Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/543ef2-6ff2-4815-a558-673c690a1aac/1/yJU0l0CMMH0doWgK_b5eRXB2UEo.roa
File: yJU0l0CMMH0doWgK_b5eRXB2UEo.roa (raw, json)
Hash identifier: VVAI6kfMM9FhhY6OVqNA2Zyg0kWuC71hJU0nUiQFmiM=
Subject key identifier: C8:95:34:97:40:8C:30:7D:1D:A1:68:0A:FD:BE:5E:45:70:76:50:4A
Certificate issuer: /CN=2c7b4a14ff3a48a0c0882682034ccc15686e6196
Certificate serial: 0181FBB633AF987BFFD8F510B8FD9362E73D
Authority key identifier: 2C:7B:4A:14:FF:3A:48:A0:C0:88:26:82:03:4C:CC:15:68:6E:61:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHtKFP86SKDAiCaCA0zMFWhuYZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/543ef2-6ff2-4815-a558-673c690a1aac/1/yJU0l0CMMH0doWgK_b5eRXB2UEo.roa
Signing time: Thu 14 Jul 2022 07:57:10 +0000
ROA not before: Thu 14 Jul 2022 07:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20552
IP address blocks: 193.32.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:b6:33:af:98:7b:ff:d8:f5:10:b8:fd:93:62:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7b4a14ff3a48a0c0882682034ccc15686e6196
Validity
Not Before: Jul 14 07:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8953497408c307d1da1680afdbe5e457076504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:a3:c4:26:6d:65:51:2f:88:bd:74:5a:3b:
99:49:ed:e7:82:cc:c0:b9:74:5f:95:93:95:a2:16:
bc:b4:93:4e:3f:59:d6:10:43:34:e3:a6:26:54:5a:
b2:b0:72:58:3c:8d:fc:24:fe:42:90:47:14:4b:1c:
b9:5c:47:fd:6d:1d:0b:72:51:98:ea:54:82:3d:b4:
f6:f2:ed:bc:9f:50:31:90:2a:42:d3:d6:a2:77:e8:
05:b2:59:54:84:18:bc:d8:7b:77:d1:c0:83:6e:60:
fe:ce:17:e3:0e:15:23:eb:be:d8:89:96:6b:b0:0d:
dd:c9:26:ad:8a:99:35:f7:6a:04:81:24:e3:ac:0b:
3b:5c:08:55:c6:27:7d:74:49:eb:7e:3d:dc:2d:84:
c9:45:59:f4:37:a8:f7:9a:cc:5b:9f:e5:1c:6c:eb:
a6:ec:13:4c:22:6a:d8:d0:b5:87:b2:14:ba:05:b4:
4c:6d:d8:2d:58:f9:fe:5a:c7:86:b7:42:e8:5d:3f:
a2:57:62:e7:1e:af:e8:44:d4:18:86:62:71:1d:60:
e3:ca:ec:46:b1:f0:26:e4:b2:c0:57:2a:44:2d:47:
fa:4b:2e:3f:b0:45:7f:36:d7:ac:27:ab:ec:fc:e2:
eb:b1:3b:06:11:ea:d5:a3:8f:b2:9f:d1:3f:5a:a3:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:34:97:40:8C:30:7D:1D:A1:68:0A:FD:BE:5E:45:70:76:50:4A
X509v3 Authority Key Identifier:
keyid:2C:7B:4A:14:FF:3A:48:A0:C0:88:26:82:03:4C:CC:15:68:6E:61:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHtKFP86SKDAiCaCA0zMFWhuYZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/543ef2-6ff2-4815-a558-673c690a1aac/1/yJU0l0CMMH0doWgK_b5eRXB2UEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/543ef2-6ff2-4815-a558-673c690a1aac/1/LHtKFP86SKDAiCaCA0zMFWhuYZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.50.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3f:d0:35:3d:f5:4e:e7:e5:e3:83:27:90:f6:36:cf:0f:7c:
b9:98:1f:52:09:31:ad:57:ad:60:d3:47:3c:21:fd:b0:ec:c7:
c8:0d:b7:1e:0d:e4:2c:4e:05:28:b7:c6:a9:d9:c0:98:a4:b0:
8f:b9:77:48:90:81:59:26:73:8d:cd:14:af:06:21:21:0d:ec:
42:11:3e:bc:50:35:16:50:f6:e4:65:dd:06:e1:f9:19:df:cd:
ce:64:75:5a:8d:b9:bf:39:82:cc:22:88:45:f8:bd:bc:88:8c:
00:95:f2:67:79:14:4b:67:49:c8:11:d5:e6:62:94:2f:3b:2c:
3e:11:e1:bc:ea:70:59:cd:04:ea:c7:5a:19:e4:64:3e:7f:e8:
52:f8:1a:77:44:0a:ea:09:98:47:c0:5a:e8:6d:e0:16:60:de:
b4:83:0b:e8:dc:47:58:90:f6:07:a1:89:bb:8f:ff:c7:3f:31:
99:6c:51:5c:b3:fd:3b:79:2d:a2:c9:fa:e6:a1:0b:68:a5:e8:
ed:a2:7b:6a:16:00:fb:40:e3:99:8d:65:95:1d:b6:03:85:02:
76:3a:b7:2f:ec:b0:f1:7f:31:5c:ba:1b:07:2e:3a:2b:49:e0:
c0:f1:11:29:bd:d2:5c:b9:8d:77:6d:f7:c3:62:a6:f5:f6:11:
f5:d4:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net