Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/8sh7m3jb4Tyjxfji_c7DveryabQ.roa
File: 8sh7m3jb4Tyjxfji_c7DveryabQ.roa (raw, json)
Hash identifier: 3yAYccIQG20EQnSVSuC7OJpNflJhv8+aW1vN2Be3nvk=
Subject key identifier: F2:C8:7B:9B:78:DB:E1:3C:A3:C5:F8:E2:FD:CE:C3:BD:EA:F2:69:B4
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 018CC794C90DFA86E70D841C7E25FA6AA8EA
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/8sh7m3jb4Tyjxfji_c7DveryabQ.roa
Signing time: Tue 02 Jan 2024 00:31:05 +0000
ROA not before: Tue 02 Jan 2024 00:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43293
IP address blocks: 77.93.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c9:0d:fa:86:e7:0d:84:1c:7e:25:fa:6a:a8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Jan 2 00:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c87b9b78dbe13ca3c5f8e2fdcec3bdeaf269b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:7f:c5:a9:2c:ff:6e:5b:48:5a:4f:e6:67:
8b:e9:8c:e2:cf:b4:22:1b:e8:98:c3:89:22:5e:b8:
b2:f6:42:e4:ad:1a:f8:50:41:21:00:49:af:46:e8:
e8:cc:05:db:52:f4:3a:3e:00:38:03:29:50:0e:91:
48:f8:2d:a8:a3:b8:a6:c4:ec:d8:15:dc:ec:ad:45:
f3:e7:bd:47:d1:dd:6c:53:56:7c:85:0b:11:2a:c3:
45:27:2a:fd:84:1d:19:fb:76:0c:7a:ce:66:1c:5a:
a4:29:e8:48:98:f0:30:5b:ab:8a:ae:26:54:55:f6:
20:98:cc:43:e7:ca:2c:eb:e8:52:d4:2c:28:67:e8:
c2:0c:c5:70:80:13:c3:d7:df:79:fd:f7:32:b8:d1:
bf:69:07:ec:c1:03:e3:e7:e4:e3:41:c6:45:14:f0:
0b:57:2b:85:d1:44:43:9b:9e:85:06:fc:c4:e7:e4:
b4:4f:f7:4c:39:dd:87:e6:57:d9:ab:96:05:d8:5b:
f3:0d:65:ea:a8:10:3c:75:46:dd:e8:a9:39:d3:d6:
13:60:0b:15:f2:1a:d2:cc:a8:ca:28:a2:52:0b:a4:
d7:be:64:fd:a1:a5:7e:55:da:0b:26:7f:ac:de:af:
9e:21:0a:29:7c:3d:58:a6:84:83:00:03:d2:d4:71:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:7B:9B:78:DB:E1:3C:A3:C5:F8:E2:FD:CE:C3:BD:EA:F2:69:B4
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/8sh7m3jb4Tyjxfji_c7DveryabQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.64.0/19
Signature Algorithm: sha256WithRSAEncryption
14:00:7a:67:c2:0f:28:8b:15:38:5f:28:d1:29:8f:cd:f0:5d:
d6:69:86:49:0f:54:5c:78:f4:4e:73:a5:16:5f:44:ed:56:61:
63:36:e0:3d:6e:10:fb:08:5c:cc:95:c6:bc:26:1d:ca:84:4d:
d4:5c:d7:fe:fe:0c:57:70:5c:88:d7:fe:6f:88:fd:6c:9a:e9:
9a:99:d1:da:84:09:a2:a1:c7:c5:76:2c:9a:46:7f:f8:d7:d4:
53:2c:69:f6:16:c2:5a:f9:b9:f5:c0:2b:37:9e:d3:25:65:ef:
7c:8f:24:a2:37:fd:d5:28:6b:36:d7:1d:b3:ba:f3:4f:66:a8:
bc:53:18:76:0e:46:b4:db:97:65:11:53:9c:ca:fa:56:7c:37:
99:ce:8d:40:ff:d9:45:3e:23:4e:98:a6:a3:43:54:f2:90:19:
65:cf:53:e7:3e:8f:27:88:2f:09:0d:c8:9b:2c:20:d7:6e:30:
46:a6:e6:75:3e:ac:d7:c9:69:d8:38:c7:fe:c9:32:f1:ae:63:
fd:23:50:a0:f5:8d:e1:46:99:37:d6:a5:bb:5d:51:35:9b:30:
8f:8c:93:a4:60:0d:b7:db:50:25:dd:a4:06:26:fa:58:e2:01:
90:9b:8c:d1:cc:c9:ca:07:b9:54:13:6b:d8:80:07:a3:ca:44:
31:e5:07:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 07:43:01 2024 by rpki-client on console.sobornost.net