3:9f:76:7a:c2:13:ed:ff:c5:45:e6:43:a5:63:53:05:cd:92:
5a:04:97:90:59:72:6f:98:44:37:89:58:41:d1:4b:18:68:3f:
4f:9e:f2:f7:1d:02:4f:7b:b8:e9:93:15:ef:57:d4:31:34:2b:
69:c7:80:2e:ff:da:cd:ab:47:d5:31:56:29:64:bb:c3:04:70:
42:b2:1d:f0:d4:06:f2:d8:3a:c1:0e:33:81:16:12:74:97:7c:
29:3b:a7:d3:f9:76:1d:f4:41:b1:7e:34:c7:9b:7a:8d:14:af:
f3:93:53:72:34:33:76:23:bc:42:fd:f6:3a:c5:97:07:1d:80:
5b:28:1b:68:bc:3f:40:cb:dd:19:b1:d4:6e:57:0f:dd:7d:22:
7f:99:a4:21:db:08:a2:a8:46:e6:17:3f:6b:65:1c:ac:e9:a4:
d6:60:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:34 2024 by rpki-client on console.sobornost.net