Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/1-UDfUH5t0OAOwzBKUO9zPOvRDAI.roa
File: 1-UDfUH5t0OAOwzBKUO9zPOvRDAI.roa (raw, json)
Hash identifier: 2OMFVQ9wO4txlzgf7e5Ri+KeMUpZL+DyjM//yOZXqSo=
Subject key identifier: F9:40:DF:50:7E:6D:D0:E0:0E:C3:30:4A:50:EF:73:3C:EB:D1:0C:02
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 018CC2DB62194E4776A4FD3954FF300E9074
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/1-UDfUH5t0OAOwzBKUO9zPOvRDAI.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51555
IP address blocks: 194.213.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:62:19:4e:47:76:a4:fd:39:54:ff:30:0e:90:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f940df507e6dd0e00ec3304a50ef733cebd10c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:26:86:01:fa:ae:c5:1f:75:9c:3d:2f:d6:
06:ae:01:92:c1:cd:9e:70:98:51:e7:95:24:b9:41:
00:18:44:8e:95:f4:4a:44:b8:1d:65:91:10:17:fb:
52:81:72:d9:40:ac:15:09:28:5a:cc:b7:75:f2:08:
4e:2b:94:5c:e4:5f:68:98:ef:a6:41:64:bb:f7:5c:
3a:98:33:2c:f4:98:86:e3:36:94:e4:f7:b9:6b:87:
37:7a:25:3f:5a:2e:e8:84:90:18:66:4b:86:77:8c:
f9:b9:55:5a:6b:07:82:18:4c:40:64:88:80:c1:4a:
fb:8b:bb:55:6c:75:6b:00:e4:87:b5:44:c9:23:e0:
4a:b4:47:e7:65:e4:db:5e:50:1c:ce:b4:3c:ec:73:
76:2d:52:f8:bf:c3:94:49:9a:3d:04:14:47:0b:88:
1d:71:3d:11:a8:17:79:78:91:dc:8f:de:4f:68:7f:
59:d4:39:c7:4e:00:a2:f8:00:c6:47:3a:b9:65:31:
20:96:e1:1f:d0:5e:30:91:d0:10:eb:0c:c8:d4:c4:
59:bf:ef:a0:55:cb:6f:73:0a:18:5f:92:35:d2:3d:
2e:cb:1f:61:12:16:13:db:9d:24:ab:35:9b:39:59:
8c:8e:f1:f5:4c:8d:74:19:cf:62:fe:96:5d:ef:7e:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:DF:50:7E:6D:D0:E0:0E:C3:30:4A:50:EF:73:3C:EB:D1:0C:02
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/1-UDfUH5t0OAOwzBKUO9zPOvRDAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.19.0/24
Signature Algorithm: sha256WithRSAEncryption
31:66:de:20:94:ea:75:56:63:d3:ef:bc:00:88:72:d3:bb:98:
df:bf:13:ec:bb:e6:a3:60:f8:93:23:83:1d:4e:dd:53:32:02:
9e:a2:5c:75:c8:96:ab:4c:01:2d:cd:1a:7c:84:99:b9:ba:5b:
cb:fd:14:0e:8a:cf:b1:be:7e:42:3d:95:67:6c:72:9d:27:82:
cf:6f:a1:d9:30:a8:79:ed:06:5e:98:2d:cd:a6:c7:85:65:69:
23:c6:ed:67:d9:fb:70:9c:e1:39:27:4e:1a:5a:c5:7f:2c:0b:
5b:34:8b:7b:0e:3b:3e:d7:bc:ef:0b:2f:5e:98:50:bc:5b:ae:
87:64:c4:b9:84:62:6d:41:0d:d1:01:98:5f:ad:9f:c5:ad:74:
f3:1b:29:5b:f0:3d:b9:8e:ea:b7:f9:3f:06:f1:ba:34:2f:f6:
e4:c7:77:8f:96:bf:df:6e:aa:6d:41:8d:bc:c9:86:86:fc:36:
1f:c6:53:44:41:c7:f4:9d:2a:b5:7c:89:6b:ed:5e:1f:a8:fb:
8d:62:36:72:78:e8:76:55:52:59:f7:ab:4f:66:1a:42:60:18:
c5:da:91:00:c4:30:a5:b6:52:57:e6:bc:cb:82:b8:07:71:ad:
51:b1:0e:ee:82:62:0b:9b:ce:cd:27:d2:c8:72:f7:af:45:67:
2a:08:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net