Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/umQwn19TErwpvpAjisoYiPjo9Tk.roa
File: umQwn19TErwpvpAjisoYiPjo9Tk.roa (raw, json)
Hash identifier: GjOkha147V24NpTM7dMoEGUibS6x31sIXa2GtWouZYI=
Subject key identifier: BA:64:30:9F:5F:53:12:BC:29:BE:90:23:8A:CA:18:88:F8:E8:F5:39
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 01926B4932D157B88BB299DC61396D6E80D4
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/umQwn19TErwpvpAjisoYiPjo9Tk.roa
Signing time: Tue 08 Oct 2024 08:40:11 +0000
ROA not before: Tue 08 Oct 2024 08:40:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25537
IP address blocks: 195.24.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:49:32:d1:57:b8:8b:b2:99:dc:61:39:6d:6e:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Oct 8 08:40:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba64309f5f5312bc29be90238aca1888f8e8f539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:99:a8:60:77:f4:08:57:fc:46:63:fa:e7:
bc:b5:a0:82:62:eb:0a:69:86:aa:48:5e:77:ef:26:
e6:00:96:7e:25:80:fe:76:70:10:fe:62:23:e6:bb:
f1:06:c1:ad:2d:8f:6f:2e:71:55:6b:e9:ac:0a:77:
46:73:f4:b2:ef:59:c4:64:06:aa:0b:7a:45:23:97:
8a:d8:62:d4:f2:c3:a5:6e:1d:d0:0b:cf:c3:c0:2c:
06:ca:b3:6c:49:ec:8e:d5:5d:85:26:69:d8:b5:67:
e8:87:f9:e3:06:12:c8:73:b1:f4:91:f0:22:5d:8d:
24:76:c1:6b:0f:b9:ab:69:f4:d5:ab:a5:d9:51:26:
bd:81:01:70:72:eb:6c:38:e1:6d:45:e4:9d:a3:e9:
f1:97:6b:99:06:0a:59:27:c9:94:72:73:8f:2b:32:
42:f7:69:f5:8c:8b:69:f8:09:97:e8:21:cf:f3:e0:
3d:48:b1:86:00:48:a5:0a:bb:e2:e6:a7:93:87:23:
3a:0f:f2:4c:98:c9:19:3c:f8:99:5c:ef:d5:2c:10:
e7:f0:6a:0c:30:f3:f4:b4:ac:5a:ef:cb:d2:c1:61:
8d:54:57:24:8e:86:3f:44:37:d1:73:4e:f8:10:d7:
26:51:5d:67:1c:59:32:15:3b:d5:18:68:bf:b6:d6:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:30:9F:5F:53:12:BC:29:BE:90:23:8A:CA:18:88:F8:E8:F5:39
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/umQwn19TErwpvpAjisoYiPjo9Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.71.0/24
Signature Algorithm: sha256WithRSAEncryption
48:25:7f:cf:a1:21:7e:e5:b7:70:75:8e:bb:a1:a8:bc:16:ff:
9e:8a:bb:73:f4:01:6a:2b:bd:0f:8f:ab:11:88:77:cb:91:ad:
52:72:6b:a5:0d:73:ae:77:3e:74:90:84:ac:7d:1f:1f:ba:7b:
af:9b:35:49:c0:97:99:2f:a7:df:df:33:15:ff:20:10:e1:56:
f7:bc:dd:81:67:2c:5a:b0:05:10:fb:98:a4:60:3e:d3:6b:08:
9b:6e:06:f7:71:e3:4c:9f:38:ad:bd:6c:97:7c:3b:52:9f:bf:
6d:f7:f3:a7:b9:c3:29:28:9a:6a:92:41:d6:06:0c:39:e4:34:
32:c2:9d:53:84:dd:13:a5:81:7a:8f:1e:d6:84:45:da:96:26:
22:85:5f:74:ea:ec:d0:11:eb:74:02:6f:7c:97:26:2b:17:1b:
d4:5b:3d:29:88:d0:1b:2a:9a:2d:46:3e:75:ac:e7:e8:ec:d8:
cf:1c:94:2c:ed:c5:ad:2b:fc:1d:15:4d:6f:88:98:71:db:ae:
ca:53:60:3f:ce:94:95:92:c7:81:36:65:80:1a:c0:50:76:63:
73:3c:54:ef:b9:c7:fd:c4:51:f5:51:5d:c6:a5:2f:0e:f0:51:
66:af:e6:5c:de:ef:e6:3d:da:a9:e8:6d:44:aa:d0:48:31:52:
67:eb:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net