Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/AjunsS-Z398boKWamg_R3HpG2dg.roa
File: AjunsS-Z398boKWamg_R3HpG2dg.roa (raw, json)
Hash identifier: IHxUhCfmgAiE5Iw7Buj50WKc2/XSI2kpYebXRiWmC4U=
Subject key identifier: 02:3B:A7:B1:2F:99:DF:DF:1B:A0:A5:9A:9A:0F:D1:DC:7A:46:D9:D8
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 019293FE56667F1EE646026078D1F2CE578A
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/AjunsS-Z398boKWamg_R3HpG2dg.roa
Signing time: Wed 16 Oct 2024 06:22:51 +0000
ROA not before: Wed 16 Oct 2024 06:22:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20967
IP address blocks: 193.39.78.0/24 maxlen: 24
193.108.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:93:fe:56:66:7f:1e:e6:46:02:60:78:d1:f2:ce:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Oct 16 06:22:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=023ba7b12f99dfdf1ba0a59a9a0fd1dc7a46d9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:79:75:a4:3d:24:42:f0:29:5f:e4:12:a6:
58:e8:5e:2b:f3:ce:67:a3:4e:4c:f7:89:59:c4:ef:
67:5a:7b:cd:d1:b0:88:ff:70:a8:4f:46:5e:f5:9b:
af:9e:cb:c7:4a:1b:d3:03:6d:de:32:d8:e8:7d:ad:
2e:1e:a1:7a:fd:db:92:e2:5a:bd:e5:c1:32:e1:df:
f9:92:d3:ce:1f:92:08:8b:44:68:1e:91:a8:ee:cc:
7f:35:69:e4:8b:0a:a3:91:94:f3:54:a4:0e:1c:9a:
c1:85:95:52:c1:4d:33:27:bc:37:26:12:38:00:e7:
b2:4a:62:ca:d9:ab:9e:87:e2:75:ac:8d:a2:65:c7:
4a:98:c8:1a:ce:c5:5c:ce:32:80:51:b0:a5:25:c8:
fa:04:3e:c0:a1:c8:9e:c2:4f:b6:ec:89:8e:e9:d3:
7a:01:68:e2:99:dd:ce:c0:ae:02:ec:80:d4:ae:da:
1d:26:ff:e2:35:6c:8b:44:1f:eb:40:ee:63:fc:98:
9a:86:f3:4c:a2:6e:dd:60:bd:52:1a:19:bf:5a:53:
e8:33:d3:6c:86:f6:85:fa:58:95:6e:1a:fb:5a:b5:
e9:5b:97:44:8e:59:50:5c:17:b7:91:3a:1b:97:25:
03:5b:46:45:a1:be:a6:e1:58:2e:a0:f8:9e:ee:0e:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:A7:B1:2F:99:DF:DF:1B:A0:A5:9A:9A:0F:D1:DC:7A:46:D9:D8
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/AjunsS-Z398boKWamg_R3HpG2dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.78.0/24
193.108.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:18:e3:8d:e8:96:ac:8d:59:a0:66:ef:54:e7:75:40:06:e3:
0d:c5:f9:44:b0:2a:65:82:c0:16:4b:f6:e0:fe:38:ae:64:c2:
f0:ab:a4:b9:21:0e:2f:a5:1f:58:b6:bf:18:85:da:58:6d:99:
8a:9b:e0:86:2c:be:f1:33:14:73:48:ff:49:ad:22:df:5c:e2:
0f:cd:a4:d1:1d:e2:ab:8b:5a:27:1b:4b:d4:a9:ed:98:e4:be:
c4:98:d4:72:e3:88:7a:ce:3b:87:de:dd:d1:01:66:11:6d:2a:
a2:b9:f2:bd:0e:a1:a9:31:9e:8a:4e:03:1e:5a:13:f8:c1:45:
1c:ff:f0:de:9f:fe:b5:a8:5d:49:cc:53:b6:37:4c:b2:06:ff:
27:f8:f5:d7:d9:62:5e:5d:a0:95:17:da:7b:a9:27:6a:ff:ae:
b5:3a:8e:be:58:05:c4:b3:38:4e:45:25:94:75:c6:7d:1f:83:
5f:26:f7:1c:96:19:18:f2:c5:d4:93:fb:57:91:8b:09:d4:98:
68:4b:64:ad:67:ec:2d:1f:b3:76:e3:c5:77:05:db:13:f3:0b:
e2:a5:22:ad:19:94:9b:ce:4c:fa:3a:f2:e6:77:c0:bd:ce:1d:
cc:5d:67:18:09:a0:52:e8:7c:1d:56:99:f5:a6:fc:c0:60:41:
ce:a8:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:47 2024 by rpki-client on console.sobornost.net