Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/BIL7pymcWpvyH-Pfc3JVtSnNqGw.roa
File: BIL7pymcWpvyH-Pfc3JVtSnNqGw.roa (raw, json)
Hash identifier: XQcn7VQ82cQVHEo06/vPkbOsVoc/elGL7oIZ9/0a4jg=
Subject key identifier: 04:82:FB:A7:29:9C:5A:9B:F2:1F:E3:DF:73:72:55:B5:29:CD:A8:6C
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 018CC6B81D088C999DCDCF230F96F93BAF70
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/BIL7pymcWpvyH-Pfc3JVtSnNqGw.roa
Signing time: Mon 01 Jan 2024 20:30:03 +0000
ROA not before: Mon 01 Jan 2024 20:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30849
IP address blocks: 193.23.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:1d:08:8c:99:9d:cd:cf:23:0f:96:f9:3b:af:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Jan 1 20:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0482fba7299c5a9bf21fe3df737255b529cda86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:98:eb:df:fe:cb:2a:c9:a2:71:8e:7d:d9:
42:67:e6:60:c4:83:ff:2c:d2:80:9e:dd:26:c2:c1:
82:ca:dc:fa:ee:aa:8e:41:79:02:da:1d:c4:7a:41:
d5:e7:4b:d0:8d:ce:d4:77:ad:11:a3:2f:b1:cd:11:
e7:b9:e2:e0:bf:6c:82:7b:d8:91:c7:fb:04:49:f1:
35:1c:6b:89:a0:3c:bd:00:e0:ec:e5:61:36:7e:3b:
ec:8e:34:86:dc:0f:c1:63:57:86:fe:ed:c1:5b:5b:
fa:85:03:1b:c1:8b:a2:0a:0d:9f:71:ae:3b:74:d9:
59:d7:43:70:a4:4c:e3:ae:24:bc:6c:1a:38:2b:6d:
10:0d:d5:06:c7:e5:36:6e:a8:f5:f3:61:77:b5:cb:
cb:51:de:a3:3e:62:05:e6:45:4b:7d:ac:91:a4:7b:
05:ce:65:b1:4c:6d:20:00:e0:75:c4:8d:7f:da:43:
57:8f:d6:7e:f4:78:10:5b:59:d6:ca:11:48:a2:4f:
15:3a:8e:8f:0f:ef:2c:e1:5d:4c:85:1d:2f:73:48:
c0:b0:f6:f2:00:2f:27:54:76:55:72:c2:a5:db:39:
0a:37:76:3d:ab:b4:5d:a8:2f:72:96:b9:48:76:6d:
0e:87:96:2f:aa:10:b7:90:c1:10:3d:8c:8c:d2:3e:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:FB:A7:29:9C:5A:9B:F2:1F:E3:DF:73:72:55:B5:29:CD:A8:6C
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/BIL7pymcWpvyH-Pfc3JVtSnNqGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.157.0/24
Signature Algorithm: sha256WithRSAEncryption
11:db:4f:41:0a:9e:36:c9:75:f6:f9:70:be:09:2e:a6:1b:5e:
5d:76:28:1e:e7:21:07:c6:c8:9c:3b:ad:79:3c:8c:e4:5e:9f:
fa:81:b7:bf:f7:1c:f8:fc:63:a9:d3:ea:77:98:e0:22:ad:79:
07:7b:a1:da:b1:c0:64:d1:05:92:f6:ec:15:8c:db:36:d5:a9:
94:19:5b:78:5e:bf:28:b6:61:5d:49:ba:12:5d:3f:fe:98:55:
e9:b0:fa:cf:67:77:83:f7:ec:04:63:fc:aa:ff:07:e5:e1:f4:
83:3b:ea:72:b7:eb:6a:2e:02:8c:55:37:ba:dc:ec:21:74:ba:
21:d6:64:1d:0d:68:35:05:bc:d2:62:f5:09:f3:13:7a:79:89:
16:6f:7b:2b:87:96:21:5d:cb:73:55:64:92:82:a6:81:b2:0b:
41:0b:2e:ea:14:83:a2:b6:b5:db:3e:37:0e:db:e5:c9:18:53:
99:de:6b:94:9a:83:1c:ea:99:06:9c:8e:73:d0:d0:59:e8:9f:
3e:34:40:9c:57:58:ae:5d:90:c2:3d:ed:c6:71:1d:89:39:17:
3c:ce:9e:2a:69:c6:4f:51:31:da:26:a6:3a:84:c7:46:4a:ed:
0e:35:2e:43:5b:18:ec:9d:91:9e:a7:a7:4a:36:57:2c:6e:46:
fb:67:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:44 2024 by rpki-client on console.sobornost.net