Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/uyP0zsnL_2dc2XpjOAjE7vjsYoM.roa
File: uyP0zsnL_2dc2XpjOAjE7vjsYoM.roa (raw, json)
Hash identifier: Dqgn/WVHVgYbSkoWcECoyGFa8OHiYaBJEnxi9lu+XXA=
Subject key identifier: BB:23:F4:CE:C9:CB:FF:67:5C:D9:7A:63:38:08:C4:EE:F8:EC:62:83
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 01927143F4EC1F3BE579CEF2A4BFC4A62D13
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/uyP0zsnL_2dc2XpjOAjE7vjsYoM.roa
Signing time: Wed 09 Oct 2024 12:32:11 +0000
ROA not before: Wed 09 Oct 2024 12:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214064
IP address blocks: 2001:67c:f30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:43:f4:ec:1f:3b:e5:79:ce:f2:a4:bf:c4:a6:2d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Oct 9 12:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb23f4cec9cbff675cd97a633808c4eef8ec6283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:66:c5:67:23:e8:b1:c3:f8:54:ff:54:57:
41:42:99:3f:71:14:0b:ce:84:cf:72:27:d8:ef:ce:
8a:3e:cf:d6:b2:29:31:fd:0d:e7:1d:83:fe:44:4c:
b6:74:b7:09:ec:8e:f8:4b:b0:3a:3b:49:eb:63:9b:
6c:c2:38:f8:19:51:6c:d3:c3:45:44:c7:84:3f:01:
37:7f:8f:f6:c2:6b:3c:0f:be:10:f0:51:cc:83:46:
2d:6f:df:20:32:48:09:21:85:48:34:ca:ee:8a:46:
c4:ca:47:24:6d:41:1f:e0:c2:8c:4f:90:4a:e8:ee:
02:59:e6:5d:9a:a8:23:43:ce:bd:2f:c0:a7:08:2f:
4a:da:46:37:4b:ee:09:02:28:df:b6:2f:33:21:e6:
be:2d:a0:cb:39:df:98:f6:2b:17:e9:ea:f7:a3:a7:
c6:b3:97:5d:81:96:b9:8f:2b:b9:04:85:92:e4:22:
6e:66:d8:c7:a4:28:d7:36:85:cc:de:0a:d0:17:11:
a0:6c:26:e4:15:a4:45:98:8d:1c:b0:04:f9:8d:94:
fc:8a:5c:fe:60:f9:fd:28:8f:58:cd:27:24:c1:f9:
bc:4d:15:65:15:87:50:2a:89:0e:7c:d7:c8:b9:93:
0d:47:3a:c5:5d:a1:0f:1a:ef:6a:0e:c1:20:f7:6e:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:F4:CE:C9:CB:FF:67:5C:D9:7A:63:38:08:C4:EE:F8:EC:62:83
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/uyP0zsnL_2dc2XpjOAjE7vjsYoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f30::/48
Signature Algorithm: sha256WithRSAEncryption
86:70:91:69:c8:fd:91:90:30:13:55:72:a8:90:04:cf:ab:3a:
b9:e9:ff:18:1b:e9:a5:a2:9d:44:39:1d:a2:85:d1:2c:fa:9e:
77:d2:e2:85:c1:98:eb:fe:2c:63:60:1a:ff:5a:a6:35:8f:f0:
dd:ce:ae:ce:ac:c9:76:86:28:86:30:56:7b:60:6d:76:61:a9:
10:48:3e:c8:cb:dd:24:b3:a7:ad:36:65:c6:3a:e4:72:0c:49:
a6:d3:58:ee:29:b7:5b:a0:44:07:9c:67:12:f0:62:10:de:26:
a2:0b:d8:13:39:ff:3f:e7:a6:78:68:db:ec:76:52:e2:55:69:
9e:48:65:aa:61:ae:ec:32:1e:3c:7c:15:b7:b3:3d:de:95:1d:
8f:53:82:10:e5:ae:97:7b:08:a5:04:50:f8:f4:36:50:95:d3:
44:cb:13:89:e9:6a:2c:9b:7c:6e:6a:24:62:e5:2c:b9:9a:53:
4f:08:5e:7f:33:a4:18:1b:84:2c:32:90:a8:d5:9e:7c:1a:68:
a2:52:77:fb:10:0d:04:68:68:74:80:9e:a0:04:ea:ed:f7:4c:
8b:7b:88:ad:dd:6d:dd:00:87:f4:7d:aa:1e:d5:d2:63:53:d9:
02:a4:ed:3f:51:29:7e:39:e6:e8:a1:41:de:be:38:9b:21:44:
22:c0:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:11 2024 by rpki-client on console.sobornost.net