Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VCRjqsevGyLsX2f1m05Yn81WsDk.roa
File: VCRjqsevGyLsX2f1m05Yn81WsDk.roa (raw, json)
Hash identifier: YXK/sqVjiC8F5cGmZF+puvx3FhEnEY4V634hhTINFTk=
Subject key identifier: 54:24:63:AA:C7:AF:1B:22:EC:5F:67:F5:9B:4E:58:9F:CD:56:B0:39
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0193BA4A790701FE5BA9B57A08DB8ED06291
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VCRjqsevGyLsX2f1m05Yn81WsDk.roa
Signing time: Thu 12 Dec 2024 09:54:22 +0000
ROA not before: Thu 12 Dec 2024 09:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 203.188.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:4a:79:07:01:fe:5b:a9:b5:7a:08:db:8e:d0:62:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Dec 12 09:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=542463aac7af1b22ec5f67f59b4e589fcd56b039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:1c:95:4f:f8:42:5c:c1:71:f7:c4:11:92:
0f:b6:17:6f:f0:82:35:7b:2b:81:0a:e7:c1:5b:35:
7f:44:ab:86:a3:99:58:93:9b:8d:ba:d1:0d:f0:96:
47:fb:fa:ff:25:e1:1c:c2:db:00:ce:46:87:cc:cf:
79:89:25:1c:a2:70:d7:ea:dc:c6:e6:a2:95:1a:be:
9a:8f:4d:a1:ac:9e:20:48:65:e4:48:28:8d:14:1f:
1c:3d:87:33:02:f6:94:e6:f0:7a:7f:a1:9a:7a:83:
d9:1c:59:70:83:0c:09:6c:3c:d2:d4:85:59:83:ea:
f1:20:8d:c5:da:73:1d:06:5f:3b:c3:b6:be:20:82:
b6:08:7f:ba:e1:61:1d:b0:78:47:e8:7d:de:4e:9e:
35:3e:b6:6e:20:b8:bc:ad:a5:e2:f2:a6:6a:f9:da:
9c:b2:4e:2c:e8:5e:87:d2:63:d7:cc:d7:5d:57:35:
e5:90:02:bf:2c:4f:ae:c5:27:94:f5:45:fa:b1:dd:
18:13:1a:f9:4e:ae:a0:52:5c:f5:a8:4e:0c:36:15:
17:0b:6c:a1:8e:57:79:65:e6:9a:da:d2:18:42:43:
de:aa:28:4f:22:8a:7b:6c:f4:25:f0:95:be:45:7e:
4f:0a:cc:8b:4b:2d:91:50:ee:4d:52:0c:0d:18:70:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:24:63:AA:C7:AF:1B:22:EC:5F:67:F5:9B:4E:58:9F:CD:56:B0:39
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VCRjqsevGyLsX2f1m05Yn81WsDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:51:0e:4d:c3:81:5d:60:3c:18:f3:bd:15:09:09:03:8d:d7:
de:6d:91:36:f7:75:7a:86:ba:88:53:61:d5:cd:0b:07:e3:e8:
04:d2:d2:b0:b7:a4:f2:c1:80:d5:cd:5f:38:7e:b5:96:4a:b0:
f8:e2:17:89:c9:d7:4a:fb:ff:a4:79:9e:aa:fb:30:ff:c1:07:
69:c7:27:50:1c:ed:f7:52:aa:41:b4:87:1f:bf:8f:4d:0d:45:
b8:2f:9b:3b:9b:82:b2:79:e9:25:37:10:7a:b6:19:d4:7a:75:
da:a4:ce:4c:54:e8:29:33:f6:6c:3b:ad:51:e6:b6:ba:c6:af:
a5:d8:f4:da:50:14:aa:0b:c7:b7:df:95:4c:4f:c2:81:da:c4:
6c:76:05:b2:fc:98:ce:cc:34:bf:ea:28:a0:f9:44:79:06:7f:
0d:cd:7c:3f:0a:a1:6b:bf:26:c4:79:54:29:d1:5c:b4:35:2a:
2f:fa:f3:14:c9:88:71:37:32:d0:1c:11:03:7e:98:d3:ca:2f:
35:77:35:b0:50:11:e2:ea:f8:4e:17:8e:24:e8:89:ee:3a:3f:
1b:f1:f4:ab:c3:9e:d7:c6:39:60:f4:2e:a7:a6:76:43:72:30:
04:ad:c4:12:11:54:7b:70:26:7d:5b:97:f8:87:13:7d:28:ff:
ec:9e:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:53 2024 by rpki-client on console.sobornost.net