Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/8bLjHcP2i3DqbjO-8G_tI-vAmos.roa
File: 8bLjHcP2i3DqbjO-8G_tI-vAmos.roa (raw, json)
Hash identifier: DpJHJs1c2m1C/ucRH4pninUvyA8U8a2EUN/XWYz/Jc8=
Subject key identifier: F1:B2:E3:1D:C3:F6:8B:70:EA:6E:33:BE:F0:6F:ED:23:EB:C0:9A:8B
Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial: 0193582CC7E791F2F932A1B8FF42DC646B85
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/8bLjHcP2i3DqbjO-8G_tI-vAmos.roa
Signing time: Sat 23 Nov 2024 08:39:09 +0000
ROA not before: Sat 23 Nov 2024 08:39:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214295
IP address blocks: 194.0.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:2c:c7:e7:91:f2:f9:32:a1:b8:ff:42:dc:64:6b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Validity
Not Before: Nov 23 08:39:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1b2e31dc3f68b70ea6e33bef06fed23ebc09a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:4d:29:08:0b:7f:30:07:8c:91:94:e5:08:
72:72:da:56:fc:f6:0d:f6:6b:eb:87:b7:cb:f0:db:
ad:8a:5b:53:7d:93:85:d5:7c:64:65:18:b3:f4:34:
af:fb:e5:49:34:cd:66:2c:bc:d4:f6:4e:78:0c:25:
eb:19:a3:6a:22:1f:a4:96:19:6b:be:20:ef:1f:59:
9c:8d:c7:c9:d6:66:7a:ca:2e:1c:8b:63:05:4d:89:
6d:e2:5f:04:3c:44:a2:b6:88:a6:5e:57:66:1d:af:
fa:a7:c9:c7:79:b6:67:9e:a1:e1:60:bc:1f:5f:44:
62:40:f7:0a:38:a0:b2:ff:4a:03:14:6b:e7:51:7e:
02:71:f2:9c:30:31:38:3e:12:52:43:64:30:78:99:
7b:80:6d:9e:43:5b:5c:30:1e:f0:ee:85:d4:00:08:
f9:50:0e:9a:da:71:b9:31:01:a7:f8:72:7b:9f:db:
bc:8c:49:9d:39:0a:bc:45:ff:83:57:25:89:56:ee:
e5:dd:d2:a3:ce:5e:64:79:a9:fb:37:d5:5a:88:40:
ab:b0:f6:bb:67:38:fd:35:00:d2:5a:43:93:a9:39:
58:34:37:5b:f9:1c:ec:c7:ea:eb:d9:51:e2:07:b3:
d4:f6:f9:a8:ee:1c:1a:95:9a:36:33:a8:fc:a9:39:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B2:E3:1D:C3:F6:8B:70:EA:6E:33:BE:F0:6F:ED:23:EB:C0:9A:8B
X509v3 Authority Key Identifier:
keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/8bLjHcP2i3DqbjO-8G_tI-vAmos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:39:6d:c0:6c:0e:1d:ec:4c:17:60:eb:cf:78:b0:8b:2c:00:
4c:a1:db:73:b6:39:de:13:49:4d:c8:86:ef:f9:b0:75:ef:67:
57:35:c4:70:70:38:c8:8e:e1:52:c5:76:e6:1e:ea:01:ec:aa:
ec:40:58:ec:6f:e0:26:3c:06:76:44:f1:e5:4a:d9:34:6b:0b:
0e:df:3d:8a:ea:1d:86:0d:2e:6c:fc:1e:d4:a4:3c:59:14:11:
8a:fe:4f:6e:00:71:90:0e:6c:b9:41:1e:8b:c9:7a:37:db:fb:
72:33:ef:19:2f:16:a1:89:22:da:eb:a5:3c:b9:a4:42:b4:2c:
a6:60:2f:6b:c4:39:a1:82:d1:bf:f5:83:f1:5a:29:d7:b0:1a:
06:11:1e:5b:5a:ce:fc:76:6e:cc:02:d4:18:f4:ce:dc:20:3c:
dc:d8:e4:92:75:f7:7f:cf:dd:fc:45:19:6d:ad:b0:20:80:2d:
60:d7:2e:e5:8f:7e:f8:00:17:cc:1d:9a:31:da:a8:2a:57:dc:
c0:79:8c:99:41:2a:27:31:b3:da:14:fe:24:50:21:38:94:73:
36:00:a5:e6:fd:1b:31:82:22:3c:82:dd:c7:ed:b7:20:b1:05:
5e:5d:a7:97:d7:ae:15:df:cc:57:03:1a:4f:a4:8b:f1:25:91:
fb:ca:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net