Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/K1zu_P7HUyjsGwSZjadh5GDy9Co.roa
File: K1zu_P7HUyjsGwSZjadh5GDy9Co.roa (raw, json)
Hash identifier: 2xYAzA9FlRyLFTYSztTkFc+2cOFuQZ5VDw5/KBYDc1o=
Subject key identifier: 2B:5C:EE:FC:FE:C7:53:28:EC:1B:04:99:8D:A7:61:E4:60:F2:F4:2A
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 0190C201C54FB087DCC732715520E611ED2A
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/K1zu_P7HUyjsGwSZjadh5GDy9Co.roa
Signing time: Wed 17 Jul 2024 18:43:34 +0000
ROA not before: Wed 17 Jul 2024 18:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15596
IP address blocks: 31.42.120.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c2:01:c5:4f:b0:87:dc:c7:32:71:55:20:e6:11:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jul 17 18:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b5ceefcfec75328ec1b04998da761e460f2f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a1:a2:93:21:27:ff:e0:15:95:ed:40:78:64:
a3:d3:b0:b5:34:2c:08:03:3a:cf:99:bc:dd:3c:b5:
92:58:cc:0d:ad:f4:eb:b5:4d:b6:ab:80:5e:66:ec:
77:a9:71:f8:53:a6:dd:60:36:87:f6:7c:6c:ef:3e:
1f:01:37:35:23:c4:e8:ed:c0:d5:dd:8a:63:28:54:
cf:f1:ac:6a:87:27:55:14:3d:2d:da:f4:9c:4c:59:
93:d6:20:76:36:43:50:f0:e3:9b:2f:f8:51:c4:31:
91:53:33:8f:27:42:89:48:fb:2f:2f:9f:7c:79:7e:
bf:2b:fb:c2:c7:90:25:ac:9f:1d:27:e1:f7:c5:0d:
0c:cb:dd:26:96:06:c1:9e:42:49:ee:f2:26:61:81:
35:66:b1:49:69:40:bd:08:2f:16:9c:17:f9:3f:54:
0a:60:6d:4e:99:60:6d:7a:b6:64:d1:87:ef:d3:94:
e4:ce:c0:67:30:78:b9:0e:bc:b4:ea:93:98:a9:f3:
d9:d9:2d:c8:2f:e2:4e:bd:f5:97:bf:fc:e3:43:7e:
b8:06:02:d1:6f:1e:57:d8:7a:a3:41:75:b8:39:2c:
54:21:9c:3e:4d:4b:b7:bb:4b:9c:ad:10:f0:cb:0b:
72:45:a3:8d:ab:56:1a:20:ab:b7:56:7b:0c:b8:38:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:EE:FC:FE:C7:53:28:EC:1B:04:99:8D:A7:61:E4:60:F2:F4:2A
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/K1zu_P7HUyjsGwSZjadh5GDy9Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:3f:ce:3c:de:53:d4:ea:03:d8:7c:03:7d:4c:6c:7e:e4:cf:
1b:d0:02:a8:d1:06:67:ed:19:3a:b1:19:0b:1e:4b:6c:d2:4a:
ff:63:d3:5e:a3:48:00:f7:53:a4:d4:4f:4b:9d:8f:e4:15:c9:
8a:b0:de:ec:12:26:92:04:02:75:1e:57:83:70:5c:b3:e0:7e:
73:5a:d4:2b:31:5e:4a:1f:90:1c:05:01:7d:e0:60:78:4c:72:
5f:32:18:ed:27:c4:53:0c:79:e1:de:b1:9c:42:52:6a:8d:bf:
77:03:79:ef:ae:32:e1:92:62:4d:8d:aa:38:52:f3:e2:52:2a:
44:b2:65:07:66:91:0c:85:2e:e4:fc:3d:15:ae:4b:02:f7:1d:
3c:b6:16:7f:57:1c:94:f0:b7:e4:f1:29:9e:31:e9:22:eb:4d:
cd:76:46:d8:84:15:d8:30:e9:9e:bf:b9:80:fa:99:54:f1:ee:
8d:ee:c5:13:1e:28:fc:5e:33:7d:5e:6c:88:87:94:cc:83:89:
b8:8f:8f:47:22:2c:b5:68:72:24:97:28:14:7b:dc:83:9c:72:
cd:db:3a:4b:30:cb:a4:87:e2:b0:85:9a:b3:49:79:b6:d5:06:
41:b5:e9:94:b5:a7:04:5c:05:c0:89:14:e4:2a:2c:bc:ca:b5:
98:3f:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 04:12:13 2024 by rpki-client on console.sobornost.net