Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f01e32-7ad0-40fa-b2a3-fbd0639d023b/1/obUNmKfQJZUXMFLM_aRQv_Jx-xw.roa
File: obUNmKfQJZUXMFLM_aRQv_Jx-xw.roa (raw, json)
Hash identifier: GVXk9/DU4O/p14B2fyBzUQJLfExVUJfBH4N0W08mn8c=
Subject key identifier: A1:B5:0D:98:A7:D0:25:95:17:30:52:CC:FD:A4:50:BF:F2:71:FB:1C
Certificate issuer: /CN=934a7e8e845f8568f5c518c3a6e9bbf728e4cb2d
Certificate serial: 01857094E907BA2F48010119C1E61AF546C3
Authority key identifier: 93:4A:7E:8E:84:5F:85:68:F5:C5:18:C3:A6:E9:BB:F7:28:E4:CB:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0p-joRfhWj1xRjDpum79yjkyy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f01e32-7ad0-40fa-b2a3-fbd0639d023b/1/obUNmKfQJZUXMFLM_aRQv_Jx-xw.roa
Signing time: Mon 02 Jan 2023 03:44:45 +0000
ROA not before: Mon 02 Jan 2023 03:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16289
IP address blocks: 193.41.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:e9:07:ba:2f:48:01:01:19:c1:e6:1a:f5:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934a7e8e845f8568f5c518c3a6e9bbf728e4cb2d
Validity
Not Before: Jan 2 03:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1b50d98a7d02595173052ccfda450bff271fb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b6:44:54:eb:01:bb:a9:21:ce:94:21:45:5a:
e2:d4:ca:e1:8c:b7:70:00:2d:7a:22:94:63:06:da:
f8:88:33:ea:49:84:5b:c2:8d:09:ad:d6:39:f8:e7:
e6:e8:e8:15:99:4f:0e:02:ce:66:94:60:ab:83:68:
a9:bf:d6:e3:bb:9d:02:87:20:22:3c:06:ff:e8:a5:
c2:27:b3:f8:43:d8:7b:cd:22:99:24:62:8c:25:be:
ea:ab:af:ed:c1:3e:66:89:e7:75:8a:98:a2:19:cc:
1c:58:3b:14:d2:8d:ab:05:87:88:a6:60:55:d6:09:
89:3c:5f:21:a0:57:d4:f0:0a:28:c5:38:ec:3f:0e:
59:b5:b7:7d:1d:2d:98:8f:00:75:01:43:f9:7b:4a:
35:81:97:07:a7:1b:fb:31:1f:44:72:ef:23:7e:a7:
a0:14:55:f9:da:0e:be:60:19:fe:4e:71:8a:16:24:
fb:bd:cb:0b:eb:d6:a2:5a:7b:a9:1b:08:1e:08:f2:
c3:c5:72:4d:06:70:cc:a4:bb:ee:19:1c:7d:b5:10:
53:61:1e:15:80:34:bf:93:aa:a7:d4:e9:ec:f9:6d:
eb:77:dd:bf:49:35:24:6c:2e:34:bf:15:e4:cf:3c:
22:5e:bc:7c:f5:fe:f4:b9:30:fe:ac:6f:39:aa:93:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B5:0D:98:A7:D0:25:95:17:30:52:CC:FD:A4:50:BF:F2:71:FB:1C
X509v3 Authority Key Identifier:
keyid:93:4A:7E:8E:84:5F:85:68:F5:C5:18:C3:A6:E9:BB:F7:28:E4:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0p-joRfhWj1xRjDpum79yjkyy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f01e32-7ad0-40fa-b2a3-fbd0639d023b/1/obUNmKfQJZUXMFLM_aRQv_Jx-xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f01e32-7ad0-40fa-b2a3-fbd0639d023b/1/k0p-joRfhWj1xRjDpum79yjkyy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:47:4d:97:51:96:37:98:d7:1a:fa:a9:7e:c6:a4:08:85:40:
ba:0f:98:e2:35:e5:6e:9e:9d:1f:e7:c4:14:a6:3a:c6:be:ce:
35:82:53:b7:d1:d7:a0:9b:10:22:48:d8:19:b5:96:58:1c:c2:
1d:d6:c4:5d:4b:42:dc:a5:42:2f:63:35:a0:0e:f0:f0:8d:3c:
6b:ed:0c:c9:0a:38:8f:8a:60:ce:fc:ac:36:30:1f:e0:8d:0c:
8a:d4:b8:5a:a3:2f:7f:3f:d4:2e:67:53:4a:f5:74:ab:9e:34:
89:d9:93:60:3e:22:99:fd:d4:68:c2:68:30:bc:6d:ab:dc:cc:
51:7d:d6:18:a0:95:d6:6d:31:15:37:26:b8:b5:94:da:dd:e5:
9d:1c:f1:9e:d7:31:39:6c:05:f3:d3:79:8f:25:60:af:d3:d3:
db:0b:34:e7:4b:cb:d9:97:d8:b5:06:00:5e:3e:b2:9e:f0:bb:
22:a3:8b:84:bb:cb:37:8a:c8:b8:f2:8c:e4:6d:c5:a9:15:0e:
9d:20:4b:35:10:a2:f4:87:16:ba:7a:05:3e:17:8e:3d:80:b3:
9f:6a:22:5b:12:70:6d:92:fe:8b:3b:9d:38:a2:9e:24:a3:ac:
a8:82:6f:fc:b2:30:97:a9:3e:8a:cc:71:22:11:9c:03:d1:1a:
5e:51:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net