Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/p1uYd7qodV_Hm8XYLFZMHgDzSek.roa
File: p1uYd7qodV_Hm8XYLFZMHgDzSek.roa (raw, json)
Hash identifier: YoTdzP3lY2zzztrCuhKxSEjqbaUtvmd/9Kz848V6JBM=
Subject key identifier: A7:5B:98:77:BA:A8:75:5F:C7:9B:C5:D8:2C:56:4C:1E:00:F3:49:E9
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 018CC56DF1B3CE13E0981126C539D3EBBD89
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/p1uYd7qodV_Hm8XYLFZMHgDzSek.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196876
IP address blocks: 193.105.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f1:b3:ce:13:e0:98:11:26:c5:39:d3:eb:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a75b9877baa8755fc79bc5d82c564c1e00f349e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:ec:c7:ed:be:82:e0:e3:f3:03:dc:58:25:
43:71:e5:7d:40:0f:0a:34:a0:c2:70:10:a9:04:2c:
47:d7:a2:03:2e:72:45:f5:8e:93:cc:c9:0c:9a:61:
71:bb:cb:f3:82:c6:d3:a1:39:c2:63:88:93:94:ad:
9c:fa:00:00:31:5d:f7:60:c3:9a:8c:d1:60:4d:22:
b4:dd:0e:1e:42:d7:22:47:81:47:18:d0:29:91:73:
98:26:13:9f:7c:71:a6:39:24:e4:05:4b:74:69:38:
e9:5e:03:96:6d:39:b0:6f:f9:ba:9b:1b:f2:4f:aa:
e6:37:36:fe:af:ef:f5:de:fe:6a:75:b6:26:8c:0b:
3d:c0:c3:64:a9:d2:db:e4:f7:91:d1:5f:ca:48:14:
3c:13:1f:d3:7a:c4:2a:98:71:70:7f:1d:cc:9d:b7:
70:8d:77:26:1b:74:f0:3a:20:1b:e5:49:49:c7:ad:
ec:e0:b8:1d:28:1f:51:e7:5b:d6:48:7d:0c:1c:29:
f5:4c:06:30:ec:62:3e:fd:3e:b2:b8:6b:ce:2b:35:
29:66:ba:48:b9:76:01:c7:ce:75:b2:21:73:d2:d9:
e7:bb:49:9c:6f:c3:c5:89:0b:2b:5a:e4:c2:bf:da:
65:f9:c1:e9:4d:a2:63:6f:02:a7:38:8d:8e:d7:45:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:98:77:BA:A8:75:5F:C7:9B:C5:D8:2C:56:4C:1E:00:F3:49:E9
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/p1uYd7qodV_Hm8XYLFZMHgDzSek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.148.0/24
Signature Algorithm: sha256WithRSAEncryption
65:28:f6:ec:ee:e4:05:9a:f5:4e:e2:3d:df:f6:8a:be:92:40:
b8:58:c9:59:65:36:06:fb:f1:80:8c:44:ac:f3:5f:b0:3a:94:
ab:a8:77:5d:cb:d2:e4:22:8b:6b:60:77:ca:1b:2e:1b:50:28:
b2:36:b4:e5:d5:c8:34:89:c4:0b:9a:08:9d:c6:c8:f5:03:a8:
47:ee:a3:38:3b:7e:79:94:83:6b:67:b5:7b:e2:34:46:f9:1b:
5e:36:a0:6a:48:7b:4a:08:e1:45:6c:9c:4e:9e:f0:3e:03:82:
02:5f:08:93:50:31:06:85:59:2c:f7:99:8b:8b:db:38:5e:32:
d6:34:4c:06:80:a0:91:59:8f:5b:88:1f:a2:71:87:eb:0f:ea:
5b:2b:ef:38:bd:b7:32:9e:22:ce:41:a1:9e:eb:e7:0a:ad:a8:
2f:06:64:8b:32:70:6c:0e:20:96:d2:5f:6f:ad:8a:4a:7d:44:
c9:0c:c6:73:fd:b6:62:b6:8c:aa:f1:12:1b:f9:aa:8f:07:ba:
a4:42:45:7f:8d:60:a3:4f:2e:62:eb:ee:4f:04:63:d9:57:44:
70:ac:19:40:06:7f:2f:97:dd:17:cf:de:8f:f6:9b:8d:14:17:
60:c1:ea:a4:65:f9:95:d2:23:f7:fd:50:e4:2a:8f:38:86:9b:
4d:85:d8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net