Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/B7DNfl-Ka64FwxTUWqe5XRT4tUE.roa
File: B7DNfl-Ka64FwxTUWqe5XRT4tUE.roa (raw, json)
Hash identifier: r5vBTOQ3BygWWQ4i1Dm8ZyIjnIGpwGDS30tZ0HQURRA=
Subject key identifier: 07:B0:CD:7E:5F:8A:6B:AE:05:C3:14:D4:5A:A7:B9:5D:14:F8:B5:41
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019246E5C949C40AE96CF76058B3E8B4D0AA
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/B7DNfl-Ka64FwxTUWqe5XRT4tUE.roa
Signing time: Tue 01 Oct 2024 07:05:17 +0000
ROA not before: Tue 01 Oct 2024 07:05:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8423
IP address blocks: 193.200.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:46:e5:c9:49:c4:0a:e9:6c:f7:60:58:b3:e8:b4:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Oct 1 07:05:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07b0cd7e5f8a6bae05c314d45aa7b95d14f8b541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:86:85:e7:94:36:31:d9:eb:38:81:72:8a:
4f:df:ec:05:33:74:41:73:b5:71:8e:c8:80:42:72:
d1:63:1c:f8:33:9e:84:3d:8a:9e:a3:eb:d3:ea:5d:
cc:e3:6a:fc:b2:28:7d:d0:ea:1e:4b:2a:4c:4d:dd:
c5:a9:24:ac:f3:ae:9a:d4:69:2c:20:ad:cf:ea:9d:
48:27:36:3a:78:b6:25:ca:e1:98:ff:01:8a:1f:e3:
69:99:1a:df:be:b8:3a:5f:22:25:ef:f7:e8:de:b7:
8a:70:e2:5a:e8:9a:6b:12:51:65:5b:0f:d0:9e:0d:
d5:a1:04:b0:40:03:db:23:51:5d:c4:a5:0f:01:b8:
25:2e:6f:f6:9c:9b:99:a2:9e:af:ee:00:ad:0e:fa:
a5:55:19:02:6a:ff:c3:36:39:23:f7:57:fb:8f:f6:
22:d1:af:48:c1:9e:42:12:3f:b7:e3:df:1b:a3:91:
5e:88:e7:16:5d:ef:07:2b:23:c7:12:8e:55:ce:cd:
2b:d4:a9:c8:e7:dc:e9:12:f1:1d:9a:2e:a8:6c:ac:
39:58:ba:68:a2:4f:ea:f3:02:e7:8f:cd:2e:ca:45:
78:86:dc:95:68:24:0f:18:ba:86:a6:37:d5:2f:56:
6a:b7:3f:cc:09:32:80:8d:3d:c2:f9:fd:a4:ae:42:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B0:CD:7E:5F:8A:6B:AE:05:C3:14:D4:5A:A7:B9:5D:14:F8:B5:41
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/B7DNfl-Ka64FwxTUWqe5XRT4tUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.141.0/24
Signature Algorithm: sha256WithRSAEncryption
58:82:94:46:dc:d8:95:65:3b:6e:5f:0a:ac:6a:a5:96:ff:b4:
e7:89:5f:ec:9c:b7:13:47:8e:59:84:dd:b2:7c:a4:b3:06:bd:
45:97:13:8a:89:53:ff:18:d6:ab:65:ab:8c:cf:d2:55:cb:7e:
72:61:ba:07:4d:d3:e5:fd:b6:d8:56:d2:1e:4e:e5:15:b1:dc:
52:8e:60:9d:4a:b2:5d:59:1f:5f:c4:37:64:67:97:14:15:6c:
86:a0:c0:6f:99:3c:b6:94:d6:74:00:52:2d:2b:7d:e1:d9:f2:
4d:a5:21:fc:1b:57:57:14:4a:8b:ef:f9:c4:d2:3f:6b:c9:b5:
47:9d:ad:06:eb:36:88:82:44:15:bd:a3:02:c2:ca:03:43:97:
6f:aa:cc:b4:27:59:4b:3c:d5:56:97:0a:19:70:ee:b7:ec:c7:
92:88:bc:e8:e5:80:21:a5:79:0e:1f:a0:1f:06:08:18:22:db:
12:e5:b7:53:f9:b3:ce:b8:8d:ad:54:e8:f5:d3:c1:ae:d4:25:
d0:68:84:9d:1a:f5:b7:91:7f:72:13:ff:96:90:0c:55:ab:52:
04:4c:87:58:13:4e:5a:ce:d8:6c:7e:20:09:d1:ea:71:fa:b2:
7b:3c:2b:a7:15:55:f1:a2:cd:7e:07:b7:d7:9a:62:ff:d2:2f:
f7:60:c8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:24 2024 by rpki-client on console.sobornost.net