Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/K08SzNSMSNL_HWP9S2gvfK_td_U.roa
File: K08SzNSMSNL_HWP9S2gvfK_td_U.roa (raw, json)
Hash identifier: B0F7TyHZzS9fma/NV+bwA7o/e09yLptwAVhKG2+GVLk=
Subject key identifier: 2B:4F:12:CC:D4:8C:48:D2:FF:1D:63:FD:4B:68:2F:7C:AF:ED:77:F5
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 01938392B58F47E0D65363410125024C6C80
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/K08SzNSMSNL_HWP9S2gvfK_td_U.roa
Signing time: Sun 01 Dec 2024 18:54:10 +0000
ROA not before: Sun 01 Dec 2024 18:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34412
IP address blocks: 194.5.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:83:92:b5:8f:47:e0:d6:53:63:41:01:25:02:4c:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Dec 1 18:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b4f12ccd48c48d2ff1d63fd4b682f7cafed77f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:a3:f8:f0:3a:bf:95:f3:e4:77:40:e1:2c:
53:d9:e2:0b:02:f7:5c:89:b6:7c:ac:65:09:11:39:
e3:15:56:68:18:47:b0:34:1b:e3:11:c2:79:26:b1:
44:36:21:3c:05:a1:39:99:25:b5:f6:c1:41:a5:2b:
4e:48:ff:eb:17:4e:9b:43:5c:0d:af:b3:e4:96:e9:
9c:3e:dd:98:b7:5d:51:a6:df:e4:d9:66:8a:37:bf:
8e:92:0e:95:dd:d4:6a:92:cc:48:21:93:79:d0:ee:
41:d4:0d:c3:6a:81:72:53:06:e3:d3:57:e6:39:5c:
46:af:7a:81:ad:2f:57:5b:03:6c:e7:e2:2f:89:eb:
88:b6:29:0b:c2:c9:e3:22:a4:9f:ac:4a:e0:9c:66:
a1:3f:04:30:91:80:a4:f9:69:0d:81:8d:1c:89:b7:
d8:ac:20:f0:7e:06:aa:70:62:d8:47:81:52:75:a7:
6e:41:7f:1d:9d:4a:ca:2d:10:24:2e:86:62:79:aa:
b6:c8:c0:a7:fa:1f:c0:f6:77:2a:7e:09:66:fc:76:
bf:84:4d:30:ae:0a:f6:ec:53:86:26:75:f3:b5:87:
5b:02:44:32:4c:80:6f:ea:77:e5:aa:54:cc:a4:b2:
8f:5b:89:7b:2a:bf:e6:fe:e7:b3:90:c9:3c:82:f0:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:12:CC:D4:8C:48:D2:FF:1D:63:FD:4B:68:2F:7C:AF:ED:77:F5
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/K08SzNSMSNL_HWP9S2gvfK_td_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.16.0/24
Signature Algorithm: sha256WithRSAEncryption
86:be:40:cf:3d:fa:83:5d:28:ea:fa:91:b5:64:36:28:31:89:
60:f3:ad:90:38:1d:ec:63:4c:2a:2b:54:e2:40:e5:b0:51:db:
d6:f1:df:92:d2:95:2e:b8:c5:46:e9:e3:20:e2:f8:25:79:de:
7c:3e:80:b7:e9:4d:28:84:dc:fa:b1:6b:db:94:2d:b6:c2:ef:
3a:97:3e:fc:59:6f:33:7a:f2:77:26:7c:13:bf:3d:3d:3c:03:
ed:09:13:a6:86:37:2c:cb:8b:63:a8:25:28:bc:10:ed:d8:62:
f9:6d:6b:97:65:9b:58:1e:e9:1d:82:06:84:6e:71:e6:e7:e5:
b4:d7:f2:52:24:94:5c:98:48:07:7a:1f:74:21:9d:8b:6a:09:
0b:b2:99:d4:e7:fd:b1:a0:6c:7c:a4:c3:80:ed:f2:f8:6f:8e:
6b:44:7c:04:2f:1c:5f:61:7a:b6:9e:75:ae:fa:51:e0:6b:00:
53:aa:e2:b9:aa:a8:c5:be:52:cc:49:e0:ab:16:17:2a:50:7b:
79:57:fb:39:b5:7a:15:0a:88:b9:49:e9:fa:5e:f4:5f:89:31:
c9:ac:25:bc:50:2b:7d:ae:0c:b8:99:e5:6e:bf:87:45:a6:27:
d9:45:0b:16:d2:cb:3e:41:8e:30:69:70:98:dd:7a:3c:41:10:
e7:d5:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:40 2024 by rpki-client on console.sobornost.net