Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/tT07UNQKYR0MsxPv62jCB_ifkM4.roa
File: tT07UNQKYR0MsxPv62jCB_ifkM4.roa (raw, json)
Hash identifier: BFvFk74RMxlsg4AWGCf0gQPNCJqrJGhgfMwng12VIxU=
Subject key identifier: B5:3D:3B:50:D4:0A:61:1D:0C:B3:13:EF:EB:68:C2:07:F8:9F:90:CE
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 018CC6B8B672995565C0AE717CCC605A614E
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/tT07UNQKYR0MsxPv62jCB_ifkM4.roa
Signing time: Mon 01 Jan 2024 20:30:43 +0000
ROA not before: Mon 01 Jan 2024 20:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57132
IP address blocks: 193.22.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b6:72:99:55:65:c0:ae:71:7c:cc:60:5a:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: Jan 1 20:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b53d3b50d40a611d0cb313efeb68c207f89f90ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:14:03:f7:e8:40:a1:6e:3b:22:ba:bb:f9:
44:8c:85:46:1e:d0:44:16:79:88:7e:44:fd:01:07:
6b:e5:93:1f:81:9c:07:fd:aa:79:72:f4:6f:f4:69:
1b:f5:22:7c:0c:06:35:34:c3:4b:0e:f5:e8:ba:bd:
15:d7:1f:60:dd:af:47:06:b7:63:7b:28:ba:95:da:
88:17:46:76:11:e2:22:56:7d:81:5b:15:8e:32:c9:
24:b3:62:0d:2d:3a:6e:6e:0e:cf:81:26:7e:70:00:
b2:92:82:2c:b2:03:60:ec:32:71:b9:44:c2:e6:c2:
75:1e:f8:25:16:7c:92:c2:78:f8:d9:2a:8d:21:12:
2f:1d:8e:46:bd:1c:6b:69:9f:57:34:37:4a:c8:17:
81:df:6d:7d:39:46:fe:2c:5d:29:06:d5:93:31:e1:
8d:af:92:c4:30:9f:80:44:3b:1b:90:a4:93:95:e5:
82:03:5f:77:25:91:e8:0e:27:04:87:1b:c7:6d:cc:
b9:aa:0c:6e:65:4e:27:e1:10:fd:a3:05:81:ea:b1:
31:77:35:76:b0:10:ad:da:1a:98:1e:01:8b:7e:fc:
1b:cf:05:9a:af:f8:38:2f:40:04:19:ca:f0:ff:d1:
f3:77:8c:cf:21:3e:4c:cd:71:d7:82:62:34:67:3f:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3D:3B:50:D4:0A:61:1D:0C:B3:13:EF:EB:68:C2:07:F8:9F:90:CE
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/tT07UNQKYR0MsxPv62jCB_ifkM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:07:1b:14:f1:a2:9e:5c:ac:a6:f2:f6:ce:25:6a:26:07:7f:
7b:55:09:18:7c:15:98:c0:ab:a7:4b:90:48:4a:34:55:0e:9f:
6d:e7:46:d6:6e:61:31:84:a9:e7:1a:e5:a6:35:b5:7c:c1:cd:
eb:4f:6f:fd:92:63:0c:0c:0e:6d:5b:3d:0a:a6:02:e6:a3:b6:
f4:43:2e:6f:72:8e:d6:a6:9b:5b:8a:21:78:80:6a:26:ca:7c:
30:20:db:83:d6:6a:34:07:8a:9a:c3:3b:5e:d4:32:55:23:7f:
d8:13:de:b7:e8:74:28:c9:73:77:3c:da:b9:a0:27:c0:3a:b5:
0c:ed:f7:50:1a:65:1d:68:da:27:2c:48:76:96:a6:8c:df:fc:
05:a0:41:08:6c:52:83:ad:59:43:8a:fb:e1:8c:3a:18:aa:bf:
39:5a:c5:99:88:dd:c0:2c:cd:8c:40:09:e8:eb:38:9c:ad:0b:
3e:2e:38:a5:3e:99:62:8c:ef:07:00:b0:37:c2:85:d7:a8:56:
bd:e0:e6:36:a1:17:9b:68:c3:e8:5f:af:1f:69:ab:35:d8:76:
85:c1:bd:e5:72:a9:1a:07:0b:54:b6:fb:78:e4:f4:b8:7c:5b:
88:16:25:6c:fc:81:f9:15:8b:58:37:f4:44:66:9c:75:75:e6:
e1:60:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:26 2024 by rpki-client on console.sobornost.net