Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/6f5490-f0dc-4458-bc95-1b2376b041e4/1/4nyjSM9U9zBCgWfxmh6-XS3ygcE.roa
File: 4nyjSM9U9zBCgWfxmh6-XS3ygcE.roa (raw, json)
Hash identifier: nVnHjn81frx7eNW8yBDzYy5CcgIF25HaDk1ghTGxVAU=
Subject key identifier: E2:7C:A3:48:CF:54:F7:30:42:81:67:F1:9A:1E:BE:5D:2D:F2:81:C1
Certificate issuer: /CN=43f90c83b73b5e1e2cb5bfc45db8ca0531e356f9
Certificate serial: 01856C53B9A9B8A2F483BE246702FE07F0AF
Authority key identifier: 43:F9:0C:83:B7:3B:5E:1E:2C:B5:BF:C4:5D:B8:CA:05:31:E3:56:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_kMg7c7Xh4stb_EXbjKBTHjVvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/6f5490-f0dc-4458-bc95-1b2376b041e4/1/4nyjSM9U9zBCgWfxmh6-XS3ygcE.roa
Signing time: Sun 01 Jan 2023 07:55:04 +0000
ROA not before: Sun 01 Jan 2023 07:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 194.26.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:b9:a9:b8:a2:f4:83:be:24:67:02:fe:07:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f90c83b73b5e1e2cb5bfc45db8ca0531e356f9
Validity
Not Before: Jan 1 07:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e27ca348cf54f730428167f19a1ebe5d2df281c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:d5:82:a0:a8:42:40:f1:de:4f:0a:fa:ce:
6e:31:52:f6:b7:90:29:5f:da:69:d6:db:95:a1:bb:
73:de:e3:aa:20:d3:9f:bb:4c:fe:de:77:23:fc:88:
79:48:43:6c:ff:f3:78:76:03:af:13:ee:93:b1:93:
e5:05:4b:6f:d0:d2:37:6c:1a:a5:a3:b0:31:35:30:
44:0d:24:fb:c8:bf:cc:32:23:71:33:f2:64:a0:2e:
9e:b6:31:da:61:9f:27:e0:22:61:be:ac:b1:2e:a6:
1d:46:04:95:a6:7e:b2:a8:40:19:ef:d3:68:a3:3e:
ad:e0:b1:bd:21:b1:25:bb:38:b9:6d:49:1c:ac:85:
4e:c0:c9:14:e7:dc:27:74:d7:d6:55:1a:d5:5e:39:
c8:f3:35:25:a0:c1:30:6c:fd:e9:b8:d8:3e:a1:d9:
54:fe:20:ad:7c:b1:10:f9:7d:24:8c:74:8e:c6:32:
3d:26:0d:8a:cb:b8:ee:d0:65:61:63:c8:a7:00:68:
c7:d1:3b:bb:49:f8:28:c0:7c:9d:90:29:9c:d8:95:
13:b9:c7:1d:83:ba:d8:d0:3c:da:00:f9:b4:ac:eb:
b4:41:ff:7f:0e:b1:4c:2f:3a:c1:03:75:eb:e4:d2:
5f:60:d4:48:fb:fd:ea:64:4d:77:70:50:c5:86:f4:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:A3:48:CF:54:F7:30:42:81:67:F1:9A:1E:BE:5D:2D:F2:81:C1
X509v3 Authority Key Identifier:
keyid:43:F9:0C:83:B7:3B:5E:1E:2C:B5:BF:C4:5D:B8:CA:05:31:E3:56:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_kMg7c7Xh4stb_EXbjKBTHjVvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6f5490-f0dc-4458-bc95-1b2376b041e4/1/4nyjSM9U9zBCgWfxmh6-XS3ygcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6f5490-f0dc-4458-bc95-1b2376b041e4/1/Q_kMg7c7Xh4stb_EXbjKBTHjVvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.193.0/24
Signature Algorithm: sha256WithRSAEncryption
19:75:57:10:39:40:5c:2f:61:0f:4d:94:24:43:24:ba:47:0f:
91:db:25:29:6a:4c:0f:9a:9e:c7:83:a4:61:98:23:f1:95:8b:
39:a7:2d:bb:07:86:96:93:40:49:80:b8:e6:31:b9:6c:d4:65:
c4:f4:86:c7:4d:31:7b:6d:00:7c:21:64:d5:d3:02:58:39:d4:
28:79:cd:2a:ef:33:c1:09:0b:1f:4e:4c:48:42:49:bf:a5:18:
ee:ed:28:23:b2:f4:96:46:3c:5d:93:b7:ec:25:8d:68:65:43:
73:4a:d9:2a:4d:57:14:9f:4c:ff:b9:dc:e5:4b:98:90:55:6b:
cf:c0:c0:7b:b5:56:07:8b:a1:7d:67:d2:6c:a3:41:65:1b:5b:
20:22:07:70:0d:9c:a8:cb:43:2c:f5:35:7a:3d:14:10:7c:24:
ef:04:52:14:a7:b7:60:4b:41:4a:6d:ce:64:e7:10:75:f6:18:
3c:19:f9:a5:1d:34:1d:86:36:18:e0:d1:59:74:87:ac:a0:2e:
f7:6c:db:9e:42:f4:9f:d8:b3:2a:e6:8c:5e:57:14:7e:fd:4d:
89:93:61:da:5d:be:35:eb:3b:6e:6d:16:08:ff:f7:4e:85:3d:
5f:81:89:e1:81:07:90:d3:59:66:e8:fc:89:67:55:92:2a:ce:
a0:a7:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:32 2023 by rpki-client on console.sobornost.net