Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/ooL76mdIkzdsl9I_-ObYyIF8QAc.roa
File: ooL76mdIkzdsl9I_-ObYyIF8QAc.roa (raw, json)
Hash identifier: OI66q7AjXrZwB5xPCMk1G56wrHCw1Ooe2ABbUolvidY=
Subject key identifier: A2:82:FB:EA:67:48:93:37:6C:97:D2:3F:F8:E6:D8:C8:81:7C:40:07
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 018CCA99DE04CE5727F2560AAA59874621E5
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/ooL76mdIkzdsl9I_-ObYyIF8QAc.roa
Signing time: Tue 02 Jan 2024 14:35:30 +0000
ROA not before: Tue 02 Jan 2024 14:35:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200324
IP address blocks: 194.41.49.0/24 maxlen: 24
194.41.50.0/24 maxlen: 24
194.41.48.0/24 maxlen: 24
194.41.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:de:04:ce:57:27:f2:56:0a:aa:59:87:46:21:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Jan 2 14:35:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a282fbea674893376c97d23ff8e6d8c8817c4007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:42:31:a0:3d:b6:26:c2:2b:32:b3:6e:28:
04:e2:a3:51:34:a5:5e:4a:5b:8e:d3:80:95:42:3c:
24:0a:86:96:f9:5e:a7:a2:ad:91:9c:96:c3:45:21:
f4:0f:64:67:f9:c8:63:47:d3:43:bf:31:cb:65:79:
26:12:06:d9:4a:75:dc:1d:c9:7c:68:30:66:06:8f:
b7:9d:56:a1:46:85:91:c1:96:2f:c1:58:0a:cb:7d:
cc:1f:3a:75:33:b8:7f:ba:d7:22:47:ec:a7:ee:6f:
27:77:48:fa:74:a5:55:04:49:eb:6c:71:28:14:5f:
4a:e7:e0:ff:14:32:72:4e:f7:47:68:8b:38:7e:43:
50:bc:19:7e:d7:7f:f6:49:0f:03:9f:4b:ea:80:86:
a1:5f:de:98:91:22:9c:2e:8c:1e:32:d2:12:3a:d2:
d1:b1:43:fc:04:58:81:a2:dd:86:24:40:89:15:5d:
07:d5:22:47:24:6c:b2:f7:ea:78:c3:19:2c:08:c3:
40:b2:0b:55:dc:a7:50:af:01:71:8a:66:c7:c3:f0:
15:d8:7b:8e:a9:da:46:c4:2c:3a:dc:62:a1:0c:bd:
15:58:ad:8f:2c:18:11:14:55:70:fd:44:34:41:17:
46:55:74:fd:56:ec:de:4e:4f:d8:df:85:49:55:a7:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:FB:EA:67:48:93:37:6C:97:D2:3F:F8:E6:D8:C8:81:7C:40:07
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/ooL76mdIkzdsl9I_-ObYyIF8QAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:6b:8d:5e:58:46:ee:df:98:e9:9e:5a:0d:61:34:da:99:82:
e9:20:47:bb:a9:2f:e1:09:48:fe:28:de:5b:97:0d:0a:97:b0:
12:34:04:8e:b8:ca:05:e5:2c:31:33:8d:d5:55:f2:9f:05:a6:
7d:ef:de:b1:6e:1e:e1:5c:22:e1:2b:97:4f:12:d1:00:70:1a:
f6:d0:0e:12:36:9b:93:41:a4:03:2f:33:44:77:da:9f:d6:0b:
3a:34:6d:44:02:06:8b:fe:8c:3b:12:11:4e:cf:c0:dc:f5:48:
d8:a4:6c:3c:1c:db:9b:d5:a2:24:db:f5:d7:4e:17:0c:e7:bb:
39:ea:7d:45:45:a9:40:1e:e6:d3:e7:06:c7:b0:b0:0c:34:2d:
f2:24:61:f2:06:d8:c5:42:42:37:66:43:e8:0a:a1:84:23:dd:
36:d2:62:4e:f5:bd:40:b9:ec:41:a0:52:e0:59:fe:d9:fb:87:
27:2b:e2:73:63:af:ef:7a:5d:b7:75:b6:dc:07:49:b8:e3:4f:
14:4f:fd:19:29:4e:78:2d:58:48:bf:86:24:e6:2d:56:a0:1a:
67:10:45:76:9a:9c:5c:0b:0e:7b:01:b3:9f:95:e5:7d:06:61:
1e:3c:a9:06:5e:8e:46:93:5c:67:8c:44:64:15:ec:f9:e3:8b:
76:95:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:45 2024 by rpki-client on console.sobornost.net