Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/Pgd2YkDuSdwvc7M_cFeAFIxzUhI.roa
File: Pgd2YkDuSdwvc7M_cFeAFIxzUhI.roa (raw, json)
Hash identifier: fraxzZ1Ofl/gSfWi9aVpMuuDIc9HovanTBBFvmHIb3s=
Subject key identifier: 3E:07:76:62:40:EE:49:DC:2F:73:B3:3F:70:57:80:14:8C:73:52:12
Certificate issuer: /CN=c68362992a9d4b91336955eaef63d5e4d6bd8a30
Certificate serial: EBDE96
Authority key identifier: C6:83:62:99:2A:9D:4B:91:33:69:55:EA:EF:63:D5:E4:D6:BD:8A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoNimSqdS5EzaVXq72PV5Na9ijA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/Pgd2YkDuSdwvc7M_cFeAFIxzUhI.roa
Signing time: Sat 01 Jan 2022 04:59:53 +0000
ROA not before: Sat 01 Jan 2022 04:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 193.243.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15457942 (0xebde96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68362992a9d4b91336955eaef63d5e4d6bd8a30
Validity
Not Before: Jan 1 04:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e07766240ee49dc2f73b33f705780148c735212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:84:4b:ff:4b:58:1b:74:5d:73:b0:4d:45:
39:7f:1a:1d:a3:06:53:ca:c3:83:4f:08:72:e6:a4:
64:7d:1b:2b:63:f1:fa:82:5f:e3:b4:54:53:01:dd:
01:95:a7:ef:28:11:76:21:d9:4f:02:3f:6b:b5:e8:
aa:40:bc:a4:62:93:4c:52:17:29:6f:75:df:ab:a8:
67:07:0d:90:ee:f5:aa:2a:83:0a:5e:5a:c9:40:c5:
99:d4:83:94:3c:ee:ef:97:27:da:07:ee:22:31:cb:
15:5a:f7:ee:18:c1:c5:65:9e:89:a9:16:45:57:fa:
41:a2:2f:fe:62:cc:8d:6a:a1:22:09:a0:31:7a:61:
28:fc:d4:64:0c:94:27:5c:a4:f6:74:e8:04:5d:52:
97:59:e9:f6:11:85:8a:ef:b4:73:c8:e6:08:80:4e:
de:fc:a9:60:4b:5f:90:ef:2c:ea:e6:a3:7a:48:32:
ea:01:d0:f0:41:a6:21:2b:dc:ee:30:2a:92:58:33:
e5:5d:98:49:a7:19:83:42:bc:fb:8f:5f:e6:b1:0b:
f9:63:5a:ef:ec:01:20:79:a2:a3:56:cb:2d:94:6e:
c6:c1:f2:4b:8c:71:53:6f:08:03:2d:32:5d:bb:7b:
5b:e0:95:a4:14:f8:eb:d6:0f:c6:6c:0a:3c:32:d7:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:76:62:40:EE:49:DC:2F:73:B3:3F:70:57:80:14:8C:73:52:12
X509v3 Authority Key Identifier:
keyid:C6:83:62:99:2A:9D:4B:91:33:69:55:EA:EF:63:D5:E4:D6:BD:8A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoNimSqdS5EzaVXq72PV5Na9ijA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/Pgd2YkDuSdwvc7M_cFeAFIxzUhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/xoNimSqdS5EzaVXq72PV5Na9ijA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.191.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c3:d2:bf:e3:eb:d8:e6:8e:bf:40:f1:33:fd:e5:a1:3f:90:
8a:e4:5c:13:15:93:54:9f:ab:8e:69:de:15:b3:a8:a0:5e:a9:
f5:28:b1:3e:19:f3:2f:ab:52:f9:19:9f:3e:6a:34:65:35:0d:
8c:c2:e2:0f:04:eb:bf:57:01:24:9f:de:0b:dd:cd:cc:48:e3:
4d:7c:fb:88:41:1c:5f:e2:35:ef:35:a5:93:8c:cb:27:a6:8f:
58:43:05:b1:81:19:87:8d:04:51:1b:30:d6:1c:3a:cf:1e:9c:
d0:07:db:7e:f0:29:71:5d:35:c6:15:9b:a8:84:84:e4:7f:af:
8e:79:72:af:14:a8:55:60:c2:bf:db:89:1c:ce:b6:98:be:bc:
41:51:25:ac:bc:8d:b6:df:02:be:9e:bf:ca:ad:cd:89:3c:c5:
d5:29:46:f6:de:74:72:a1:05:0b:e0:d6:d9:ac:cd:f2:57:20:
56:84:db:55:d3:8c:c4:33:95:84:c9:82:00:ee:2e:98:5e:cb:
92:cd:44:a8:0f:42:9a:d4:93:94:5c:87:ea:29:96:71:a6:91:
a1:64:c7:6f:42:22:38:48:41:e0:ae:4a:a4:24:38:e5:35:bc:
86:2a:31:c1:d3:21:7e:d1:d4:e2:4a:4e:2f:54:21:74:e1:d6:
57:03:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:40 2023 by rpki-client on console.sobornost.net