Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/DOEry6yqMd9ep1RmnubbOIO3sjA.roa
File: DOEry6yqMd9ep1RmnubbOIO3sjA.roa (raw, json)
Hash identifier: UiNIgNrfY7Vpbm7DIcS3sovgsYR66JVQshfceUADywM=
Subject key identifier: 0C:E1:2B:CB:AC:AA:31:DF:5E:A7:54:66:9E:E6:DB:38:83:B7:B2:30
Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial: 0193ED8F6D7F374AD57ECA68DD0646324CA5
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/DOEry6yqMd9ep1RmnubbOIO3sjA.roa
Signing time: Sun 22 Dec 2024 08:50:20 +0000
ROA not before: Sun 22 Dec 2024 08:50:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201150
IP address blocks: 194.33.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ed:8f:6d:7f:37:4a:d5:7e:ca:68:dd:06:46:32:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Validity
Not Before: Dec 22 08:50:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ce12bcbacaa31df5ea754669ee6db3883b7b230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:6d:30:37:03:49:e2:84:e8:36:64:e4:fb:
a9:bb:cc:51:35:fa:f9:31:ef:1f:1f:94:1d:79:2a:
88:82:df:71:29:ac:fe:8c:2c:cf:9d:32:9b:c8:ec:
4e:9d:04:91:87:25:3d:26:ae:75:b9:86:e8:61:f1:
26:9f:e9:f0:a7:62:81:47:48:66:3a:1e:71:e7:1f:
b3:d8:0b:69:68:1a:49:da:6f:23:7f:ab:46:ee:f1:
a3:1e:a6:9a:ea:7c:17:4c:87:7b:a4:ce:4e:cc:e5:
cd:26:7f:36:6a:52:1a:c0:08:04:82:75:55:5f:79:
8b:bc:f2:0a:0d:64:90:e4:3d:db:5c:a5:f2:7b:bf:
10:21:a4:60:46:2f:57:fc:3f:d8:cd:8d:55:da:d2:
69:3b:3c:f7:00:6d:4c:f4:d7:6b:cd:70:06:74:53:
87:89:3b:f9:46:35:a5:15:7b:fc:72:bf:11:99:00:
58:c2:e1:32:f7:4b:fa:3f:21:bc:2d:a6:8c:1b:d8:
e3:a3:1b:a2:8f:b8:fe:ae:41:2e:95:94:a1:53:fc:
a0:49:83:da:b8:e9:20:3f:93:75:88:a1:b8:5c:2a:
95:9e:a0:e9:a9:68:6e:02:9a:01:2e:ea:6b:3e:4b:
39:42:87:db:81:f1:a6:a4:bd:46:a4:11:1d:c5:87:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E1:2B:CB:AC:AA:31:DF:5E:A7:54:66:9E:E6:DB:38:83:B7:B2:30
X509v3 Authority Key Identifier:
keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/DOEry6yqMd9ep1RmnubbOIO3sjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4b:75:bd:42:c5:7c:71:f2:76:00:66:e2:2a:76:72:aa:ee:
03:36:dc:42:c0:c0:cf:45:db:92:e2:0d:be:80:57:7b:3e:51:
90:37:66:21:a6:7f:71:4b:82:66:fd:75:a7:12:87:a6:2a:89:
cf:5d:97:5e:66:88:90:c5:ed:08:3d:f1:04:92:19:4c:e6:c3:
32:b9:a9:05:bd:10:a9:61:45:70:c4:bd:8a:98:86:b8:25:0c:
a4:6f:78:56:64:3d:61:be:c7:db:68:f4:e3:ca:26:b4:eb:7c:
5c:61:59:1b:7f:2f:7a:3c:53:5d:20:47:02:4d:6c:f7:cd:91:
23:ee:5f:37:87:79:18:75:f5:9e:74:03:b2:57:68:28:80:ab:
fb:41:09:56:fd:79:2c:2d:5b:e2:f4:25:52:67:18:81:df:4a:
9e:e0:6b:c0:42:7b:5e:1b:28:1e:72:56:f1:67:f5:2a:1e:f4:
e8:f3:63:e2:92:7d:db:97:6b:48:84:c6:88:de:43:e0:d6:a5:
f4:17:b3:01:c8:f2:e1:95:4f:69:e0:4b:3c:40:66:cd:04:c3:
41:cc:35:8f:78:32:d7:1a:06:fe:ec:5f:d8:9f:55:28:32:ee:
76:21:eb:cc:b2:8c:b0:a2:90:25:77:75:91:e2:4b:1b:67:23:
89:2a:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:44 2024 by rpki-client on console.sobornost.net