Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mCa0FIaivgmT6wytsmvL2C3SEbM.roa
File: mCa0FIaivgmT6wytsmvL2C3SEbM.roa (raw, json)
Hash identifier: WDc7DUt4oUUtoU3COxxSAN7AIO+uLqu6GJ2+R92mcGk=
Subject key identifier: 98:26:B4:14:86:A2:BE:09:93:EB:0C:AD:B2:6B:CB:D8:2D:D2:11:B3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01934787EB916A23A9B1E187FF3F0B8E4199
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mCa0FIaivgmT6wytsmvL2C3SEbM.roa
Signing time: Wed 20 Nov 2024 03:05:10 +0000
ROA not before: Wed 20 Nov 2024 03:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:4787:3483/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:87:eb:91:6a:23:a9:b1:e1:87:ff:3f:0b:8e:41:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 20 03:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9826b41486a2be0993eb0cadb26bcbd82dd211b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:42:79:42:bb:95:d6:61:cc:57:06:c8:41:
34:7a:e4:90:f1:1d:94:bb:d2:20:19:49:ac:d3:23:
0c:48:59:e9:aa:a7:33:76:82:d9:1c:ea:df:63:d6:
3f:de:a9:29:35:b3:05:3a:39:7c:73:32:72:f8:f2:
c9:06:8e:58:9d:49:b2:e8:f3:91:31:85:8c:96:52:
6a:cd:14:8b:67:9b:d7:d2:08:56:ef:2e:e7:5f:3d:
0b:3d:f0:11:7a:3b:3b:39:67:2a:8c:47:a3:6d:1b:
85:17:51:95:70:fa:ca:c6:fe:a8:06:f4:bf:ec:20:
85:ec:38:e0:33:a3:0e:ac:89:61:7b:7b:60:07:06:
0e:b1:b5:19:a6:ef:3b:09:50:e0:f5:a9:f2:fe:35:
bf:c0:e0:1b:75:ab:58:b3:b5:fe:96:80:fd:e4:39:
aa:d3:05:7f:98:06:64:a2:94:40:6a:9e:66:7f:3a:
b3:1c:73:ef:24:a2:4b:95:24:e4:97:d0:6f:86:36:
6c:90:87:98:19:25:9c:5f:e4:d1:06:6d:82:b9:b4:
d0:34:60:1d:46:d3:e4:fd:b0:25:c2:96:70:69:fb:
80:03:65:de:18:64:4b:18:31:8f:fb:9c:a9:cc:ad:
50:2b:14:71:15:0a:70:2a:69:9b:19:83:cd:3c:c6:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:B4:14:86:A2:BE:09:93:EB:0C:AD:B2:6B:CB:D8:2D:D2:11:B3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mCa0FIaivgmT6wytsmvL2C3SEbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:4787:3483/128
Signature Algorithm: sha256WithRSAEncryption
7d:ec:48:77:82:38:f1:fd:b3:b1:d6:55:48:b4:63:18:5f:0a:
f1:15:ff:1b:0a:3c:3d:1d:67:60:6a:a4:9e:4a:b7:35:54:4b:
e1:19:0b:12:e6:86:ec:6d:aa:fb:66:d5:39:46:21:65:ed:c9:
1c:5b:4a:7c:22:ae:8a:18:31:9e:3e:52:0b:f9:4c:44:6d:e6:
08:fb:de:8e:08:01:bc:06:51:c3:1d:9f:24:48:fb:aa:99:69:
f1:6a:49:e5:73:3c:80:86:b3:4b:92:d9:58:f5:77:c0:67:67:
d4:74:fe:fe:29:7c:b9:de:9c:14:d9:91:4e:d5:9e:30:6c:bd:
4a:e9:0a:20:ce:ad:7b:76:89:e9:81:ef:f1:8e:9e:25:de:f7:
67:4f:3d:e9:8c:36:c5:93:e0:ba:08:09:0b:85:ad:fe:ac:50:
e5:94:7b:1a:d5:d0:bd:80:e5:8f:24:91:25:22:e2:8d:06:92:
59:a0:7c:1b:20:11:bc:66:4f:8e:d0:3f:28:a6:07:0f:29:0f:
68:cc:fa:b9:a6:ca:52:b8:ee:db:25:ee:37:da:52:8f:f9:f4:
49:90:f9:b2:2e:5d:62:07:4f:fe:1b:8a:7c:d3:4e:7f:af:73:
58:bb:81:52:f9:6b:8c:80:c3:45:3c:48:e0:83:33:51:17:eb:
d3:37:14:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:16:20 2024 by rpki-client on console.sobornost.net