Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/r2iL_vycBtnZcrKFB53C0L4TLSA.roa
File: r2iL_vycBtnZcrKFB53C0L4TLSA.roa (raw, json)
Hash identifier: svOIFUas+I90031d6I9m9byTmGQM3OA9A8xZ3lEKiCk=
Subject key identifier: AF:68:8B:FE:FC:9C:06:D9:D9:72:B2:85:07:9D:C2:D0:BE:13:2D:20
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 0190FA41A55E20842D01A3348B0A03E4A42D
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/r2iL_vycBtnZcrKFB53C0L4TLSA.roa
Signing time: Sun 28 Jul 2024 16:52:04 +0000
ROA not before: Sun 28 Jul 2024 16:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215687
IP address blocks: 193.56.200.0/23 maxlen: 24
193.56.226.0/23 maxlen: 24
2a13:4300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:41:a5:5e:20:84:2d:01:a3:34:8b:0a:03:e4:a4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Jul 28 16:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af688bfefc9c06d9d972b285079dc2d0be132d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:c0:76:aa:3e:2c:b8:da:cd:fa:12:c8:67:
bd:b8:b2:c8:ee:a4:7c:48:42:1f:fa:ba:1d:ea:92:
50:cf:6b:7d:b9:cf:54:a6:54:17:b7:b2:72:94:99:
7a:c4:e4:14:23:8d:9b:ea:c7:88:39:d1:fa:56:91:
05:51:d4:0b:d8:48:e6:b4:b8:e5:55:04:21:63:41:
c0:a7:28:a6:fd:e7:6d:d2:a1:0f:9c:96:02:d4:79:
77:df:f7:08:8d:6e:0a:0b:d2:7d:b3:5a:eb:ec:ee:
c4:31:0f:66:fa:15:9f:af:a9:f6:3a:c6:14:28:a3:
6d:7b:2d:7b:9f:f3:73:8d:1c:ef:ea:08:e6:d0:5a:
63:a6:89:de:ed:fb:8f:96:c8:3e:b1:06:63:a9:4b:
6b:8c:26:ba:48:66:49:d5:a4:95:82:dc:55:63:99:
6d:90:0e:df:c9:72:ec:02:d8:23:da:e2:01:85:37:
19:2a:90:e1:85:fb:79:ca:49:59:8e:51:c7:43:1d:
72:8e:52:ec:3c:c0:c1:df:b9:4e:8a:29:8d:80:dd:
e7:f9:2b:92:36:6a:2d:36:dc:22:eb:ff:ff:28:af:
7a:ee:e4:65:4b:b7:ff:6c:68:55:20:fe:77:2c:0e:
ce:d2:0c:83:94:5c:8f:39:ef:85:f3:a1:7e:fa:d5:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:68:8B:FE:FC:9C:06:D9:D9:72:B2:85:07:9D:C2:D0:BE:13:2D:20
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/r2iL_vycBtnZcrKFB53C0L4TLSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.200.0/23
193.56.226.0/23
IPv6:
2a13:4300::/29
Signature Algorithm: sha256WithRSAEncryption
15:1d:86:62:6e:d1:08:cd:16:6e:20:6c:8a:02:e5:49:97:a4:
a8:20:89:9f:c8:b3:0b:b5:df:97:e9:01:8e:85:50:dd:c1:7e:
d8:47:67:20:07:a2:95:50:d3:a3:08:a6:bd:fe:8f:27:5e:76:
28:43:f2:b0:08:40:ae:d7:3f:72:c3:a9:08:57:f0:08:9c:3c:
7d:50:03:1d:e4:4a:40:ef:9f:e1:71:55:87:93:a3:b5:0e:65:
54:e3:1f:73:13:22:3c:ca:b6:e8:4d:b6:29:cb:4d:15:82:0b:
e4:58:ea:f7:d4:0d:a0:d1:5b:51:4a:26:37:ff:ce:f5:90:84:
4a:c6:c7:bc:cc:de:70:67:8c:a4:78:10:37:f2:13:f8:07:1d:
c7:6d:cf:06:4e:b4:57:0e:ee:9e:63:6a:d0:aa:1e:9f:45:07:
0c:2f:02:a0:59:93:09:1d:35:f2:3e:c0:db:87:a9:57:7b:06:
13:e5:f6:c6:cf:c7:9a:19:3e:4d:c0:d8:76:0c:84:78:22:9f:
9c:49:38:f3:8e:75:18:44:06:09:0c:e5:bc:e0:22:da:22:43:
f7:53:c8:d8:a9:90:0b:6f:d4:1d:81:19:27:ef:1b:ca:c0:99:
60:ad:96:94:23:d7:99:6a:10:8a:d2:ff:47:24:79:16:74:9b:
19:21:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net