Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/K80cLyOIKXSJiMWvHtpQhHHOTS4.roa
File: K80cLyOIKXSJiMWvHtpQhHHOTS4.roa (raw, json)
Hash identifier: C6QOyMqZYMGp+h3vbdksvkf2Qq35tK7WiMN3r8KKq+U=
Subject key identifier: 2B:CD:1C:2F:23:88:29:74:89:88:C5:AF:1E:DA:50:84:71:CE:4D:2E
Certificate issuer: /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial: 0193D8446CC9D71C67628CCB8220CE831B50
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/K80cLyOIKXSJiMWvHtpQhHHOTS4.roa
Signing time: Wed 18 Dec 2024 05:36:23 +0000
ROA not before: Wed 18 Dec 2024 05:36:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212030
IP address blocks: 194.33.22.0/24 maxlen: 24
194.33.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:44:6c:c9:d7:1c:67:62:8c:cb:82:20:ce:83:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Validity
Not Before: Dec 18 05:36:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bcd1c2f238829748988c5af1eda508471ce4d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:48:4e:5a:c3:43:8a:06:52:ce:44:f3:ef:
34:17:78:18:63:0f:ea:13:dd:11:96:74:ca:91:ee:
d3:ec:24:18:3d:c0:b9:ca:ea:d6:8b:a9:de:68:a2:
dc:88:91:6e:1d:d7:47:24:28:e9:a4:e6:39:40:83:
5d:a7:30:c3:73:68:a8:35:01:13:e0:1f:c6:10:42:
c2:68:f7:f7:b2:fa:7e:a9:65:1c:c6:46:6d:e4:f1:
68:0d:7a:18:28:19:77:dc:9b:8a:1a:8b:c7:69:0f:
07:cb:a2:90:44:3a:27:88:f9:bb:f3:65:0f:01:3f:
87:2b:7c:e6:e0:e8:ab:16:40:d2:a2:57:8a:b6:49:
cf:89:23:90:ec:2f:84:ac:09:30:f0:d2:70:34:95:
86:31:4d:66:1f:76:17:2a:cb:9c:2a:c4:90:e1:53:
83:14:d4:86:9e:7d:35:9d:e0:27:c4:bb:2e:74:75:
43:9a:4e:71:81:f1:1e:cf:9e:8f:18:0d:2c:40:d4:
8e:8a:69:72:a0:d1:7a:08:c2:dc:48:c0:2d:e2:1c:
2c:ab:ca:82:9e:1f:a8:14:34:e7:c7:2b:f8:1b:b3:
fb:bb:c6:e2:d1:5b:fd:89:cc:53:9e:c1:6f:10:a5:
5d:67:5b:fc:07:26:80:c3:2d:46:87:04:21:60:4d:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CD:1C:2F:23:88:29:74:89:88:C5:AF:1E:DA:50:84:71:CE:4D:2E
X509v3 Authority Key Identifier:
keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/K80cLyOIKXSJiMWvHtpQhHHOTS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.22.0/23
Signature Algorithm: sha256WithRSAEncryption
98:1d:ed:27:41:ce:e5:d6:61:ec:9f:77:f8:dd:09:67:a9:70:
12:ce:b4:fa:e0:69:46:02:6f:44:d5:72:dc:d4:26:4e:f9:f3:
a5:a9:0a:f7:85:fa:6c:d7:ae:02:1a:04:19:47:c1:4f:3d:5c:
31:45:5b:34:76:6e:60:0a:f4:ea:e1:b0:ee:f1:43:0b:b5:d8:
31:c4:85:62:0c:c0:27:f2:6f:e5:91:61:50:0e:a9:56:91:f5:
f9:d1:c0:21:c7:5c:8e:e1:02:c8:d2:85:8f:c9:e7:0c:63:c1:
c6:03:b1:c7:2c:23:44:47:f0:83:a2:8b:38:18:2a:fe:79:84:
6c:86:44:38:fe:95:9e:ae:85:8d:ee:f3:6c:3c:52:32:2e:d9:
5a:10:5e:86:a1:6d:28:10:70:d6:67:f2:70:14:7e:2e:9d:55:
10:a0:ff:20:a9:fd:0f:d8:ea:07:5c:21:dc:f5:03:65:38:d6:
94:11:4f:1a:19:fe:12:e8:c2:5b:6e:21:dd:4d:c3:d6:dc:ce:
3e:e1:a5:ef:76:d3:ad:11:ea:ce:c0:8d:1a:34:9b:81:fe:88:
48:8e:4b:5e:6c:41:76:8b:eb:bd:eb:d3:ba:b2:07:47:99:22:
eb:90:7e:1a:f0:35:a7:b4:5d:c2:d2:d8:59:52:91:cb:f7:1a:
55:39:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:15 2024 by rpki-client on console.sobornost.net