Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/a1-nLvesXt7Gi24JN1dAU3urTWk.roa
File: a1-nLvesXt7Gi24JN1dAU3urTWk.roa (raw, json)
Hash identifier: LNy5guldTt5kDwWcF9pJ8duZIiIwHxime76eiPGdnKE=
Subject key identifier: 6B:5F:A7:2E:F7:AC:5E:DE:C6:8B:6E:09:37:57:40:53:7B:AB:4D:69
Certificate issuer: /CN=6a4ca009bea3d1d89bea5ed9d333595323ee8bae
Certificate serial: 018A83FF6F67C6E8C7283081AB08322F003A
Authority key identifier: 6A:4C:A0:09:BE:A3:D1:D8:9B:EA:5E:D9:D3:33:59:53:23:EE:8B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akygCb6j0dib6l7Z0zNZUyPui64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/a1-nLvesXt7Gi24JN1dAU3urTWk.roa
Signing time: Mon 11 Sep 2023 11:27:50 +0000
ROA not before: Mon 11 Sep 2023 11:27:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20668
IP address blocks: 193.3.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:ff:6f:67:c6:e8:c7:28:30:81:ab:08:32:2f:00:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4ca009bea3d1d89bea5ed9d333595323ee8bae
Validity
Not Before: Sep 11 11:27:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b5fa72ef7ac5edec68b6e09375740537bab4d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:97:da:a5:2b:10:c5:eb:24:61:0c:56:a7:
5a:bb:f1:50:ae:16:fc:cb:d7:09:c0:1f:3a:60:c7:
17:93:c0:14:79:0a:88:f0:ea:8f:39:6d:a4:1f:34:
9b:f8:db:93:c1:62:21:f1:89:bd:6a:ef:a2:79:a5:
d5:c3:0e:7f:ca:30:4f:fc:15:4e:40:e0:99:56:4e:
6c:43:b0:e5:43:62:79:a0:26:25:e7:81:71:1a:02:
04:d7:58:e1:a5:49:73:6f:67:06:ce:ad:de:c0:70:
b1:75:5f:fa:6e:2f:96:55:02:ab:c8:be:52:f1:86:
92:5a:ab:75:8b:02:6b:80:c0:2c:bf:04:77:ae:21:
09:33:09:a7:57:56:5b:8a:96:13:59:57:e2:55:7d:
14:46:3e:9a:61:df:91:29:c3:2c:65:88:20:66:a7:
54:b5:54:62:1e:4b:50:ce:f9:f1:79:52:90:80:7e:
b9:ea:13:76:ce:d8:c8:a4:49:29:1a:54:32:04:94:
81:36:1a:bf:7c:25:73:74:79:d5:7e:80:ab:41:f9:
4b:3c:b9:a1:88:3c:56:a9:62:fc:90:8a:52:d5:99:
4c:60:24:b9:40:46:63:e2:ae:ff:25:85:66:ac:c4:
1f:63:6e:5a:a8:f5:92:c0:62:5f:aa:7d:96:92:d6:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:A7:2E:F7:AC:5E:DE:C6:8B:6E:09:37:57:40:53:7B:AB:4D:69
X509v3 Authority Key Identifier:
keyid:6A:4C:A0:09:BE:A3:D1:D8:9B:EA:5E:D9:D3:33:59:53:23:EE:8B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akygCb6j0dib6l7Z0zNZUyPui64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/a1-nLvesXt7Gi24JN1dAU3urTWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/akygCb6j0dib6l7Z0zNZUyPui64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.55.0/24
Signature Algorithm: sha256WithRSAEncryption
05:dd:38:19:26:51:c5:f1:0a:e3:1c:af:1a:25:bb:0f:bd:65:
92:d2:41:0b:5c:c0:a0:11:d7:14:8e:13:b3:18:a4:e5:e8:87:
5b:6b:2d:54:af:bc:38:2d:4e:30:6b:20:19:e2:f1:a4:cb:34:
1a:cb:e1:43:f9:fb:32:db:ae:e7:b3:25:75:1f:87:73:24:f4:
95:81:14:11:fc:9c:6a:d2:8f:da:22:6b:77:b6:93:b0:97:ae:
97:c5:82:ad:00:ac:0b:f4:fc:f8:52:27:0d:3d:76:18:fd:a0:
c9:5e:73:7d:3c:93:45:cb:e4:42:d8:89:91:1e:0f:94:50:f9:
8e:99:bc:51:eb:87:02:db:ce:6d:db:b8:9f:25:1e:e5:67:94:
a4:56:a1:60:ef:d8:42:9a:8b:f7:f7:70:70:c1:19:22:f8:b7:
06:6d:c7:32:a3:a7:ef:27:0a:a6:be:73:b3:af:70:05:52:6a:
77:ef:54:88:5a:4e:71:8a:b9:30:e7:7a:53:21:bd:4d:35:6c:
be:ae:fc:6f:f1:4b:e0:49:d4:4b:3e:b8:d6:b5:f0:cd:96:2b:
5a:76:56:87:d6:52:d6:d0:83:e2:66:d8:0a:f9:77:2b:91:2c:
54:50:22:04:8a:42:dc:40:1a:fd:1e:04:ed:c3:91:2b:87:4f:
24:c8:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net