Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/5ImL9jRCh5xPNvicUQ9-K8UhgSk.roa
File: 5ImL9jRCh5xPNvicUQ9-K8UhgSk.roa (raw, json)
Hash identifier: tQlv5U68BmTZdxCNy9jWRjNVFVUG04WnbzwoeiUbr5c=
Subject key identifier: E4:89:8B:F6:34:42:87:9C:4F:36:F8:9C:51:0F:7E:2B:C5:21:81:29
Certificate issuer: /CN=5ff4616f5cca34634b42311a0ea3d11864dada22
Certificate serial: 01856C010AACF85E88A788EB6E8BA0F37390
Authority key identifier: 5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/5ImL9jRCh5xPNvicUQ9-K8UhgSk.roa
Signing time: Sun 01 Jan 2023 06:24:45 +0000
ROA not before: Sun 01 Jan 2023 06:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44285
IP address blocks: 194.56.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:0a:ac:f8:5e:88:a7:88:eb:6e:8b:a0:f3:73:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4616f5cca34634b42311a0ea3d11864dada22
Validity
Not Before: Jan 1 06:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4898bf63442879c4f36f89c510f7e2bc5218129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:49:22:90:e9:9b:5e:66:51:4a:e3:e8:f6:
31:b0:25:c2:06:5d:9e:1c:ef:13:b1:61:17:dd:cc:
45:35:f8:08:ea:9d:bb:05:9b:b2:d9:6a:64:c6:6b:
30:ce:b2:5d:30:8d:fe:61:cc:85:a7:cb:c9:30:5a:
05:95:95:fb:cd:3a:44:50:d3:46:34:ab:1d:51:a8:
23:83:15:73:8f:46:ab:bb:ed:92:46:79:2a:c9:4e:
ff:1b:6d:00:10:1d:1d:03:9c:23:84:50:6b:ac:f2:
46:f5:21:b7:07:da:e8:46:ed:e4:0c:ea:e4:c7:e0:
7a:a6:59:ab:7d:ab:f5:7c:d4:84:0d:b5:1b:49:d4:
5f:e0:3f:4c:ed:d8:ca:27:59:d6:65:57:9b:76:0c:
3f:89:23:dc:57:6e:97:4b:71:60:18:e8:35:8a:5a:
69:bf:17:02:e2:58:0b:44:38:25:18:37:65:28:98:
c9:2a:40:2d:8a:87:a6:4c:35:3b:31:c7:54:c9:b9:
1e:0f:0e:10:95:6b:61:9a:a8:d7:d4:d2:16:27:96:
b4:95:9a:83:18:22:5a:62:3f:6c:87:53:e3:b4:43:
44:66:96:6d:c1:54:c1:4e:5b:1b:91:b2:6c:c6:9f:
94:77:74:29:b3:fe:a9:55:af:0d:f3:56:0d:06:af:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:8B:F6:34:42:87:9C:4F:36:F8:9C:51:0F:7E:2B:C5:21:81:29
X509v3 Authority Key Identifier:
keyid:5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/5ImL9jRCh5xPNvicUQ9-K8UhgSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:88:03:4a:d6:96:3a:69:35:d1:03:7b:0d:6c:75:c7:25:07:
ab:8f:33:c9:66:4e:5e:0d:eb:df:c3:b7:a6:48:b6:2e:8e:2a:
5d:e3:64:45:95:93:8a:4b:9f:34:5a:88:39:31:6d:82:f1:ee:
84:36:5c:a1:45:4d:d6:c9:e3:87:9e:02:9e:1a:ea:3a:1c:47:
6b:42:23:9e:80:73:af:95:56:7d:20:28:4e:a1:04:3a:67:45:
6c:fa:31:88:b0:9b:75:6b:87:97:8c:e7:52:e3:94:1c:21:77:
52:f1:e0:9d:8d:9e:d6:8e:12:35:3b:d5:57:47:71:48:db:19:
66:da:98:f4:31:db:b8:01:dc:7d:6f:4b:43:46:81:97:0e:ae:
31:d2:86:57:b1:ff:11:d2:0c:bc:ae:c5:be:60:2f:0f:97:55:
4e:b2:f5:aa:c7:5e:83:90:06:12:ae:31:d8:e2:d5:c4:c8:a7:
83:ca:e5:21:85:ae:a0:0a:f6:10:2a:ba:1f:70:e9:0c:c6:2c:
69:4e:0a:3c:67:82:20:fa:e4:3e:40:c2:b9:87:89:13:ed:f3:
c8:7d:39:94:7e:3b:55:24:d7:20:88:76:7d:2c:16:af:21:61:
0f:ae:14:63:0b:f3:b9:ca:ba:7c:d9:95:f8:24:40:8b:f5:7d:
cd:0d:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net