Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/JuSbTcFakEFE4mQQsN1VvMqwCTU.roa
File: JuSbTcFakEFE4mQQsN1VvMqwCTU.roa (raw, json)
Hash identifier: E2ZFKHAvG7cx+cBgXkG15PV/dfxJMafKStQccMr73Eg=
Subject key identifier: 26:E4:9B:4D:C1:5A:90:41:44:E2:64:10:B0:DD:55:BC:CA:B0:09:35
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193ABBC468AC490403E4DBB696B06680FC9
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/JuSbTcFakEFE4mQQsN1VvMqwCTU.roa
Signing time: Mon 09 Dec 2024 14:04:22 +0000
ROA not before: Mon 09 Dec 2024 14:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 128.65.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:bc:46:8a:c4:90:40:3e:4d:bb:69:6b:06:68:0f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 9 14:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26e49b4dc15a904144e26410b0dd55bccab00935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:64:46:87:c7:d5:3e:47:97:c7:8e:4e:01:
3d:f1:92:97:d1:39:83:36:53:68:89:6e:60:08:6e:
56:30:57:94:d0:12:b3:fe:48:18:ac:cd:4b:1b:60:
55:c1:6e:b0:74:f1:8c:28:cf:08:e7:29:8a:fd:d8:
32:69:c4:11:76:40:d3:eb:60:22:fc:33:b2:17:bd:
56:fc:3d:c7:df:1b:2a:04:36:89:0f:b8:d5:b2:14:
42:70:59:33:07:d6:40:70:7a:24:77:c4:e3:5e:1c:
d5:fa:ff:99:7d:7a:42:43:0d:71:96:2e:2a:81:5e:
5d:82:61:48:e7:5b:51:e6:36:f2:e2:24:a8:69:ca:
b0:30:ff:99:f3:bf:80:39:17:3f:85:26:35:33:6f:
77:d8:a5:de:75:81:f8:0a:fc:6d:75:ff:ee:5c:e1:
21:1c:26:d3:55:36:c4:2a:92:cf:0a:14:26:8a:1f:
52:4b:90:c2:ab:27:91:ec:49:d2:d3:3a:a6:60:2f:
dd:df:24:37:5b:f0:81:51:7e:3b:45:73:13:1e:dc:
01:a4:de:9c:43:9c:2f:72:14:91:3d:8b:3a:54:9c:
3e:36:7f:77:71:19:74:e3:1f:85:21:ed:49:e0:11:
b3:20:8d:4e:c9:65:8b:0f:fb:ab:1f:78:84:78:96:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:9B:4D:C1:5A:90:41:44:E2:64:10:B0:DD:55:BC:CA:B0:09:35
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/JuSbTcFakEFE4mQQsN1VvMqwCTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:9d:2a:1e:5a:7a:76:8c:d7:35:c5:a5:16:9e:0a:33:55:59:
0d:6d:53:66:74:eb:5a:ea:e9:69:67:7b:1e:2f:fc:17:be:cc:
4d:7e:7e:5f:52:94:6b:d3:7e:0a:81:04:75:e6:8d:24:9a:a5:
5f:47:78:5d:b9:74:89:0f:ea:2a:01:26:d8:f7:18:4f:21:c2:
7b:10:60:65:10:74:65:36:9c:1c:62:3a:90:82:29:21:47:26:
28:3e:e7:f3:36:1a:95:03:43:33:f5:8a:1b:ce:d7:4e:82:45:
27:a5:56:ed:d1:0c:8e:0f:7e:b5:1f:40:9f:74:5b:54:4d:19:
12:ff:6f:98:5b:8d:2e:ca:16:78:82:92:81:91:19:52:d4:32:
31:33:ff:96:f3:4a:d7:81:48:bf:bb:f2:e7:4b:7b:de:41:af:
83:74:cf:ca:4d:41:5a:af:70:32:e5:1b:cc:43:63:08:6b:3a:
6c:d6:7b:8b:3c:e6:e8:95:1f:85:72:a0:68:9f:ec:dc:cf:4e:
73:88:3f:7a:de:31:2f:e0:20:35:03:b0:64:80:74:65:c2:32:
d0:87:00:bf:95:b3:1e:24:0f:ed:37:6f:7c:1a:10:7e:c7:b3:
bc:f8:74:d4:28:cc:52:72:1f:1c:e1:46:8a:30:14:fd:1f:81:
36:80:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:06 2024 by rpki-client on console.sobornost.net