Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/jYCqzyUf8sInzMNitrIRoXoNXHw.roa
File: jYCqzyUf8sInzMNitrIRoXoNXHw.roa (raw, json)
Hash identifier: eVMQPtcehzpmFV3Tv95mqRdm+H0xzlNfm59UwAZTEjQ=
Subject key identifier: 8D:80:AA:CF:25:1F:F2:C2:27:CC:C3:62:B6:B2:11:A1:7A:0D:5C:7C
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 01938D1456250569631FAB190643627AED68
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/jYCqzyUf8sInzMNitrIRoXoNXHw.roa
Signing time: Tue 03 Dec 2024 15:12:20 +0000
ROA not before: Tue 03 Dec 2024 15:12:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 194.9.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:14:56:25:05:69:63:1f:ab:19:06:43:62:7a:ed:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Dec 3 15:12:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d80aacf251ff2c227ccc362b6b211a17a0d5c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:ec:37:dc:80:71:33:95:c7:9f:a4:21:06:
cd:3a:0f:49:3a:68:b8:f6:0b:69:7a:8b:42:e6:ff:
0f:bf:34:dd:f1:06:d8:8d:84:67:72:8c:89:95:c2:
be:33:ce:9c:e9:15:d4:40:0f:36:04:8b:33:7a:d9:
ce:24:6e:b0:54:d9:41:3c:81:f8:e7:c7:67:07:dc:
60:06:02:7c:bf:e6:d0:79:19:45:05:e9:b5:34:10:
22:ab:0c:27:29:63:d4:e2:5e:95:99:46:c4:a4:9a:
00:67:14:6a:b8:05:5b:c7:db:2b:f4:ab:e5:d2:70:
c6:48:35:f6:e0:8a:51:32:c8:38:22:58:86:c5:f9:
01:d3:1f:f0:bd:3a:b2:31:62:31:72:a6:a1:06:26:
33:04:9f:44:49:bb:cb:ca:f1:2d:e5:be:24:34:a7:
b6:5d:c3:fb:af:5e:cc:3a:ac:8a:7c:36:c5:d3:8f:
ea:03:c6:1e:f9:60:0e:86:e1:91:67:d3:d3:2d:ac:
f0:ad:51:51:8a:52:9a:c1:75:49:5b:cf:0c:89:50:
62:70:4a:ff:24:45:c5:8f:e1:6a:83:40:6a:4f:2e:
16:ef:02:53:a5:06:b2:86:42:5b:78:8f:15:c7:67:
a8:18:bf:d4:2f:d3:f9:37:1d:d3:50:4e:0f:eb:e7:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:AA:CF:25:1F:F2:C2:27:CC:C3:62:B6:B2:11:A1:7A:0D:5C:7C
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/jYCqzyUf8sInzMNitrIRoXoNXHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:42:ee:e7:b2:83:30:ee:31:6c:81:53:66:31:07:62:2f:5c:
bc:57:59:22:53:a8:f6:ec:0d:93:26:2d:bf:7f:66:2a:eb:25:
ad:f1:4d:45:d1:f5:cd:7a:51:c6:db:4c:6a:ea:d6:9c:b5:9d:
98:83:f1:39:c5:54:d5:ed:d1:3f:e8:ac:a8:65:53:d3:c1:65:
ae:97:42:df:18:b6:b4:2a:b8:d2:9e:27:c7:26:1c:b6:44:6f:
b9:f0:7e:88:d2:f0:e1:5a:eb:a4:d2:24:3c:b2:e6:94:82:08:
0d:ad:eb:29:d1:fd:b6:bd:2c:0e:db:5d:63:0c:9b:0c:a2:1a:
9d:f1:6c:a8:14:e3:b3:a3:69:72:ae:81:af:ee:38:7e:df:6d:
6c:35:04:0e:d7:f6:c9:9a:57:a7:2c:28:56:fd:0c:50:30:e6:
24:c8:69:97:ec:4b:5c:ab:22:3d:5f:f3:c9:39:54:bf:0f:ef:
cf:e1:8e:8c:d6:3b:52:75:33:44:6f:0a:e5:88:bd:13:40:dc:
b3:2c:a4:bd:fd:eb:0a:12:85:b7:61:18:85:46:c4:53:93:74:
20:b7:d5:3d:16:69:6b:52:61:15:fe:12:e5:4e:30:2f:12:b5:
63:3a:6b:5d:39:10:f7:51:68:61:5a:c1:4c:2b:5b:86:42:da:
b6:cc:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:44 2024 by rpki-client on console.sobornost.net