Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/Lj99Iv2sHMqdrPER_gZTVKByBuk.roa
File: Lj99Iv2sHMqdrPER_gZTVKByBuk.roa (raw, json)
Hash identifier: FFjKrEDjpN4AsMlYlnFfWUkshUkSx+BdNVl3LqAeDVY=
Subject key identifier: 2E:3F:7D:22:FD:AC:1C:CA:9D:AC:F1:11:FE:06:53:54:A0:72:06:E9
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 0193FACE87CB41B701E8F3BCBCD5B02E4389
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/Lj99Iv2sHMqdrPER_gZTVKByBuk.roa
Signing time: Tue 24 Dec 2024 22:34:19 +0000
ROA not before: Tue 24 Dec 2024 22:34:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209810
IP address blocks: 194.50.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fa:ce:87:cb:41:b7:01:e8:f3:bc:bc:d5:b0:2e:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Dec 24 22:34:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e3f7d22fdac1cca9dacf111fe065354a07206e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:cb:f7:7f:22:30:2d:6c:af:3b:93:6d:ec:
8b:15:d4:5d:49:39:29:6d:d6:88:25:ff:77:74:a1:
c2:ef:96:df:40:19:25:d4:c1:6a:04:d0:a3:51:9f:
85:84:05:dd:9f:31:4d:52:27:e2:05:1b:e8:ee:6c:
53:a9:9c:c4:d2:75:01:96:ae:0f:a3:ae:14:ad:e9:
6e:03:79:ce:93:37:fd:7a:3e:4b:cf:32:c9:94:36:
bb:7d:18:24:05:37:dc:a3:73:c9:83:6f:12:65:c5:
f8:b6:f3:ac:9b:01:ce:d4:0b:4e:fa:23:ee:3b:a3:
e6:9a:2b:84:7b:12:e4:5c:94:9d:f2:0e:c0:5d:4f:
96:82:4e:8d:e8:e3:06:48:e6:ba:fa:71:ab:af:bb:
a8:01:04:f4:08:ce:5d:54:62:5f:0d:52:cb:e4:a7:
5a:89:8c:60:55:bf:e4:79:8f:b0:4f:3c:50:a1:e3:
87:cd:2b:59:f4:99:5b:30:11:c0:2b:79:e7:5e:a9:
12:f3:b9:bd:44:ef:f5:df:66:73:f4:21:69:61:ec:
75:53:df:c8:ba:07:05:f6:ca:0b:6d:83:42:c0:7b:
4f:7e:ee:04:51:5a:d8:39:91:c8:90:d3:b7:77:68:
5d:6e:02:3a:c6:cf:89:1b:10:ba:95:bc:37:a6:3a:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:7D:22:FD:AC:1C:CA:9D:AC:F1:11:FE:06:53:54:A0:72:06:E9
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/Lj99Iv2sHMqdrPER_gZTVKByBuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:11:82:8b:5e:25:60:44:72:82:f7:cc:ce:55:6c:21:4c:41:
f3:21:30:65:78:71:54:b8:b4:10:6f:f7:9a:d3:b8:c2:d9:c0:
3a:b9:2e:fb:24:46:c7:64:04:20:c4:e8:e8:24:28:65:dd:ff:
15:f5:a0:8f:2d:c1:69:70:65:9d:4b:15:7e:af:fe:6b:70:c7:
4d:d0:98:d8:02:37:c7:51:27:d8:3b:d6:e2:86:77:53:74:44:
1a:28:ba:5a:af:1c:23:65:cb:6b:77:44:28:2d:00:02:ea:0f:
bd:9d:a5:a3:0b:ac:9b:7a:f5:c2:bf:1f:19:41:33:1e:d7:b4:
91:5f:f8:25:d0:6a:71:76:b6:67:3f:ce:ed:61:7b:7f:ea:45:
42:cf:34:f5:eb:0d:20:98:10:38:3f:eb:af:fc:29:c3:63:16:
08:05:82:5b:38:b0:75:15:6a:ec:73:88:52:73:50:6c:7c:a4:
fd:dd:4f:b6:79:60:e9:6a:7b:ef:36:01:c6:4f:fe:6a:b7:82:
19:39:21:de:13:dc:13:9a:b1:d3:22:93:07:f6:74:9a:c6:05:
ee:67:4b:e4:22:cc:1b:a7:b3:f2:47:2a:56:b1:c4:ad:b0:98:
29:80:81:13:c3:aa:f0:50:29:ea:22:1a:79:30:5c:b2:59:d5:
55:26:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:38 2024 by rpki-client on console.sobornost.net