Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/uUXZh5XIjrg_I0UbzJCQO2cpu-E.roa
File: uUXZh5XIjrg_I0UbzJCQO2cpu-E.roa (raw, json)
Hash identifier: /cG1brsX/BUEZ0P//UMlQjgudAZqMMKjuHc+syBdgeQ=
Subject key identifier: B9:45:D9:87:95:C8:8E:B8:3F:23:45:1B:CC:90:90:3B:67:29:BB:E1
Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Certificate serial: 018CC80118D4544AFA6D0AA55C21D166A652
Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/uUXZh5XIjrg_I0UbzJCQO2cpu-E.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201339
IP address blocks: 194.127.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:18:d4:54:4a:fa:6d:0a:a5:5c:21:d1:66:a6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b945d98795c88eb83f23451bcc90903b6729bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:75:44:6b:58:f9:de:6d:56:91:5b:3f:69:
86:d3:a4:51:58:0d:4c:f6:f9:3a:ff:e6:4c:df:73:
63:35:d9:61:1c:23:6a:66:94:5c:f6:5c:44:bd:2f:
e3:8f:11:9b:0c:52:81:f0:32:db:89:e1:59:c5:4c:
ee:b2:0a:69:e5:30:ec:c7:a4:e3:2d:b4:7c:23:a4:
af:76:a3:12:f9:58:90:68:3f:5b:87:ea:e3:91:48:
94:05:a2:a9:ae:84:ad:af:bc:9a:ba:05:0f:ec:56:
e1:45:b7:f7:bb:f4:8e:a7:ee:2a:e0:37:7a:29:70:
47:17:f6:8a:9a:d2:ad:b6:a7:44:ca:35:5d:3a:3a:
f6:02:5f:8b:6d:bd:c0:53:41:99:5b:95:5d:29:98:
02:d7:47:03:98:00:80:c2:7b:58:f4:35:7b:dc:bc:
9e:3c:5a:ed:11:17:da:0c:e8:e4:8a:bb:f6:ce:de:
04:7b:33:9f:6a:17:67:27:95:36:e0:76:2e:3f:0f:
03:5b:67:31:1c:c5:68:2f:cc:3b:a3:1e:40:ef:48:
21:51:07:b1:b8:06:90:c3:75:bc:98:a1:cb:19:21:
77:19:b1:00:46:f6:fb:36:f1:7b:50:cc:89:83:ff:
bb:47:52:87:4a:6a:e0:cd:98:d6:5b:ce:a0:ea:8a:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:D9:87:95:C8:8E:B8:3F:23:45:1B:CC:90:90:3B:67:29:BB:E1
X509v3 Authority Key Identifier:
keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/uUXZh5XIjrg_I0UbzJCQO2cpu-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.204.0/23
Signature Algorithm: sha256WithRSAEncryption
55:1c:41:db:25:cb:91:8c:7b:06:c0:4d:a3:fc:1c:50:42:b9:
72:7f:b3:12:cb:fc:8b:65:d8:47:be:43:f3:ac:c7:b0:e4:67:
ac:b9:e7:a6:b9:2b:20:c7:b0:69:eb:dc:c2:77:3d:02:4c:cd:
a3:4c:62:97:2f:a4:d5:96:b7:98:7c:ac:5b:07:3d:ef:d5:26:
a7:1f:9d:3f:bd:e8:66:9b:cc:91:03:f0:8c:22:15:45:29:a8:
8e:38:61:dc:72:21:55:99:07:cd:4c:43:43:c4:ff:e3:d6:c0:
01:b4:db:b1:aa:56:19:31:a6:9d:93:43:75:c0:f3:68:5c:32:
e4:11:e3:59:22:77:6b:07:04:e6:3c:a1:63:b5:d6:a0:1b:7d:
08:43:72:94:2d:83:b6:44:ab:de:55:10:82:06:69:52:07:c4:
5d:a0:91:dd:87:0c:39:9f:4b:48:1a:1a:9e:d7:11:50:e3:23:
f7:0d:b6:91:69:b3:bf:b0:f3:5a:50:5b:06:eb:f0:90:8e:ed:
8b:24:66:43:ff:a6:1d:b6:be:d7:aa:a3:07:dd:47:40:53:30:
76:7c:60:cf:47:20:bb:3c:90:c3:78:12:fc:6f:2e:4a:41:29:
aa:09:80:6a:aa:dc:e5:55:34:96:e9:d6:48:59:4e:23:b3:77:
db:b8:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:23 2024 by rpki-client on console.sobornost.net