Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/hHMa_VVzWNX0yUS8GLoAZQ92dhw.roa
File: hHMa_VVzWNX0yUS8GLoAZQ92dhw.roa (raw, json)
Hash identifier: wKSgcdUNez8LyBt5+EnQIOjkHPyqOeDQqJxcCnniCK4=
Subject key identifier: 84:73:1A:FD:55:73:58:D5:F4:C9:44:BC:18:BA:00:65:0F:76:76:1C
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 019179E7D6E22759241D2D9C81B559F80173
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/hHMa_VVzWNX0yUS8GLoAZQ92dhw.roa
Signing time: Thu 22 Aug 2024 11:45:22 +0000
ROA not before: Thu 22 Aug 2024 11:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201228
IP address blocks: 193.135.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:e7:d6:e2:27:59:24:1d:2d:9c:81:b5:59:f8:01:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Aug 22 11:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84731afd557358d5f4c944bc18ba00650f76761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:12:7c:43:91:a8:e8:8d:81:f1:e8:e3:3d:
ca:a6:8e:d9:fb:98:6d:b5:67:e9:ec:30:ff:9c:b8:
1f:c8:78:48:26:8e:a3:8b:14:aa:fd:f3:8e:86:fb:
d4:4f:7a:fb:85:e7:10:00:d3:18:84:34:f9:fa:7d:
d9:3b:70:6e:61:e5:9b:ea:d6:21:67:59:6a:f5:e4:
5b:06:f4:8a:0c:ce:fc:80:1b:77:1d:32:5d:0c:21:
6f:20:e8:eb:57:fc:9c:a5:de:d6:4d:d1:4a:6e:4e:
4b:5d:8e:91:44:df:c7:64:ca:cc:a3:32:4b:da:00:
d8:84:28:ed:17:91:16:9d:c9:2e:46:70:c0:de:db:
44:be:c8:8e:86:31:a8:18:bf:e2:5f:c8:69:90:80:
f0:1a:39:15:6f:ee:88:24:ae:af:c7:2c:be:48:ed:
b2:6a:94:4c:a9:e4:a2:28:56:4c:70:65:a4:60:8c:
70:bb:e7:45:60:da:98:6c:bc:b2:2c:d4:da:99:a8:
6d:b8:1a:16:f6:07:d0:40:5e:73:09:4c:7c:a7:3c:
c4:fa:c9:0e:17:f1:19:38:c8:35:24:b9:8f:e0:b8:
51:ab:22:96:fa:8b:ff:8c:a0:95:31:db:ad:3a:cf:
5b:19:57:37:41:00:65:77:13:77:04:52:dc:79:4b:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:1A:FD:55:73:58:D5:F4:C9:44:BC:18:BA:00:65:0F:76:76:1C
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/hHMa_VVzWNX0yUS8GLoAZQ92dhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.99.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a5:c3:4c:e2:36:bb:bf:87:c4:76:e2:3f:17:0b:81:01:38:
98:d5:90:f9:c1:a2:dd:e7:a9:d5:11:c3:13:2c:4c:2a:57:dd:
b9:86:e9:cc:fd:b7:6b:93:eb:5b:38:55:99:a7:df:d4:f8:d0:
81:ae:67:b7:a2:28:c0:f5:b3:6f:46:7a:3f:6e:6a:89:05:56:
cf:05:1c:10:4e:15:4e:da:c1:e5:03:13:13:36:6f:03:a3:38:
db:a2:11:b0:ce:28:4e:79:b0:02:a5:95:db:b4:b4:48:a4:ec:
56:a3:64:4c:b9:25:a4:85:3a:b9:fe:00:09:64:8a:88:ee:f5:
8e:75:3c:fc:af:69:f4:1f:72:48:8c:91:9f:ab:c5:a3:ee:61:
b0:a6:be:1d:97:24:eb:5d:db:80:a0:5e:21:79:c8:f6:32:7d:
7c:42:47:16:c1:b8:d2:52:2c:b8:b6:d1:68:71:c0:11:60:84:
3d:9b:e9:b8:d2:8e:b5:4d:d4:89:9f:5a:9c:32:e7:32:10:51:
3e:e8:2b:84:99:45:5e:da:5c:18:76:02:22:90:3c:e1:3e:2e:
55:87:26:c8:a7:7e:6a:65:2d:a6:b8:65:12:1d:96:df:50:a8:
54:f1:66:03:a5:3d:c8:f8:e1:29:dd:e2:dc:50:26:56:06:f2:
d2:ee:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net