Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5Lwpc_obFuUjEg10LQpiHr08SNA.roa
File: 5Lwpc_obFuUjEg10LQpiHr08SNA.roa (raw, json)
Hash identifier: F0qlI82/U4/H+egcgqIbbMoV9Wa8dgO9OpBxr2yvt5k=
Subject key identifier: E4:BC:29:73:FA:1B:16:E5:23:12:0D:74:2D:0A:62:1E:BD:3C:48:D0
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018CC6B88F3962ACC95AD54C3295976D194C
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5Lwpc_obFuUjEg10LQpiHr08SNA.roa
Signing time: Mon 01 Jan 2024 20:30:33 +0000
ROA not before: Mon 01 Jan 2024 20:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43726
IP address blocks: 193.26.214.0/24 maxlen: 24
91.198.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:8f:39:62:ac:c9:5a:d5:4c:32:95:97:6d:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 20:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4bc2973fa1b16e523120d742d0a621ebd3c48d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:8f:ce:56:21:37:77:5e:ea:fd:21:6d:92:
21:44:53:92:7e:b7:d1:92:27:49:d4:c9:0e:25:73:
02:bb:df:49:37:fe:ca:71:e1:67:4b:92:1b:a9:c4:
f0:53:aa:71:18:0c:b7:a4:d3:4b:ed:2d:f6:36:ea:
6b:f1:d1:70:fa:f8:ed:b4:9f:36:00:89:7a:4a:2b:
ba:2a:d5:79:b5:f5:e3:3c:3a:4d:e5:70:48:16:70:
69:f2:a5:4b:6d:f0:8c:3f:64:0c:7c:db:51:fa:ef:
a5:37:d8:b3:c1:28:de:5d:10:5e:4e:32:7d:dd:01:
2d:a1:89:c0:bb:fc:05:f9:eb:bb:71:77:bf:1f:15:
69:1e:22:71:26:de:14:78:c0:c7:a7:76:9a:a2:4d:
68:87:5b:91:bd:45:b4:45:9a:96:d1:21:6f:1c:7d:
28:53:9d:25:aa:58:fe:bb:a8:ba:1f:6b:e8:28:73:
b5:77:19:86:70:68:9a:1b:97:62:8e:6b:3c:b8:33:
a5:0c:a4:10:81:d8:33:7a:fc:6c:d7:8b:b0:29:4c:
25:fd:05:be:13:93:5a:0a:da:be:9f:2f:de:3a:38:
b7:7b:d0:e4:ff:9c:63:b6:15:00:d0:52:27:0c:f9:
c3:a7:b6:ed:59:a1:d4:6d:c2:17:0d:cf:fc:08:64:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BC:29:73:FA:1B:16:E5:23:12:0D:74:2D:0A:62:1E:BD:3C:48:D0
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5Lwpc_obFuUjEg10LQpiHr08SNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.130.0/24
193.26.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:81:fb:ef:74:40:ad:64:1a:83:3f:6f:55:d9:ec:aa:55:ff:
b4:03:56:8c:81:94:24:10:e4:96:7f:10:e7:9f:9b:50:68:92:
70:df:be:a2:f0:37:d8:e8:7c:38:20:34:e3:06:f6:99:ca:c4:
cb:0b:19:e9:de:fd:7d:c7:36:27:c3:c5:a7:3a:28:21:58:50:
05:4e:23:df:75:25:5e:2d:33:e5:98:5c:fc:1b:58:a5:a9:c9:
51:e3:78:11:ca:eb:6d:ab:7d:7a:0e:23:da:5f:d6:7e:b9:cf:
30:fb:11:9d:dd:3e:ce:4c:42:35:f7:b2:b5:de:a0:ca:8c:ab:
90:df:cd:83:80:57:bb:d3:11:17:df:29:f7:35:78:a6:44:0f:
3d:1d:97:25:64:81:ff:c1:5c:67:b2:a7:e9:b8:d3:d8:f5:10:
1e:f9:12:ca:37:09:6c:da:0e:a3:84:27:89:38:c5:99:86:77:
ca:39:52:a9:eb:e0:01:b3:35:bd:50:df:ee:1d:05:a3:79:51:
ca:0f:e8:a6:f1:fc:ac:57:c1:58:f7:4d:4b:0d:50:1d:db:37:
52:6a:c9:52:90:8c:8c:bd:85:ea:9a:78:6c:d0:ed:ad:ed:d7:
73:30:85:fa:a5:66:2a:47:82:7b:ec:b2:48:e6:3d:59:6c:57:
d7:42:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net