Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/543ef2-6ff2-4815-a558-673c690a1aac/1/QECsADYnXfZaYVxaMmAiWXxHhJA.roa
File: QECsADYnXfZaYVxaMmAiWXxHhJA.roa (raw, json)
Hash identifier: YT2uSEgifyF3ZCh25w7FFzz9LTA1X5+/1OSiz62JYps=
Subject key identifier: 40:40:AC:00:36:27:5D:F6:5A:61:5C:5A:32:60:22:59:7C:47:84:90
Certificate issuer: /CN=2c7b4a14ff3a48a0c0882682034ccc15686e6196
Certificate serial: 01856C011CD05C8DF20BA7C321C3A664F62C
Authority key identifier: 2C:7B:4A:14:FF:3A:48:A0:C0:88:26:82:03:4C:CC:15:68:6E:61:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHtKFP86SKDAiCaCA0zMFWhuYZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/543ef2-6ff2-4815-a558-673c690a1aac/1/QECsADYnXfZaYVxaMmAiWXxHhJA.roa
Signing time: Sun 01 Jan 2023 06:24:50 +0000
ROA not before: Sun 01 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20552
IP address blocks: 193.32.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:1c:d0:5c:8d:f2:0b:a7:c3:21:c3:a6:64:f6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7b4a14ff3a48a0c0882682034ccc15686e6196
Validity
Not Before: Jan 1 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4040ac0036275df65a615c5a326022597c478490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:5b:1b:27:3f:e1:f8:48:22:7b:79:f9:66:
97:a3:1d:f6:c6:30:b0:e9:18:3d:6e:4a:d7:fa:46:
e2:1f:8a:34:8d:f9:05:47:29:0d:36:ef:5c:f0:c2:
63:bc:79:85:b4:2b:fd:3e:f1:62:02:9e:2c:c1:3a:
10:25:b6:b1:87:df:0a:24:7f:56:1f:37:fc:60:39:
72:d6:2a:74:ec:48:e0:10:f8:b0:6c:70:1c:20:8c:
50:bb:2f:8b:8e:a6:71:32:3d:a9:4e:20:55:51:f8:
79:80:8a:e0:22:33:a4:e5:9e:c8:72:da:f9:45:44:
20:b9:81:fc:91:a5:97:e4:f1:a1:f0:e8:ac:b6:f9:
35:e1:3b:b4:f8:00:9b:76:07:b1:5a:e1:90:06:a9:
85:71:7e:9a:ac:8b:49:21:dd:ae:19:a9:39:18:98:
92:1b:18:83:3b:fe:07:8b:19:f5:a4:fa:95:30:6a:
53:68:91:98:eb:eb:e2:7a:88:4d:6a:12:83:d8:52:
5f:69:ae:44:85:85:91:8f:31:3b:c5:96:4a:c8:c1:
2c:c7:0a:ca:a9:3f:2a:9e:55:61:84:29:28:a4:0f:
83:d3:fb:25:18:80:49:8f:11:a9:7d:85:c1:29:ee:
b0:49:cb:9d:5e:15:31:12:54:9e:0a:e1:03:66:28:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:40:AC:00:36:27:5D:F6:5A:61:5C:5A:32:60:22:59:7C:47:84:90
X509v3 Authority Key Identifier:
keyid:2C:7B:4A:14:FF:3A:48:A0:C0:88:26:82:03:4C:CC:15:68:6E:61:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHtKFP86SKDAiCaCA0zMFWhuYZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/543ef2-6ff2-4815-a558-673c690a1aac/1/QECsADYnXfZaYVxaMmAiWXxHhJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/543ef2-6ff2-4815-a558-673c690a1aac/1/LHtKFP86SKDAiCaCA0zMFWhuYZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.50.0/24
Signature Algorithm: sha256WithRSAEncryption
62:38:d8:a8:b4:32:ed:0d:50:27:ab:8b:cc:80:9b:71:ae:00:
b2:0d:47:f1:62:58:35:57:de:ec:d5:8b:45:90:28:3b:0d:8b:
9d:f3:18:74:a8:53:ce:bd:9e:b3:31:c2:69:72:2a:33:7d:dd:
91:cb:3f:69:ef:25:29:4a:f9:92:33:ee:66:9e:a4:f8:b6:b4:
7a:4b:6d:aa:27:5f:45:c6:e6:c3:00:92:86:6d:ba:c8:ef:9d:
59:06:a8:18:ff:ab:62:f4:be:0d:fd:f9:44:18:2f:5c:30:82:
9d:a7:1d:e0:41:f3:b3:8e:ee:e1:4b:20:11:e0:ef:9f:6e:72:
11:02:d6:84:07:76:24:0f:ab:db:94:60:2b:4a:3a:11:c0:de:
43:ad:e5:23:b3:d3:e3:65:f1:a3:5c:70:bb:66:4d:76:3e:4b:
19:3d:34:91:a9:16:10:86:59:22:c0:88:01:06:64:57:86:09:
a0:07:c8:35:d7:e3:db:0a:d5:88:70:7a:74:c8:39:48:75:79:
7d:fa:e2:f5:aa:4c:22:40:df:46:24:c9:63:f7:e2:a2:90:7c:
14:5a:18:49:2b:1c:1e:06:6c:1d:e3:07:de:88:67:ab:3b:84:
ee:55:d2:43:a4:20:bf:05:c8:90:3d:79:07:16:45:2c:5a:df:
84:a2:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net