Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/tnj5rcTec241NKaYEcGnxR9Z3pI.roa
File: tnj5rcTec241NKaYEcGnxR9Z3pI.roa (raw, json)
Hash identifier: /UM5OPz6cIIaj2HGG8aORk/NYax8VkfD3xmAhfjCieU=
Subject key identifier: B6:78:F9:AD:C4:DE:73:6E:35:34:A6:98:11:C1:A7:C5:1F:59:DE:92
Certificate issuer: /CN=8bc1168da16020287eea1fdeca0541930a9d3689
Certificate serial: 0193740D5129BAFFA2272A03EC86A6999E18
Authority key identifier: 8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/tnj5rcTec241NKaYEcGnxR9Z3pI.roa
Signing time: Thu 28 Nov 2024 18:34:09 +0000
ROA not before: Thu 28 Nov 2024 18:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198738
IP address blocks: 193.169.200.0/24 maxlen: 24
193.169.201.0/24 maxlen: 24
193.201.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:0d:51:29:ba:ff:a2:27:2a:03:ec:86:a6:99:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc1168da16020287eea1fdeca0541930a9d3689
Validity
Not Before: Nov 28 18:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b678f9adc4de736e3534a69811c1a7c51f59de92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:51:6f:ea:53:c9:b3:86:e5:d0:01:7c:ff:
36:a1:ac:1d:39:75:79:de:32:93:02:0b:ca:22:d6:
48:0a:41:a7:e1:32:d3:5c:8d:b4:44:86:5c:79:2c:
22:0c:43:aa:74:8f:93:fe:f4:7f:31:4c:8c:3a:a5:
22:e4:04:ca:18:58:34:b0:d8:24:0d:cc:0a:b8:b5:
1e:07:ae:69:a6:34:c5:9a:98:4e:69:f3:ef:d6:af:
da:7c:9f:f5:91:91:db:a3:b1:76:5a:57:0a:3c:d1:
17:1e:42:09:7e:b6:e0:8f:40:ea:ad:06:93:ae:bf:
e1:27:c3:ba:c7:45:01:83:00:76:0c:68:ec:95:89:
e8:30:48:5b:1b:d4:6a:1d:9d:88:7d:fa:a8:3d:25:
af:8a:d5:0a:fe:88:13:2e:16:5e:9d:46:98:19:99:
a9:a5:96:17:66:0a:d5:3a:77:10:a5:2f:4d:a4:b1:
67:34:ea:60:b5:73:d0:f8:9a:a1:27:1c:7a:6b:2c:
5e:20:ec:e2:cd:e3:db:e8:14:c9:0c:53:76:83:f2:
fb:34:6e:5c:ec:d3:f2:93:53:c0:10:16:76:3d:94:
49:81:a7:3b:46:77:c7:54:79:6c:4b:1e:42:4f:04:
9e:a2:cb:c7:c2:d0:be:32:df:f4:05:c4:27:59:9e:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:F9:AD:C4:DE:73:6E:35:34:A6:98:11:C1:A7:C5:1F:59:DE:92
X509v3 Authority Key Identifier:
keyid:8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/tnj5rcTec241NKaYEcGnxR9Z3pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.200.0/23
193.201.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7e:39:a8:51:b4:37:5a:58:4d:84:d1:20:32:78:69:04:9b:
02:3d:9c:d4:93:1a:1a:50:91:c1:d8:c7:b4:cc:be:62:dc:53:
78:14:86:57:84:a0:78:f1:fd:23:bd:4f:f2:cb:ea:7c:a2:46:
f0:dc:08:78:18:b3:66:e9:00:c5:92:2e:06:af:5e:ef:e0:23:
58:f9:ee:72:52:c8:bd:fd:69:50:76:7c:c3:99:db:56:cc:1a:
7d:a7:41:33:1f:63:69:07:64:5c:fc:58:e1:d7:ae:cb:9d:28:
24:23:7d:8a:ef:5d:39:3b:e0:5d:8c:52:87:04:b0:b5:46:0a:
d9:57:8c:15:b7:02:eb:48:20:20:50:19:ac:4a:39:03:91:de:
8d:ce:36:80:df:d0:3f:af:59:8f:0e:da:0a:b8:65:24:75:a3:
90:da:f0:3a:32:c6:09:f9:28:54:8b:74:f4:4d:14:1b:b3:c6:
61:4d:22:1e:9a:54:a9:6a:38:2d:e8:9e:bb:ab:9a:c5:58:aa:
6b:97:1e:de:8b:cb:64:91:bf:27:34:e8:d2:9f:a5:72:b7:58:
d2:48:34:1e:c8:46:97:ab:71:de:2f:29:8f:a1:0f:98:d2:d4:
8a:37:83:38:d8:3a:d4:fd:65:f2:e0:0c:e6:ad:7d:1a:32:c6:
da:04:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:52 2024 by rpki-client on console.sobornost.net