Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/50l8myUCEZNG9-JBwIyZfxKI9R0.roa
File: 50l8myUCEZNG9-JBwIyZfxKI9R0.roa (raw, json)
Hash identifier: OluNTIjgmtr9CJthh7OkZRfmgMAyPr+hSyK4qh8H14Y=
Subject key identifier: E7:49:7C:9B:25:02:11:93:46:F7:E2:41:C0:8C:99:7F:12:88:F5:1D
Certificate issuer: /CN=e28d01e984236c8118c546381cd9a0f9201c73d8
Certificate serial: 01856E2F85076FC63702CC71CDBB8C72033C
Authority key identifier: E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/50l8myUCEZNG9-JBwIyZfxKI9R0.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212123
IP address blocks: 212.94.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:85:07:6f:c6:37:02:cc:71:cd:bb:8c:72:03:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28d01e984236c8118c546381cd9a0f9201c73d8
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7497c9b2502119346f7e241c08c997f1288f51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:94:d8:83:42:1f:30:18:19:0a:89:9d:4d:
31:8c:9c:a9:d5:23:15:03:24:40:cf:8d:6c:26:79:
94:29:cf:5b:93:35:bc:79:91:50:b7:7c:7d:87:2f:
93:19:c5:8e:97:e1:bc:01:ed:a2:d9:39:0d:42:af:
13:58:51:22:b3:15:07:68:21:c5:8e:30:aa:75:63:
47:36:65:a6:8c:b6:31:43:1c:06:fc:49:58:f3:5c:
54:ba:3e:e3:20:01:c3:6d:5b:3b:2c:4b:30:90:6d:
35:9b:17:ef:aa:b9:1a:01:39:b8:e0:d7:95:3c:25:
5b:10:5d:4f:14:fe:84:99:92:f5:12:2b:27:8f:60:
10:2a:f6:4c:72:0d:ad:60:fa:14:69:b3:b6:46:2b:
81:37:49:5c:8a:e2:b1:fd:3f:0e:83:b3:8e:b4:e7:
b5:c3:cf:4e:d5:7d:9a:41:3c:46:62:0a:b3:14:1c:
64:fd:7a:b0:15:5e:4b:56:e8:8a:8f:ad:9b:3b:d8:
dd:20:97:3c:c9:dc:ca:d0:f5:34:bf:24:c9:0b:72:
12:fc:8b:77:18:e8:9e:d5:c1:5c:99:e6:e9:55:d3:
ed:42:bb:21:d0:61:40:e4:b9:15:ea:fb:39:dc:b8:
1e:05:e0:6d:bd:af:7c:fd:60:a2:b1:01:c5:12:ae:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:7C:9B:25:02:11:93:46:F7:E2:41:C0:8C:99:7F:12:88:F5:1D
X509v3 Authority Key Identifier:
keyid:E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/50l8myUCEZNG9-JBwIyZfxKI9R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/4o0B6YQjbIEYxUY4HNmg-SAcc9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f9:b2:7b:6c:90:30:71:08:d7:fc:6e:ec:b4:a8:d5:50:67:
d7:1b:4f:2e:a1:e6:2e:3f:1d:98:33:b6:9d:c9:5d:d8:d6:e9:
d3:2b:d5:f4:f7:eb:93:d2:1d:de:59:0f:cb:e5:18:b7:4b:85:
68:6f:07:2e:2e:09:05:20:45:ec:de:50:0d:23:63:f3:d6:bb:
f5:1f:e4:60:e2:88:07:64:67:b7:56:27:99:a1:3d:5c:d3:7f:
4e:a6:ea:6a:f5:15:4e:0c:8c:6a:28:18:97:5a:31:47:89:35:
8f:2f:19:95:63:07:16:f1:f3:25:5c:29:cf:81:d3:ab:8c:99:
01:9c:ea:94:d0:ef:86:d3:73:51:1a:25:52:16:d5:c8:aa:d2:
e7:be:46:d7:d0:50:61:5c:1b:2f:6d:b2:c1:2b:b3:76:3a:5b:
bb:f4:72:1f:db:5b:8c:19:17:30:94:20:79:f2:cb:97:4d:58:
51:51:8b:23:79:58:08:d3:19:c2:26:4f:e4:1b:d9:a4:d7:ab:
c4:51:05:f4:da:24:bd:62:b0:d5:ee:82:70:d1:31:63:bf:9c:
b8:4d:2c:04:af:f6:3c:99:a0:e7:eb:36:e3:0e:44:e5:e3:cb:
75:ad:da:a7:75:47:56:71:7e:71:9b:4f:69:2d:98:e9:5d:3b:
45:56:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net