Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/xMRE20F0lXDpGQvOIBJrHHEZHfw.roa
File: xMRE20F0lXDpGQvOIBJrHHEZHfw.roa (raw, json)
Hash identifier: x3MIkxPiAHxKC0nu9d5EanKhAE1bJMfyW13CoazVaKo=
Subject key identifier: C4:C4:44:DB:41:74:95:70:E9:19:0B:CE:20:12:6B:1C:71:19:1D:FC
Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial: 018CC56EED33E72F164363BAAAD31C091857
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/xMRE20F0lXDpGQvOIBJrHHEZHfw.roa
Signing time: Mon 01 Jan 2024 14:30:30 +0000
ROA not before: Mon 01 Jan 2024 14:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49685
IP address blocks: 193.34.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ed:33:e7:2f:16:43:63:ba:aa:d3:1c:09:18:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Validity
Not Before: Jan 1 14:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4c444db41749570e9190bce20126b1c71191dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:67:a0:da:a8:1b:c9:be:2f:09:0f:ca:f2:fd:
d1:35:c5:af:e0:44:65:0b:1e:80:05:59:27:90:ec:
db:01:18:9a:42:ad:78:c5:da:6e:f9:2b:f8:f9:be:
cf:c4:04:71:95:12:32:c9:7b:24:77:ac:14:33:78:
ec:fe:e5:5b:90:db:66:19:fa:28:24:ce:c9:1b:07:
4c:db:92:0e:1f:9c:20:98:0f:24:47:4b:90:cd:fd:
d7:e5:c3:34:17:1e:ee:6f:b4:0f:43:85:48:9d:6d:
29:51:42:3b:2e:eb:b1:4f:27:70:d9:a8:87:ed:62:
9b:e6:5a:c6:46:ee:ec:b5:b0:1f:1d:35:dd:25:89:
68:02:4a:ae:8d:1c:02:ea:07:2a:cb:c1:3b:0e:41:
66:a0:2f:9f:6b:40:30:fc:b8:5a:17:98:88:5d:76:
20:0e:6e:28:ca:f6:45:88:75:42:17:68:1f:d2:89:
88:af:87:a1:9d:a4:f1:5c:31:b9:8a:d5:8a:9d:77:
32:45:6e:35:b7:0b:cc:6b:23:21:3b:fe:f1:8b:42:
a3:2f:fb:06:8a:be:a1:42:11:ab:0a:8b:57:ec:f9:
3c:88:5d:5b:22:26:2e:23:a5:34:3d:88:0d:5f:32:
fe:f0:cd:dd:f6:13:d0:9e:aa:11:34:29:6c:6b:6e:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:44:DB:41:74:95:70:E9:19:0B:CE:20:12:6B:1C:71:19:1D:FC
X509v3 Authority Key Identifier:
keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/xMRE20F0lXDpGQvOIBJrHHEZHfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.4.0/22
Signature Algorithm: sha256WithRSAEncryption
be:77:a4:9e:39:2f:4e:52:dc:40:b4:e6:cb:01:6e:6a:29:7a:
b6:c4:46:f2:82:8b:ca:ef:cc:27:77:78:33:67:90:72:41:fe:
d7:ac:09:fb:db:94:5c:6e:2b:ac:f2:73:68:2c:6c:7c:b2:49:
f2:f5:6e:b9:60:b2:9a:0f:76:be:72:1d:76:69:8c:40:b1:a8:
8c:3d:a4:08:fb:f0:a0:bd:23:c3:ff:c5:a6:4a:7b:6d:91:7a:
39:e7:c2:15:af:2d:1e:5b:57:66:22:b3:2d:dc:5e:e8:ea:22:
7d:9b:53:84:da:df:b7:85:0e:2b:9d:52:86:19:93:f4:3b:59:
04:ff:82:90:41:31:79:0e:d1:5d:d1:d2:2d:50:ac:5a:f0:ca:
77:28:3e:90:78:9a:9f:7d:f9:75:83:9d:68:51:dc:9f:62:9b:
a8:b1:e3:55:eb:f2:3e:12:93:23:c3:22:97:88:96:07:ee:4c:
2c:2c:7b:df:7b:ff:aa:23:ac:e0:c1:80:7b:d5:0e:61:cf:b4:
73:0f:b8:a2:b9:2f:3e:5b:97:29:46:4d:c1:6f:93:ac:4e:b8:
a7:7f:30:2d:2c:16:1c:dc:8f:3f:91:52:fe:8e:25:bb:8a:21:
0d:31:08:00:53:5a:61:31:07:7a:d4:50:a1:55:21:91:ca:ab:
0f:b2:72:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net