Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/MvszMt4pyXSCWsiugZ63HHgMY_c.roa
File: MvszMt4pyXSCWsiugZ63HHgMY_c.roa (raw, json)
Hash identifier: W5lwozrFnZeR1CqgIikuoXAaVvNz6aa2mr3wZURltxI=
Subject key identifier: 32:FB:33:32:DE:29:C9:74:82:5A:C8:AE:81:9E:B7:1C:78:0C:63:F7
Certificate issuer: /CN=d90a8131029257bff7614448e6f6b503c12bb29d
Certificate serial: 0192DCF3A308851C5DB4AD20B78A9A694B86
Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/MvszMt4pyXSCWsiugZ63HHgMY_c.roa
Signing time: Wed 30 Oct 2024 10:23:27 +0000
ROA not before: Wed 30 Oct 2024 10:23:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35585
IP address blocks: 193.43.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:f3:a3:08:85:1c:5d:b4:ad:20:b7:8a:9a:69:4b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d
Validity
Not Before: Oct 30 10:23:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32fb3332de29c974825ac8ae819eb71c780c63f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:4a:23:e9:e7:c7:61:64:28:fd:2b:ae:c5:
fc:69:92:2b:f3:98:16:52:f7:ce:08:8e:15:6a:c9:
27:6a:28:8b:44:09:14:e3:3c:24:7b:53:9c:0c:69:
71:9d:be:e2:a3:bd:3d:53:1c:b1:75:a8:29:66:bc:
96:1c:73:30:a4:6b:a4:d2:fd:eb:83:da:1a:25:19:
78:e3:2a:13:d8:db:3e:88:8a:3e:5b:be:81:17:ea:
e3:4a:fb:ea:d0:85:ef:c3:bc:65:7d:6f:79:0c:6c:
fb:6a:77:97:ea:13:1a:49:fd:fb:7d:a6:33:0a:07:
69:c6:8b:0d:0a:00:75:54:9c:f8:ee:f9:46:4e:35:
9c:71:e5:43:98:8f:4e:b9:61:f2:9e:90:c5:4b:db:
00:99:67:af:d2:c9:e8:eb:69:2e:73:c7:e9:82:64:
8d:da:2f:b8:7d:7a:1d:c8:85:1a:d9:a0:02:0c:56:
47:dc:5e:87:a1:1c:a8:29:75:e2:4c:22:96:5e:86:
da:43:21:60:ef:66:85:39:98:52:80:07:d5:20:01:
44:41:2b:ec:1d:3b:c6:dd:e0:bc:fe:9d:f5:96:e4:
ce:dd:97:0d:14:3d:c6:83:74:08:fe:a6:5d:66:5b:
e7:e5:95:46:64:74:e1:4c:e1:7f:2f:1b:e7:ca:c8:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FB:33:32:DE:29:C9:74:82:5A:C8:AE:81:9E:B7:1C:78:0C:63:F7
X509v3 Authority Key Identifier:
keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/MvszMt4pyXSCWsiugZ63HHgMY_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.228.0/22
Signature Algorithm: sha256WithRSAEncryption
57:5c:9a:f8:fb:40:8d:da:87:2c:c9:2e:25:66:d3:fb:82:e7:
01:ac:88:28:fb:a8:ff:b9:64:39:85:d8:53:0a:27:5b:1a:09:
05:c0:89:18:30:1e:45:f5:52:f1:14:05:7c:ee:5a:ec:0a:23:
b4:65:8d:40:ca:2b:1b:17:0a:35:93:65:97:53:8c:f9:40:7e:
20:86:7e:4f:98:22:46:af:67:a7:0e:69:2d:6e:55:5e:0f:f9:
86:13:ca:37:25:51:b4:4a:4f:d3:ce:2e:ef:6e:11:bc:03:5d:
53:c5:3e:f1:74:c5:79:fd:21:bb:4b:99:4f:db:78:2b:ce:f2:
2d:ba:b8:0f:ec:41:85:48:68:ea:fd:de:a5:5f:8b:df:35:b5:
71:d0:62:44:72:f3:60:bf:b8:40:15:33:8d:fa:23:ad:e7:65:
61:e5:ce:6d:2f:8e:16:d6:2c:86:f9:ba:fa:21:b4:fa:75:e9:
c2:13:d0:0e:70:ab:4a:6e:68:f1:c1:f8:df:e6:2d:25:6b:72:
e5:81:d9:d0:70:5e:84:2f:4a:f3:d3:67:c5:0f:4d:a7:fc:a2:
dd:94:48:79:4a:0e:48:ce:56:84:2f:8e:c7:7a:27:07:27:bc:
b5:de:dd:6c:12:61:ee:79:18:08:3a:33:fc:fc:54:52:c3:61:
22:43:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net