Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/yS8jkhsofZgWJ6MlAblK0wvLPAQ.roa
File: yS8jkhsofZgWJ6MlAblK0wvLPAQ.roa (raw, json)
Hash identifier: X3dBWkS22nWiQXDiLYxUJ6/ioMuIvD4yVLkeIdswwfo=
Subject key identifier: C9:2F:23:92:1B:28:7D:98:16:27:A3:25:01:B9:4A:D3:0B:CB:3C:04
Certificate issuer: /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial: 018CC9BC28C14DE0825ABED78B88B25DB536
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/yS8jkhsofZgWJ6MlAblK0wvLPAQ.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 129.102.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:28:c1:4d:e0:82:5a:be:d7:8b:88:b2:5d:b5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c92f23921b287d981627a32501b94ad30bcb3c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:76:9c:4e:6a:33:79:ab:49:74:b3:44:1c:
90:fb:9c:18:cb:59:a8:6d:8e:d7:7b:03:b9:5a:55:
80:e5:63:bb:56:d7:b9:ea:51:25:7c:02:6e:16:60:
1b:36:3b:28:43:eb:e0:db:8d:df:4c:65:4c:36:ff:
1d:95:d6:ce:53:21:48:b9:ed:89:d0:d3:47:7f:ee:
7c:96:bd:2b:77:35:63:e8:80:0b:41:b2:bb:9a:17:
9a:96:7b:87:09:44:26:f0:e3:46:73:c1:cb:06:80:
a0:be:d1:0e:f5:26:c2:99:ad:84:95:db:79:0c:72:
77:22:db:5c:18:66:46:52:de:72:76:80:16:45:78:
10:3d:c8:9d:d5:c7:be:ee:1f:48:98:6b:40:73:cb:
12:30:94:8a:8c:0f:19:ab:eb:cb:e5:fa:8c:90:db:
41:0c:7f:d9:c8:7c:ef:71:32:6f:fc:c6:3a:e8:67:
6d:65:a0:93:3f:85:2f:7b:b8:9b:d8:bb:1d:0b:83:
d3:f8:82:a9:da:52:8f:38:cc:96:16:b1:06:b8:b6:
4f:3c:b8:43:dd:dc:37:88:e0:84:fb:76:30:75:46:
9d:9f:1b:5b:43:bc:80:c0:78:9e:1c:fd:28:dc:f1:
e1:55:af:03:01:54:4e:b5:cd:ba:a7:e7:b7:05:1b:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2F:23:92:1B:28:7D:98:16:27:A3:25:01:B9:4A:D3:0B:CB:3C:04
X509v3 Authority Key Identifier:
keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/yS8jkhsofZgWJ6MlAblK0wvLPAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:2f:e6:df:4b:36:16:d2:c6:3c:27:1b:90:f2:d3:fb:fc:f3:
8e:49:d9:55:84:f8:ee:d2:17:29:21:f1:01:f5:8d:82:ba:bd:
9e:4b:75:c7:6e:6a:e3:1f:0c:51:cc:70:46:39:81:d1:eb:f4:
d1:05:6a:a4:72:aa:37:15:68:72:0d:a4:de:a9:eb:72:a5:7e:
84:09:df:a7:86:df:75:f1:ba:43:e8:f0:3f:82:2c:23:e0:eb:
c2:5c:be:e2:6e:7a:6f:f4:48:46:3c:27:e4:b8:31:5d:23:f8:
ea:94:97:44:71:d8:85:cc:51:30:80:77:b9:00:62:72:d6:63:
67:e8:f4:27:87:21:b0:a1:58:88:dc:fc:5e:fe:6f:90:06:63:
9a:b2:4b:5a:b9:e0:da:bc:77:74:49:62:b1:70:44:38:37:b6:
08:41:d7:07:ac:82:15:2a:3c:01:39:11:de:4e:cd:8a:67:7a:
ef:92:7b:37:8e:ae:97:8e:19:b1:fd:db:7e:30:7d:9e:93:a4:
3c:96:b8:7d:c1:b7:ce:8f:f5:15:69:d5:1e:58:6b:95:f7:91:
7e:48:5e:41:27:3f:71:ec:41:b3:76:c3:00:9a:82:0d:bc:a7:
c6:0b:15:a9:d3:37:20:2f:19:c3:42:e8:d5:63:52:62:13:17:
f0:3e:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:30 2024 by rpki-client on console.sobornost.net