Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/qJmcuxNlZLcpN1zNtvzCpIHCxYs.roa
File: qJmcuxNlZLcpN1zNtvzCpIHCxYs.roa (raw, json)
Hash identifier: VEJ74JHA/u9gfS2vXEmmea9TcUtAcC/82SujZT5IE2k=
Subject key identifier: A8:99:9C:BB:13:65:64:B7:29:37:5C:CD:B6:FC:C2:A4:81:C2:C5:8B
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193ABBC4568EB792688461387B0240940F7
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/qJmcuxNlZLcpN1zNtvzCpIHCxYs.roa
Signing time: Mon 09 Dec 2024 14:04:22 +0000
ROA not before: Mon 09 Dec 2024 14:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 188.214.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:bc:45:68:eb:79:26:88:46:13:87:b0:24:09:40:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 9 14:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8999cbb136564b729375ccdb6fcc2a481c2c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:32:b6:96:b5:95:70:f8:b7:26:81:b2:b0:
6e:50:b1:09:15:01:23:93:6a:71:d4:db:83:5e:a2:
80:99:28:de:2d:94:e3:c4:f2:2c:f8:db:d7:af:07:
b7:51:34:a2:b2:3b:08:25:f8:ce:f9:de:c9:17:88:
4a:57:2a:dd:14:88:93:5c:2c:e0:d2:5e:43:d9:96:
05:28:fb:ca:c0:b2:ac:10:c0:ff:be:2b:a7:04:1c:
99:2d:f6:a6:24:8f:1a:80:38:a8:46:f7:d2:24:da:
e6:60:20:31:82:23:58:00:e0:84:4f:31:3f:db:16:
d7:85:d1:27:c5:b5:9d:2e:78:64:67:37:79:5e:b7:
fb:c5:3c:5e:17:17:31:3a:b7:67:43:c1:47:4b:42:
4a:0e:ec:85:eb:52:59:1b:37:ca:d1:33:51:16:66:
cf:d1:c6:c1:1b:d4:91:fa:de:a1:30:7f:dd:03:f1:
60:93:2a:c2:56:71:73:6b:cf:4e:ec:ff:c5:9c:5a:
98:5d:e7:79:15:b6:a6:76:26:6c:94:62:b8:c5:d1:
66:f9:cd:f4:92:c7:b3:d1:60:64:18:84:5d:39:21:
3f:57:94:2a:ce:0b:f3:48:23:51:8a:74:b3:ff:f6:
60:0b:9e:a6:87:f2:0b:9a:10:c7:9b:56:ce:39:5b:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:9C:BB:13:65:64:B7:29:37:5C:CD:B6:FC:C2:A4:81:C2:C5:8B
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/qJmcuxNlZLcpN1zNtvzCpIHCxYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.232.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:0e:86:90:67:2c:fe:31:7a:a2:f3:b1:09:b8:1f:3a:0d:16:
f8:5d:7f:82:ca:21:6a:10:ed:6c:ec:db:2c:b3:18:59:ad:b3:
78:c4:a6:84:d3:b9:e9:70:b2:9b:8d:c8:7d:be:df:1a:74:65:
31:ee:98:68:4c:cd:7d:e9:f8:81:e7:bd:4d:06:ae:da:92:cf:
af:08:4d:5a:25:ab:ff:13:72:02:43:f0:35:00:ce:a8:e3:c3:
65:97:3f:a1:17:40:51:c0:39:27:07:86:44:5c:58:f4:d5:76:
c9:c9:64:42:52:36:2c:c9:cc:72:3a:fe:53:38:41:f7:f1:88:
dc:ea:44:8c:cb:52:ea:16:b2:27:90:6a:0d:a9:24:58:f1:82:
3c:93:d9:f1:d4:e9:c5:5d:d1:59:22:f2:9c:46:20:f6:f9:22:
14:b2:b8:c9:94:4b:4a:a4:68:d3:cc:80:61:c9:d1:16:ec:4d:
a2:d2:ef:d6:5f:c8:59:83:30:a2:35:4d:ef:b9:ca:1d:ff:86:
6e:98:26:aa:d9:7c:ea:d4:c7:0f:92:d5:10:b9:4b:01:de:72:
66:20:03:86:b1:3a:44:11:c9:f4:9a:ab:7d:57:31:45:a9:bd:
5e:11:85:03:84:b4:1b:e8:c6:bc:72:9f:65:5c:05:f2:7a:b6:
eb:96:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:06 2024 by rpki-client on console.sobornost.net