Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/VFgyT5RsezQrpSFbcTYLlWYBWcc.roa
File: VFgyT5RsezQrpSFbcTYLlWYBWcc.roa (raw, json)
Hash identifier: brjIm29LWVb9w5YmfGKXjfRqKcmhFohVtG6l/16fi00=
Subject key identifier: 54:58:32:4F:94:6C:7B:34:2B:A5:21:5B:71:36:0B:95:66:01:59:C7
Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial: 018CC726C04E0CD788F7642F22F942BB2706
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/VFgyT5RsezQrpSFbcTYLlWYBWcc.roa
Signing time: Mon 01 Jan 2024 22:30:54 +0000
ROA not before: Mon 01 Jan 2024 22:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212445
IP address blocks: 193.162.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c0:4e:0c:d7:88:f7:64:2f:22:f9:42:bb:27:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Validity
Not Before: Jan 1 22:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5458324f946c7b342ba5215b71360b95660159c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:7b:e6:57:0b:bd:94:d2:2c:5d:5b:fb:5c:
f3:4d:72:47:36:68:fc:ea:b4:47:78:40:58:a0:aa:
96:e0:37:ed:22:c7:b5:b4:f9:1b:bc:e0:18:d3:89:
ac:99:79:bc:98:2e:a8:fd:de:21:52:78:5d:2b:b7:
8e:c3:32:97:d7:81:01:10:5e:4d:e9:3d:c8:ed:0c:
21:bf:61:69:9b:f9:1f:88:88:13:99:ce:d1:bc:5d:
29:f6:53:02:e3:2b:17:c7:72:c4:00:a9:0c:12:6e:
80:c5:b5:c5:3c:0b:8c:07:83:13:8a:f9:d4:ea:c4:
32:2e:e7:9b:72:66:49:f3:84:84:ef:9d:3d:d6:ba:
24:25:20:70:1b:e3:e9:74:4e:b5:0b:ec:e4:ff:c0:
d4:31:8c:02:8e:04:0d:ce:16:2e:f0:5e:97:ee:33:
00:1a:2b:35:85:7f:3c:9e:8e:83:a3:71:9a:79:fb:
25:4c:fc:ae:5b:05:11:75:8a:ea:81:33:5b:4d:08:
15:7b:8b:83:dd:ec:2c:3c:bf:44:94:13:a8:c0:d8:
f6:70:4c:c4:0f:0c:70:58:3a:67:a6:cd:59:88:07:
1f:60:e0:73:8e:e3:7a:13:09:82:c7:4f:a7:18:5f:
15:d9:d8:e7:17:e3:71:c9:4c:b7:d2:d5:02:7c:b5:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:32:4F:94:6C:7B:34:2B:A5:21:5B:71:36:0B:95:66:01:59:C7
X509v3 Authority Key Identifier:
keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/VFgyT5RsezQrpSFbcTYLlWYBWcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.31.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ad:c7:4c:9c:9f:9a:cf:70:b3:94:3d:71:f4:db:3b:db:69:
73:35:05:e7:d7:3f:f6:2e:4d:85:88:4b:60:db:f4:bc:1d:20:
61:c8:1f:4c:35:f1:0c:7e:c1:06:2d:b8:fa:fe:6a:ef:30:e4:
d1:a1:c0:95:9e:7b:4f:cd:12:12:91:42:91:90:b8:a9:79:36:
66:e8:0a:16:50:1e:8e:19:3c:69:31:8d:19:c0:f9:96:ed:c3:
09:b3:c3:f7:59:db:39:ea:49:e5:0b:8e:74:74:8d:29:b5:10:
2f:d9:f2:18:a4:ee:a2:a1:42:4a:b2:ba:29:40:a7:a7:07:1f:
2b:0f:12:8f:55:cd:25:e8:ee:82:31:bd:0c:df:61:99:10:b5:
e1:c3:7f:75:cb:1b:02:f7:2a:38:c8:a3:03:82:db:74:2a:6b:
07:27:6d:c1:db:c8:ea:87:7d:91:cf:72:74:c2:4d:66:53:45:
dc:da:f4:3e:70:1b:4f:ea:01:0c:4f:50:41:ad:1c:63:e4:8e:
bc:bb:b3:02:8d:49:a7:a2:64:80:71:e2:e3:2b:1e:16:8d:b2:
97:f0:09:da:95:a8:bf:58:42:77:96:85:f6:19:59:ba:8f:f0:
72:13:fa:28:31:ec:a5:33:28:de:3f:c2:3f:ae:b7:0e:9f:d0:
bc:83:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:23 2024 by rpki-client on console.sobornost.net