Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/W1cZdKR50C4EnLFMpDKZpn0htWY.roa
File: W1cZdKR50C4EnLFMpDKZpn0htWY.roa (raw, json)
Hash identifier: evfEiQKOXHV9xIXcfYaEmg+fI9+lexJiFa3HzNH0/jM=
Subject key identifier: 5B:57:19:74:A4:79:D0:2E:04:9C:B1:4C:A4:32:99:A6:7D:21:B5:66
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 018CC9BBA72C4D3A0040457F7161692FECF7
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/W1cZdKR50C4EnLFMpDKZpn0htWY.roa
Signing time: Tue 02 Jan 2024 10:32:47 +0000
ROA not before: Tue 02 Jan 2024 10:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17905
IP address blocks: 193.108.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a7:2c:4d:3a:00:40:45:7f:71:61:69:2f:ec:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Jan 2 10:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b571974a479d02e049cb14ca43299a67d21b566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:9d:cf:8d:6f:a6:63:09:4a:29:65:3a:68:
9a:76:28:8d:19:e2:30:f8:96:d7:36:4c:7a:df:be:
23:7c:53:8a:12:17:26:f3:4d:91:11:28:ad:bb:e6:
4b:30:98:21:27:fb:ea:2a:60:84:f3:a5:7a:db:2f:
24:fc:93:32:15:50:ad:24:1a:9c:a3:85:c2:07:dd:
44:5b:a9:79:d7:5f:8c:28:e8:11:89:9f:56:09:f3:
0d:fd:d3:b2:9a:47:7a:8d:a9:cc:de:63:43:5c:aa:
0f:7f:23:79:2e:cd:5f:19:5b:15:94:51:d6:2d:07:
ef:d9:60:54:63:b2:01:9f:0d:49:37:bd:4d:42:7b:
05:b3:14:10:68:fd:e3:2f:ee:78:5d:ec:dc:81:c0:
4a:d4:71:4b:e4:e9:13:0a:00:e1:7c:c2:e6:e6:7d:
f7:f3:6b:84:8a:92:e3:97:ae:e0:b8:a9:e3:60:0d:
b2:58:ac:f4:a8:09:8a:67:31:7d:1d:e1:72:a3:99:
cb:2f:2e:4e:bf:0c:4f:e0:3a:e5:8b:eb:4a:d5:d7:
5b:31:23:a0:9a:71:00:c5:f9:f8:f4:07:dc:f1:4a:
65:c1:cc:3a:e8:10:0e:c0:15:64:60:4c:21:71:5a:
6a:fb:3e:71:c3:28:03:1e:7b:0f:15:9c:c1:c9:ca:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:57:19:74:A4:79:D0:2E:04:9C:B1:4C:A4:32:99:A6:7D:21:B5:66
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/W1cZdKR50C4EnLFMpDKZpn0htWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.157.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5e:d9:84:80:7a:b7:77:ae:a5:f2:7f:b7:f0:a5:83:a1:18:
65:a2:18:ab:58:29:85:86:38:1a:74:46:af:6d:98:0a:d7:30:
d7:a9:5d:bd:8b:d7:52:fb:d6:24:c4:dd:77:ed:e2:cd:ce:9e:
30:fc:1a:44:ba:d1:24:b1:0b:22:5e:7b:41:26:71:74:6a:ee:
ad:dd:12:5c:95:49:e2:a3:fc:78:b1:14:ce:eb:e7:db:5c:85:
e1:f8:13:fa:62:e9:3a:fc:79:85:98:f4:23:12:a5:46:95:29:
6d:3e:18:da:ed:ff:0f:d8:b4:41:b9:76:ec:86:72:a3:87:44:
11:be:4d:82:cf:ea:7c:a0:23:49:cb:9f:84:a9:be:78:d4:e7:
9a:c5:56:79:aa:e3:a4:48:8a:0d:a2:a0:55:5a:ee:d7:87:a1:
a5:d7:f9:90:bc:bb:f0:46:cd:bf:bf:0c:21:ad:4f:60:5e:51:
a0:ba:5f:c0:91:21:44:99:7e:98:ec:b9:c0:4d:3d:07:19:e1:
a5:32:9c:ed:88:f4:0b:fa:01:e7:45:12:5c:30:49:13:df:a8:
b1:98:b5:9f:3e:4f:12:49:61:9d:7d:c9:f3:0c:a6:b6:9e:87:
f8:ef:47:67:ff:97:54:96:e7:c3:4a:07:dd:dc:d8:e8:c6:34:
03:20:51:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:25 2024 by rpki-client on console.sobornost.net