Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Pbg5PFXLKQ8IB50GP3HkmQM1IYU.roa
File: Pbg5PFXLKQ8IB50GP3HkmQM1IYU.roa (raw, json)
Hash identifier: EqEbAXwQTFArUJexD/AVTKYSWm5bhwp7qX7bgV/jnUE=
Subject key identifier: 3D:B8:39:3C:55:CB:29:0F:08:07:9D:06:3F:71:E4:99:03:35:21:85
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 0193781A4A47D71E82AC2E639F3F77BCC042
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Pbg5PFXLKQ8IB50GP3HkmQM1IYU.roa
Signing time: Fri 29 Nov 2024 13:26:49 +0000
ROA not before: Fri 29 Nov 2024 13:26:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15596
IP address blocks: 31.42.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:78:1a:4a:47:d7:1e:82:ac:2e:63:9f:3f:77:bc:c0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Nov 29 13:26:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3db8393c55cb290f08079d063f71e49903352185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:f7:2d:ce:d9:13:05:c3:33:bc:bd:c0:f6:
0e:16:dd:05:26:2c:52:69:4d:b7:92:55:f0:46:a7:
42:33:92:75:c5:44:a7:32:fa:d2:91:29:ed:23:51:
ca:f0:93:0b:94:0e:6a:c8:7d:14:4d:3c:13:81:a1:
7e:ec:c9:9d:3c:c3:05:57:88:6a:77:2f:50:bc:7c:
49:de:d8:75:89:e0:9c:42:08:4f:45:06:c2:be:1d:
70:ab:09:e3:5e:e9:6f:48:93:24:0c:31:e5:39:11:
c9:38:7a:21:50:db:3a:d7:8b:f1:3d:61:42:95:c8:
6b:c2:48:0d:4a:e2:8f:89:50:e4:6b:8f:ac:70:54:
84:e1:02:6f:3c:ef:b0:56:fc:a5:b5:a3:e6:c7:b0:
05:b9:ef:b9:66:5b:f7:a9:49:ca:36:13:df:e5:7a:
6b:29:77:f1:a1:32:bc:23:8e:cd:98:db:8c:13:cc:
08:f9:05:5e:0f:c1:da:3f:cd:cd:8e:38:fb:a7:96:
a1:04:a0:55:11:d2:46:f3:31:74:c8:13:51:0d:2f:
a6:3a:b7:44:94:43:82:d1:e6:75:00:f6:a4:ed:a1:
d9:63:52:ee:a4:0f:4f:5d:9e:e2:aa:33:30:77:4d:
c2:bf:ae:ff:00:81:8f:d2:e6:06:72:69:3d:71:b3:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B8:39:3C:55:CB:29:0F:08:07:9D:06:3F:71:E4:99:03:35:21:85
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Pbg5PFXLKQ8IB50GP3HkmQM1IYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:f7:0d:50:a7:37:41:e1:a9:00:7a:52:cb:d2:62:e0:44:48:
20:5e:d2:2b:69:1a:9a:b4:fa:89:a8:9b:a5:27:e7:b4:5e:50:
bb:e4:4b:de:44:0f:9c:38:0c:70:7e:65:4e:33:ac:d4:7a:0e:
3c:75:b4:32:d0:d0:b1:26:31:b1:36:83:08:03:dc:29:9f:61:
a6:c1:09:73:a4:5f:b8:9b:19:ea:44:d6:5a:1e:46:89:44:0e:
cb:05:cf:18:0f:c8:c8:03:0d:bc:18:f8:f5:fe:ea:7f:ba:97:
fb:11:83:1e:b9:52:d3:c3:a7:b5:ad:b7:3d:7b:a2:a2:f5:90:
5b:c4:6a:6b:44:55:1a:0a:19:e7:3e:d1:81:cc:45:af:e7:aa:
7a:fe:e6:f9:71:48:71:dc:29:5b:4d:f7:1e:ff:d4:51:4a:5a:
dd:8e:cb:bc:ae:9b:a4:15:fa:b9:58:3e:b5:30:02:d0:59:c7:
81:0c:ef:42:6d:e4:07:18:0b:52:27:95:19:b6:3c:76:1b:9b:
be:b2:af:c5:a9:20:8b:71:06:8a:fd:17:14:38:2e:6d:9f:1d:
84:56:c7:b1:01:83:b3:e1:e5:43:40:26:dd:e0:8f:46:c4:52:
17:48:86:b5:38:16:a2:d2:07:41:91:cf:1d:0c:f1:57:34:5f:
ed:d8:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:12 2024 by rpki-client on console.sobornost.net