Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/MKeXvphajV263X_JSi8hjOTp5V8.roa
File: MKeXvphajV263X_JSi8hjOTp5V8.roa (raw, json)
Hash identifier: cpv3S5xnVyfhYfuNnF2/zDjSBUsSvn0XrHubFD7xURA=
Subject key identifier: 30:A7:97:BE:98:5A:8D:5D:BA:DD:7F:C9:4A:2F:21:8C:E4:E9:E5:5F
Certificate issuer: /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial: 018CC7932F112EF88A9B0172BC3E709DB9F9
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/MKeXvphajV263X_JSi8hjOTp5V8.roa
Signing time: Tue 02 Jan 2024 00:29:21 +0000
ROA not before: Tue 02 Jan 2024 00:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212274
IP address blocks: 195.144.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:2f:11:2e:f8:8a:9b:01:72:bc:3e:70:9d:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30a797be985a8d5dbadd7fc94a2f218ce4e9e55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:24:f6:a4:f6:b8:c2:45:f9:1f:b8:97:c5:
4b:f4:ae:03:99:48:af:d9:a5:0b:ba:b8:a5:8a:b3:
25:00:53:3d:d6:81:92:06:f7:86:70:42:9d:11:f9:
6a:43:49:5e:7d:c0:42:04:d7:4a:d6:92:dc:6c:74:
4d:70:77:88:66:7a:8a:3a:33:e8:9c:19:e9:17:34:
33:ea:18:39:37:8a:64:03:97:a2:36:d5:0e:65:6f:
7b:57:60:74:9e:d9:ad:2a:80:af:be:3c:99:a2:d4:
41:ef:58:74:8d:2f:11:e6:01:a0:b3:56:5c:0d:a7:
df:e2:dd:4d:46:ab:41:b9:18:00:c9:f5:54:15:3b:
24:44:24:b8:54:ba:40:bb:81:d2:37:b2:45:b3:40:
76:62:65:22:9e:98:2a:de:58:eb:d5:9b:a0:b7:98:
79:fa:af:63:4c:19:19:70:9e:26:8f:a5:53:29:07:
71:f6:61:a3:1b:d6:00:cb:53:a4:8d:f2:9c:18:c1:
0c:07:a5:31:cc:f2:75:bc:19:a0:2a:aa:e9:a0:94:
5c:a2:e7:b8:3b:d5:fd:f9:03:ab:ee:24:70:fe:ae:
96:50:77:87:e4:0a:e7:f3:bf:a3:b8:3e:11:8b:e0:
c8:86:25:ed:6f:ab:51:a9:d5:49:e1:f5:24:b2:25:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A7:97:BE:98:5A:8D:5D:BA:DD:7F:C9:4A:2F:21:8C:E4:E9:E5:5F
X509v3 Authority Key Identifier:
keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/MKeXvphajV263X_JSi8hjOTp5V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.16.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b4:b1:fb:09:55:7d:41:94:43:ac:49:5a:3f:40:c6:39:ca:
1c:62:50:6c:0c:58:35:5b:b7:6b:5e:cb:5a:e1:de:76:0c:3d:
94:eb:6e:77:34:f9:c2:19:9e:ec:04:96:14:c8:22:13:6e:a1:
41:84:c5:09:63:aa:e1:0d:76:a1:31:53:3c:e2:a6:ed:37:76:
52:4c:25:70:4a:82:2b:45:f4:1b:6e:16:64:a0:34:98:52:26:
6e:57:b3:7e:1b:f0:64:25:98:1a:c4:af:9a:b9:e3:16:fe:aa:
ab:a9:da:71:ea:94:68:d3:25:17:ee:a7:2b:15:eb:43:b4:f7:
6e:fb:af:8b:b0:f4:4f:a4:2f:b5:58:ee:40:4e:d6:04:d7:e9:
11:3f:73:60:32:76:c8:f4:8a:17:3e:20:be:68:d8:de:35:cb:
8f:41:23:1e:2b:02:b4:02:ba:a7:e8:58:9a:b4:1f:1f:1f:7c:
dd:4e:14:0b:9c:fc:42:0c:85:e9:c5:48:ce:0b:74:59:8d:2d:
9f:ce:55:44:35:40:e2:a1:8a:f8:b4:d4:21:f0:4c:d7:09:6a:
f9:3a:af:59:be:28:99:d4:2a:68:a4:f7:d4:14:ed:c8:9b:0f:
99:53:86:36:98:b2:dc:12:f4:e7:ec:06:b0:08:b0:f3:f9:0a:
57:c0:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net