Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/iRL2G3O6x8d_gUBrM6Cz0sE-mm4.roa
File: iRL2G3O6x8d_gUBrM6Cz0sE-mm4.roa (raw, json)
Hash identifier: 7NEJJxx/7a824QpopzQLVbvXvp07uSjkpt+qI1dd0Pw=
Subject key identifier: 89:12:F6:1B:73:BA:C7:C7:7F:81:40:6B:33:A0:B3:D2:C1:3E:9A:6E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 018CC500DD827E8A9BEDAB9BB8976F1D65CA
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/iRL2G3O6x8d_gUBrM6Cz0sE-mm4.roa
Signing time: Mon 01 Jan 2024 12:30:17 +0000
ROA not before: Mon 01 Jan 2024 12:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51566
IP address blocks: 193.189.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:dd:82:7e:8a:9b:ed:ab:9b:b8:97:6f:1d:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jan 1 12:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8912f61b73bac7c77f81406b33a0b3d2c13e9a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:69:db:02:6f:23:7a:1a:e1:cb:87:03:a6:
39:26:14:6f:c1:8d:6d:20:fb:25:41:52:88:55:09:
44:d0:9b:9c:8c:94:78:ee:b1:b5:cc:aa:17:a9:d2:
63:14:24:02:5f:f0:a8:72:6e:20:83:a3:0e:51:5d:
fc:30:87:e7:c5:64:dc:34:5e:99:5e:43:ee:73:f3:
b2:13:77:d8:af:10:73:d0:81:f2:ae:62:a5:51:92:
1a:49:02:54:4f:a0:72:62:da:f7:6c:a6:d0:f4:93:
92:30:6c:f8:3c:cd:be:45:05:4f:e2:37:9b:e8:46:
39:8f:32:6b:c4:19:b9:f8:87:a2:91:b5:c0:81:83:
53:9e:82:e6:d0:dc:5c:6f:1c:59:02:f1:3f:d6:19:
fd:f0:cc:c7:79:8b:19:7a:6c:b0:5c:5e:45:c0:60:
d9:7a:40:a0:b9:2e:52:76:06:da:71:64:4a:0c:f7:
b2:66:c1:74:c4:06:a7:6c:b2:2b:27:1d:f3:07:5f:
ae:23:48:fe:20:cb:4a:4b:9c:7b:b9:c3:a5:0c:19:
9e:96:35:42:47:ce:5f:02:4d:75:b3:f0:68:40:b9:
c9:0d:e0:71:75:1f:33:0d:21:a2:34:d1:1d:a3:51:
87:65:e3:e5:b3:ef:dc:12:35:0d:82:7f:94:a4:b3:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:12:F6:1B:73:BA:C7:C7:7F:81:40:6B:33:A0:B3:D2:C1:3E:9A:6E
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/iRL2G3O6x8d_gUBrM6Cz0sE-mm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.142.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d4:ea:3b:02:7f:7c:f1:dc:0e:a9:eb:df:49:4a:b5:5c:e7:
01:a3:71:59:dd:fe:f1:ee:c9:0c:d4:a8:92:2f:f7:f1:b6:39:
76:95:71:f6:c5:0b:49:4b:93:6f:a8:19:55:2b:97:5b:b3:5c:
50:4d:d1:6f:2e:cb:cd:2d:54:8f:39:d6:6c:47:3c:dc:c8:2e:
98:66:3c:8a:c9:77:89:c8:31:bf:78:c9:37:6b:0f:d9:5e:d4:
47:46:1b:b9:a9:56:79:eb:db:b3:69:b4:dd:10:bc:88:a6:b7:
71:f6:0f:7b:09:fc:be:ea:63:41:0a:11:f6:09:de:65:99:86:
a7:f0:e7:35:8c:31:4b:07:51:49:64:36:31:9b:f2:7c:44:f2:
17:34:68:3e:28:c3:97:62:7a:2f:02:90:a6:44:c1:8c:69:f7:
5f:4e:44:69:fb:79:9a:fe:24:ea:a3:6c:aa:ca:3a:8e:cc:58:
16:47:c0:1f:e4:a5:3a:bf:4e:6f:4e:22:de:2e:d9:45:99:ed:
1a:18:15:f6:05:5d:15:af:85:bf:57:78:b2:42:b8:01:a6:1f:
24:19:cc:46:3a:dd:f8:23:07:fd:e7:a7:a9:79:a4:51:34:9e:
3f:74:ba:12:dc:06:96:f9:83:5d:27:de:b5:4c:fd:d7:6d:19:
46:29:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:38 2024 by rpki-client on console.sobornost.net