Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/leC2yIOI3-kS4ogrfW5h99ht95w.roa
File: leC2yIOI3-kS4ogrfW5h99ht95w.roa (raw, json)
Hash identifier: eX52NqKRmWxtIkXKYWZ0d1I2a4Qh4kulhNzV5FtGwqA=
Subject key identifier: 95:E0:B6:C8:83:88:DF:E9:12:E2:88:2B:7D:6E:61:F7:D8:6D:F7:9C
Certificate issuer: /CN=6a5694cf43356ce41722733e80dfc38887f46554
Certificate serial: 01856DDD4CE76DEA99F87325007B36B27B58
Authority key identifier: 6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/leC2yIOI3-kS4ogrfW5h99ht95w.roa
Signing time: Sun 01 Jan 2023 15:04:57 +0000
ROA not before: Sun 01 Jan 2023 15:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 193.150.88.0/23 maxlen: 23
193.150.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:4c:e7:6d:ea:99:f8:73:25:00:7b:36:b2:7b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5694cf43356ce41722733e80dfc38887f46554
Validity
Not Before: Jan 1 15:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95e0b6c88388dfe912e2882b7d6e61f7d86df79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:c4:a1:f8:54:00:5f:44:e1:d3:66:a0:e6:
e7:e5:b8:1c:2f:8d:e6:7e:a0:6f:b1:cb:44:4e:b0:
b7:41:07:b9:22:3b:36:70:f3:e6:e9:c5:f7:f9:1c:
e8:2b:a8:10:c7:48:86:0a:fa:dc:36:cc:db:c1:1a:
77:c5:d6:49:99:96:17:3b:17:db:42:c5:d3:e9:fd:
13:5c:c4:d3:58:83:e6:56:9e:8a:f9:43:cd:31:f4:
4e:9b:05:85:a8:5a:e5:76:76:9a:ec:a0:9c:78:1a:
83:bf:0f:34:15:2d:62:c2:51:06:a2:e7:63:51:1d:
09:83:31:37:75:03:c3:68:2b:46:a0:84:f9:78:f6:
73:2c:48:16:ea:b6:e5:c9:48:78:d2:83:05:04:91:
35:3c:d2:c8:a8:fd:4d:dd:1b:50:07:af:42:aa:52:
53:6d:e6:70:4f:40:58:4f:d0:e9:22:fa:24:94:a7:
b6:05:53:06:00:9d:fe:70:0c:4d:39:15:d5:ed:1b:
c9:a4:3f:82:fe:d0:4b:b5:55:db:00:e3:5c:76:f9:
37:83:06:45:d1:8e:52:32:cf:8d:83:b1:2b:67:25:
d2:49:0a:07:b9:55:85:6f:42:93:de:a2:4a:c4:c8:
2a:7c:85:fa:98:5f:a7:67:66:00:ef:c9:2b:a2:9a:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:B6:C8:83:88:DF:E9:12:E2:88:2B:7D:6E:61:F7:D8:6D:F7:9C
X509v3 Authority Key Identifier:
keyid:6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/leC2yIOI3-kS4ogrfW5h99ht95w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.88.0/23
Signature Algorithm: sha256WithRSAEncryption
28:26:7a:9a:5d:17:53:42:bb:f3:1c:db:2f:ac:82:87:99:f9:
ca:a8:62:8d:37:17:c2:c2:ce:62:6d:55:f5:7f:5b:79:d1:11:
8c:0c:7d:b6:3f:71:9e:03:fb:fa:6a:0a:12:f0:8b:79:fb:fd:
36:50:d5:39:1b:5d:05:65:29:aa:f9:6f:30:a0:f6:74:6b:f9:
84:cb:bb:3b:60:6d:5f:30:5c:73:49:20:54:33:0f:96:ee:d3:
e8:65:3f:5b:1d:ef:a5:89:c0:9f:c3:03:cb:75:4a:d3:25:ba:
2d:b1:f1:8a:23:3f:e4:84:a5:91:6d:a1:7d:82:e4:9f:d1:e4:
db:f4:70:c9:dc:70:84:3c:76:c0:a7:7f:d8:fa:fe:a0:b3:ab:
88:b5:35:66:d7:ad:61:ca:c1:11:c5:03:5a:84:a5:99:4e:14:
4b:9a:ab:ca:8b:61:6e:5b:2b:d7:b5:0c:bd:94:da:4b:d1:45:
d2:2a:54:92:ca:27:ad:dd:e0:19:75:6d:37:c2:39:c5:5f:c3:
8b:bb:fd:c1:b9:4e:9f:5c:0a:e5:56:6d:76:d5:7d:53:c9:d4:
79:14:e0:9d:97:00:1b:4d:76:9e:f9:c3:b4:24:6c:64:a0:f1:
2b:0b:72:ae:2b:9f:5c:5e:83:b1:f5:9e:b7:50:ec:50:00:0e:
c9:02:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net