Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/9XWtvrd3FgNzodnLVy60IyJQWV0.roa
File: 9XWtvrd3FgNzodnLVy60IyJQWV0.roa (raw, json)
Hash identifier: ZoiCuSyNqu8sMqNCb1v/p0zwmzpjOf34EIxIWZkPVbU=
Subject key identifier: F5:75:AD:BE:B7:77:16:03:73:A1:D9:CB:57:2E:B4:23:22:50:59:5D
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019377A4817506633B31407DFB078C644BFA
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/9XWtvrd3FgNzodnLVy60IyJQWV0.roa
Signing time: Fri 29 Nov 2024 11:18:09 +0000
ROA not before: Fri 29 Nov 2024 11:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29695
IP address blocks: 193.161.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:a4:81:75:06:63:3b:31:40:7d:fb:07:8c:64:4b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Nov 29 11:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f575adbeb777160373a1d9cb572eb4232250595d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:d4:10:92:0c:a1:86:f2:48:06:03:8a:7a:
8f:f3:4d:9d:d7:c2:9e:75:33:31:4b:e1:06:75:e4:
34:9c:a1:41:e4:5f:6c:f4:ad:e4:69:99:7a:12:f4:
81:38:00:06:06:be:18:51:c9:64:53:f6:f6:2d:71:
bc:ae:8a:a1:d5:35:4b:a8:c2:71:2a:66:13:55:95:
f7:ee:44:a6:58:cd:b5:6f:05:10:0c:e2:8b:2d:1d:
40:a7:15:e0:90:06:f5:e4:a3:10:ba:f0:d8:f2:45:
10:22:0e:61:51:c5:2e:84:a3:cd:a6:9b:c6:aa:df:
d3:b2:86:0a:b2:58:a8:d4:0e:55:a6:d4:f7:d6:c8:
f8:dd:62:74:7c:72:28:9b:19:0a:52:e5:f9:39:91:
a2:1c:c9:e3:de:d1:f1:a6:f6:dc:fa:82:23:7a:13:
3f:f3:5b:0b:31:73:05:ce:48:64:9a:6c:ca:c9:17:
ba:f9:0a:d9:bd:95:82:1c:d4:dc:a3:85:3a:52:76:
7a:2d:36:a9:94:2b:c7:5b:94:a6:98:07:4b:e3:5e:
de:24:c9:d5:83:4a:84:cc:02:62:65:3e:e9:ee:93:
b6:7f:55:2c:00:1a:e6:12:16:e9:da:3c:46:2d:c3:
c8:07:70:60:ce:b7:7c:07:30:af:73:0a:aa:88:d4:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:75:AD:BE:B7:77:16:03:73:A1:D9:CB:57:2E:B4:23:22:50:59:5D
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/9XWtvrd3FgNzodnLVy60IyJQWV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.208.0/22
Signature Algorithm: sha256WithRSAEncryption
93:47:a0:8e:cc:cf:1e:18:77:26:bc:1f:0f:83:01:2e:09:d6:
83:a1:dd:3c:e8:b1:54:73:3d:a5:cf:60:0f:31:d6:37:c2:0b:
e4:6e:4f:75:30:55:a0:c3:a5:fb:be:b8:b6:0b:38:bf:69:60:
a1:4b:8f:50:40:b0:35:ee:5a:ed:0f:81:81:a0:d7:d4:3d:0a:
d9:20:e8:aa:ad:32:1b:ab:74:da:ac:75:8d:b7:09:ea:3d:a9:
eb:e8:6c:93:fd:d7:3f:20:8d:eb:12:cf:76:70:70:b9:6f:74:
21:b0:5e:65:eb:c6:e0:23:20:e7:f4:e1:51:a3:73:fd:60:12:
7c:b6:f5:df:30:e3:c2:eb:6e:6a:af:f3:0d:b1:7b:5f:8a:43:
a3:25:dd:5f:31:75:b3:37:16:c2:89:f5:ae:ad:5f:8f:0d:42:
8b:58:45:6c:bf:80:51:bf:98:ce:c6:9b:c1:c6:a6:4d:af:49:
c2:41:c6:76:ae:0e:00:ab:cf:7d:2e:17:83:bf:4c:34:f7:e0:
48:94:52:39:85:ac:43:da:b3:28:19:ef:53:78:0c:b6:1b:fc:
1a:dd:3c:14:d7:03:58:b9:dd:14:c5:f4:0e:19:f8:92:a1:aa:
fd:c2:bc:d2:2d:84:05:7c:97:af:61:f8:bc:05:80:dd:36:bc:
c6:ec:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:23 2024 by rpki-client on console.sobornost.net