Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/RINCkGgCNk_9wJV89Tg2zMMqJLA.roa
File: RINCkGgCNk_9wJV89Tg2zMMqJLA.roa (raw, json)
Hash identifier: kSY8QZJQtSlIrRuDuZPZJ5Dcgcgd1mk/ui+6uCr0Zns=
Subject key identifier: 44:83:42:90:68:02:36:4F:FD:C0:95:7C:F5:38:36:CC:C3:2A:24:B0
Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial: 018CC801AE5504D94FF385209DFBC16A9AD2
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/RINCkGgCNk_9wJV89Tg2zMMqJLA.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35775
IP address blocks: 194.88.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ae:55:04:d9:4f:f3:85:20:9d:fb:c1:6a:9a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=448342906802364ffdc0957cf53836ccc32a24b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:87:94:4a:62:78:8e:5a:68:4b:27:06:ab:
f0:97:e0:08:a2:f8:38:dc:f7:d2:6c:54:32:56:24:
2d:d3:93:f5:98:0a:53:f3:de:99:5e:0d:85:a4:66:
b3:db:38:28:6d:dd:bf:ca:34:a3:0d:03:61:32:7d:
b3:af:24:33:b0:cc:f5:07:e3:bc:ba:22:e4:83:e3:
38:6b:07:6e:c2:35:f3:b1:67:55:db:01:d6:d2:bc:
8d:fc:99:17:09:03:7e:bc:3e:e5:40:c4:c3:46:92:
ca:80:ea:58:1b:83:95:66:55:ef:46:cc:91:76:68:
47:d9:45:64:24:92:32:15:5b:2f:5e:e5:eb:97:54:
78:83:86:ea:94:b5:a6:1a:2f:66:ed:85:94:7c:ec:
e9:b4:57:e2:4f:77:a8:13:af:84:a6:a8:38:48:96:
e4:63:d1:e6:8c:3f:62:0e:ab:17:91:03:fb:16:81:
fc:d9:26:cc:f4:cb:06:54:32:00:41:67:b6:c5:3d:
0d:6a:27:a8:1e:09:b0:f9:7b:7b:b8:ac:94:b6:76:
63:fe:84:1d:ae:6f:6d:1e:21:ef:a9:1f:eb:43:ec:
45:a8:6f:84:b0:ab:6b:63:70:76:f3:2f:98:f2:01:
16:2b:ed:a9:3b:ec:f0:96:9e:be:7b:1f:80:c4:0d:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:42:90:68:02:36:4F:FD:C0:95:7C:F5:38:36:CC:C3:2A:24:B0
X509v3 Authority Key Identifier:
keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/RINCkGgCNk_9wJV89Tg2zMMqJLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.148.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:a7:06:5e:d3:19:20:9a:80:87:07:3d:17:99:a0:0d:e2:29:
7a:1d:e1:cf:7c:50:b7:53:2e:0f:84:2a:28:1c:bd:29:8c:88:
3a:4d:a4:2d:4c:40:95:d3:b0:6d:6e:55:cf:f7:f9:c0:17:ce:
1a:1a:3c:a5:cf:ac:48:ed:f5:7c:e2:52:23:8e:eb:95:29:8b:
e3:7d:3a:8e:1d:73:44:38:28:e4:7b:8a:4f:b3:52:8a:6d:52:
05:f0:00:b8:0c:90:48:b9:cf:3a:8e:01:d0:ee:48:80:c8:5a:
f5:0f:00:e1:70:7a:f7:42:ad:1d:28:0d:59:52:9a:2e:c3:a8:
4a:8b:39:d9:3b:13:fa:db:a5:a2:24:7f:39:fb:d9:f1:fd:87:
d6:71:a4:94:46:39:54:29:ab:ea:e0:30:76:3a:65:02:47:f3:
8d:2c:b9:49:02:e6:87:66:c5:ec:0e:17:4e:f2:60:32:48:7f:
c0:0b:77:d5:d0:06:01:c4:58:9c:5b:05:87:11:17:cd:e2:ec:
26:a8:4c:5e:cf:66:c2:d8:2d:5e:52:b8:da:a7:7f:78:c2:04:
24:6b:a4:9f:10:bc:fc:c9:1a:ac:03:93:af:fa:1b:58:da:80:
36:2a:21:6b:f2:6d:63:45:00:f0:a9:d5:a4:c1:45:d3:f5:d0:
a5:5a:ad:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:59 2024 by rpki-client on console.sobornost.net