Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/30rO3oS7fqVSxZ-mCM9t2_SPZws.roa
File: 30rO3oS7fqVSxZ-mCM9t2_SPZws.roa (raw, json)
Hash identifier: CRlM448bYNNXn/Pd1wKfnUpZun1m0HyQCEUOO47/BY4=
Subject key identifier: DF:4A:CE:DE:84:BB:7E:A5:52:C5:9F:A6:08:CF:6D:DB:F4:8F:67:0B
Certificate issuer: /CN=e5c0fb256374b7d43e232c848e42cc7b3f83ed22
Certificate serial: 018CC56E047E8B3875EDBBC665418B22CC1B
Authority key identifier: E5:C0:FB:25:63:74:B7:D4:3E:23:2C:84:8E:42:CC:7B:3F:83:ED:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cD7JWN0t9Q-IyyEjkLMez-D7SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/30rO3oS7fqVSxZ-mCM9t2_SPZws.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:d580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:04:7e:8b:38:75:ed:bb:c6:65:41:8b:22:cc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c0fb256374b7d43e232c848e42cc7b3f83ed22
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df4acede84bb7ea552c59fa608cf6ddbf48f670b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:ad:f3:3b:03:15:ee:12:f3:9a:17:72:c4:
91:37:d4:47:e7:ee:c1:c6:1b:c7:27:76:8f:12:61:
03:8c:f6:f2:d0:c9:fb:a5:05:22:7a:b8:b1:4a:37:
34:22:57:25:79:3d:4f:47:a0:f6:b9:1e:53:6e:da:
33:80:5d:80:69:e9:f5:f8:47:b3:51:8f:45:9a:7a:
2e:95:ac:76:e9:77:32:f8:fd:9d:e6:2c:fb:e2:36:
b8:91:5d:4d:72:5a:fb:b4:90:be:72:45:9c:60:2b:
1f:d7:d8:cf:7c:a8:cc:a7:77:9b:a6:f5:a0:75:a1:
a5:04:61:92:d5:95:02:c0:a7:2d:a9:84:93:36:40:
eb:e2:3f:cb:2e:8f:27:de:20:cf:cf:d5:d2:dd:b5:
af:9e:1e:0c:ed:b8:b0:d5:61:c3:4f:07:9d:a7:2b:
7e:67:46:2b:8a:fe:e2:18:7b:7e:37:eb:98:85:c7:
f9:5e:6a:03:2d:ec:8b:2e:ec:d2:8d:65:96:0a:d3:
60:80:b4:e0:58:4d:1b:48:eb:76:33:8c:e0:92:68:
94:c7:a2:c5:ac:1e:36:57:b0:7b:b7:16:2c:e9:8f:
63:35:cf:40:3e:c2:2e:fb:89:23:7a:e3:cd:ce:7a:
7d:3a:70:27:2f:67:b8:96:48:5d:b0:b6:87:c6:25:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4A:CE:DE:84:BB:7E:A5:52:C5:9F:A6:08:CF:6D:DB:F4:8F:67:0B
X509v3 Authority Key Identifier:
keyid:E5:C0:FB:25:63:74:B7:D4:3E:23:2C:84:8E:42:CC:7B:3F:83:ED:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cD7JWN0t9Q-IyyEjkLMez-D7SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/30rO3oS7fqVSxZ-mCM9t2_SPZws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/5cD7JWN0t9Q-IyyEjkLMez-D7SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d580::/29
Signature Algorithm: sha256WithRSAEncryption
41:79:01:4d:78:a9:8f:5d:fd:d4:4d:c6:28:3e:0e:d3:2f:72:
70:47:5b:bb:5b:d2:7c:3d:d7:7c:10:ba:7d:2a:d2:94:e5:0d:
57:58:61:86:08:20:10:ce:58:05:f4:3a:a2:59:31:de:50:74:
de:17:d2:86:c7:c4:8f:6a:bd:bd:d5:d2:70:db:6d:bc:8d:b3:
b2:b3:2f:a6:ed:a0:fe:b3:f6:de:23:0d:24:69:bf:b4:65:54:
6f:a5:a2:f0:16:45:0b:5b:02:66:f6:39:5d:bc:bd:49:d0:72:
22:fd:f2:b7:ee:62:86:b8:a4:dd:b4:38:7b:bb:0f:0a:b7:4f:
09:06:c8:af:bb:a2:c7:9e:49:54:09:7b:92:e0:24:4d:b7:10:
09:10:b5:c3:73:72:c1:06:8c:bf:a7:e1:fa:ad:ba:04:3a:ba:
6c:b7:ac:c8:57:07:2f:b3:89:60:d9:8c:ef:37:81:b5:5d:aa:
8c:0a:3b:c3:49:4d:c3:b1:1a:bc:f6:6f:62:67:d4:23:10:58:
d6:64:0f:13:c7:a7:ad:f3:b5:f5:c0:1e:92:c7:d7:d5:4f:bd:
0f:78:9d:ea:30:bd:c0:67:fd:d8:d5:be:c8:d2:dc:54:32:10:
dc:5a:f0:fb:c8:43:82:f5:ce:a3:4f:70:91:b2:12:8c:ca:f0:
01:bd:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:52 2024 by rpki-client on console.sobornost.net