Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9eJcpuy9YcYDp18-zdF3Wsl4uSo.roa
File: 9eJcpuy9YcYDp18-zdF3Wsl4uSo.roa (raw, json)
Hash identifier: QJE5DG1O8oTwXB7CDLy24NksVDWUhwrHvZCy5vwr1Ik=
Subject key identifier: F5:E2:5C:A6:EC:BD:61:C6:03:A7:5F:3E:CD:D1:77:5A:C9:78:B9:2A
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193ABBC46CDA18975C83132A57F6480F344
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9eJcpuy9YcYDp18-zdF3Wsl4uSo.roa
Signing time: Mon 09 Dec 2024 14:04:23 +0000
ROA not before: Mon 09 Dec 2024 14:04:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 194.26.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:bc:46:cd:a1:89:75:c8:31:32:a5:7f:64:80:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 9 14:04:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5e25ca6ecbd61c603a75f3ecdd1775ac978b92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:eb:2d:f2:8a:c7:74:1a:57:de:eb:47:5b:
48:2f:c1:31:f9:b0:69:5c:b3:c0:47:52:e4:e8:1c:
c8:e4:85:b5:a1:36:a8:a8:5a:8a:ff:0e:7c:b6:3c:
2c:25:59:30:58:53:26:69:2d:dc:7a:01:40:3e:55:
b2:e2:32:fb:9e:19:36:2b:5a:c9:2f:5e:26:6b:ec:
6e:f7:3c:19:25:40:83:77:ae:cc:d5:24:b1:cb:84:
6e:4c:44:e3:c9:66:aa:42:99:2b:f9:69:02:d5:60:
fa:cc:e6:24:c4:f8:3d:f3:44:6e:27:3c:d6:d6:c1:
8d:a9:33:e2:30:c0:66:a9:fc:05:7a:5a:52:26:66:
07:c7:fe:24:86:6d:31:94:35:8a:5a:90:8c:8c:7f:
75:af:f6:f9:35:fe:92:7a:8d:9c:08:22:8d:63:c3:
43:21:45:b4:e4:e6:e6:71:ff:38:b6:22:5b:98:6b:
7c:d2:9f:ed:b4:0b:92:04:d9:bb:9a:d1:85:0b:5c:
fe:7c:f8:f5:26:6c:41:70:66:e0:0b:d9:72:70:d7:
14:9e:89:f4:7c:6f:f2:25:34:22:c1:86:9e:84:0f:
07:5d:04:83:45:b9:0a:ed:cd:e2:10:db:9a:69:36:
7a:24:99:88:fa:35:12:32:a3:11:61:f1:03:7b:80:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E2:5C:A6:EC:BD:61:C6:03:A7:5F:3E:CD:D1:77:5A:C9:78:B9:2A
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9eJcpuy9YcYDp18-zdF3Wsl4uSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.20.0/24
Signature Algorithm: sha256WithRSAEncryption
30:85:6d:e2:fe:14:f9:21:5f:37:d5:24:c1:eb:dd:f2:53:1a:
05:23:94:79:4d:ba:4d:d6:69:9c:48:95:cd:5b:83:e8:0b:03:
42:40:f4:a6:a2:c4:16:32:bc:7d:ff:b8:73:e6:75:36:d9:fa:
13:d6:22:dd:6e:27:07:9c:fb:eb:9a:4e:7a:74:7d:7b:bf:7c:
a4:6d:6c:bd:ae:18:b0:c5:62:98:be:79:b7:c6:27:00:01:44:
a0:18:cd:a1:70:d9:eb:ba:8f:89:b3:85:b5:9a:f1:1c:2f:8f:
32:7c:06:7b:42:58:4e:4e:69:a7:db:8a:0f:12:26:2b:a7:e7:
ea:57:27:e6:3f:d6:4f:b4:e0:e4:60:bd:bd:33:71:70:ee:7a:
07:df:d5:42:66:d1:89:cc:df:7e:53:67:8e:48:43:86:56:6f:
cc:f2:08:79:a8:46:6a:d6:05:ac:ee:c2:6e:f8:9a:41:21:e9:
54:97:bd:9e:6a:19:d3:ba:6c:ee:cb:2c:a7:2a:f6:25:75:aa:
2c:a8:a5:0f:5c:f2:8c:72:f5:50:f4:34:63:e2:0e:9b:a2:d3:
e6:18:e6:04:e1:ff:6e:d6:43:ed:7d:62:46:ab:20:91:75:7d:
03:8d:c2:45:4c:7a:cd:0d:d5:a1:36:87:a5:ae:7b:40:0b:8a:
89:c2:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:06 2024 by rpki-client on console.sobornost.net