Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/lQexc1BjLtG0UbhvpwquVodFYBU.roa
File: lQexc1BjLtG0UbhvpwquVodFYBU.roa (raw, json)
Hash identifier: 3TMyG9SJqy8Q7Lll0OiTVIKyqF2xrvUR/x9jf2xiyfk=
Subject key identifier: 95:07:B1:73:50:63:2E:D1:B4:51:B8:6F:A7:0A:AE:56:87:45:60:15
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 01928F18FAB87F22EE76EDB930D5D4903F5B
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/lQexc1BjLtG0UbhvpwquVodFYBU.roa
Signing time: Tue 15 Oct 2024 07:33:51 +0000
ROA not before: Tue 15 Oct 2024 07:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200994
IP address blocks: 185.93.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:18:fa:b8:7f:22:ee:76:ed:b9:30:d5:d4:90:3f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Oct 15 07:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9507b17350632ed1b451b86fa70aae5687456015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:a0:9b:ee:e7:4a:e5:4c:4c:24:e5:d1:7e:
3d:55:c9:18:af:96:c7:33:04:33:c6:b1:10:35:3b:
ad:fd:9f:0c:ce:15:ea:cb:27:9f:26:ad:11:0b:c0:
56:6a:ba:19:be:70:19:39:48:0f:2d:44:ed:e7:22:
69:f4:d5:33:68:cc:e8:77:a7:57:9c:36:01:5d:bc:
77:04:66:db:bb:64:4c:c5:eb:0f:9a:48:58:4b:54:
6a:f2:b2:2c:76:57:91:c2:29:37:2a:3d:50:32:e8:
58:a1:40:70:65:cd:3e:26:dc:51:56:52:8d:5f:01:
9c:c8:56:19:ab:65:c2:63:d0:b1:cd:de:79:80:c6:
d5:f3:48:e0:89:14:3d:0e:54:48:4c:7f:40:88:dd:
b0:73:1c:ae:b6:63:fb:11:d3:d7:d8:fc:c7:5c:fa:
42:e6:68:07:01:11:d0:48:fc:a2:60:a2:a7:fc:d3:
a6:bf:90:1a:fd:4e:92:49:98:14:a6:e5:af:b2:db:
4c:98:b9:78:7e:f1:e3:7a:8b:5a:ff:ee:3e:19:62:
79:46:54:ab:e4:77:ad:f2:e2:a0:5c:00:cb:5a:23:
9f:c3:0c:8d:bb:f4:14:12:07:a6:c6:21:c3:f8:75:
a4:55:a7:15:5b:b3:78:6f:15:b5:d1:25:9b:4c:de:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:07:B1:73:50:63:2E:D1:B4:51:B8:6F:A7:0A:AE:56:87:45:60:15
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/lQexc1BjLtG0UbhvpwquVodFYBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4d:86:f8:3c:4e:d9:f1:02:e1:17:4e:03:77:a3:89:2e:31:
cd:02:e1:49:cd:af:ee:7b:fe:24:68:bc:0f:cd:12:67:6b:93:
14:ef:11:c9:fc:58:cf:9b:30:e0:c0:3a:47:64:d8:06:bb:12:
d6:dd:24:ec:03:aa:66:ec:b8:84:53:d3:21:d4:a8:c9:cc:15:
9d:bb:7a:66:66:0c:d9:3c:1e:ba:27:f8:9b:eb:3b:7b:5d:5d:
57:50:1a:30:51:43:7a:ce:8c:47:2a:bf:7f:00:cb:7d:5a:77:
e2:04:48:e6:d3:0f:9c:1b:60:89:d6:8b:ef:85:bd:aa:40:b2:
b1:6c:d8:29:8e:2b:df:96:58:dc:c1:21:e5:bf:bd:6c:be:fe:
21:4c:fe:97:41:5e:57:0b:36:f8:93:db:05:3b:65:dd:3b:c4:
3c:ad:62:4f:cb:46:ab:3f:d0:ef:bc:6e:78:7c:02:a1:5b:39:
23:ad:e2:0c:4f:84:eb:65:e7:11:7b:41:b7:ba:67:ca:6f:c8:
e5:bf:25:7f:bf:eb:dd:74:3b:35:66:33:61:fa:65:1f:63:90:
81:78:64:fc:3e:80:24:fa:97:87:24:19:80:09:03:40:42:2f:
2d:82:7d:24:0b:d1:22:57:97:01:ad:98:03:7b:00:42:f0:ec:
31:e1:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:20:00 2024 by rpki-client on console.sobornost.net