Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/V53ZUNLA-PCyk6VBYeDBtLllARE.roa
File: V53ZUNLA-PCyk6VBYeDBtLllARE.roa (raw, json)
Hash identifier: RF+kIsloJeL3CZ/5hXTzJyp8ggCnMnAl77zrd7/13Iw=
Subject key identifier: 57:9D:D9:50:D2:C0:F8:F0:B2:93:A5:41:61:E0:C1:B4:B9:65:01:11
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 018CC8DF4AF3DA9729AD996BE1DE077C8E1D
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/V53ZUNLA-PCyk6VBYeDBtLllARE.roa
Signing time: Tue 02 Jan 2024 06:32:06 +0000
ROA not before: Tue 02 Jan 2024 06:32:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208026
IP address blocks: 194.60.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:4a:f3:da:97:29:ad:99:6b:e1:de:07:7c:8e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Jan 2 06:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=579dd950d2c0f8f0b293a54161e0c1b4b9650111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:67:90:97:f0:22:3d:73:46:4b:b6:d9:f5:
5e:f9:7c:c5:a4:1e:8a:25:c7:ac:c6:8a:41:7f:8f:
51:f1:78:2a:5c:42:9d:09:5b:a3:5c:97:7f:b9:12:
05:46:07:a2:c0:42:e0:95:33:8e:bf:77:d3:c7:cb:
48:a8:36:2b:50:07:e1:31:0d:21:09:c5:12:ce:f0:
31:10:3d:e5:f2:fb:bb:b1:ca:e4:60:e7:13:e0:71:
dd:62:29:a4:fb:35:e2:29:2d:f5:84:71:97:8a:ad:
71:c4:17:92:a0:01:be:d7:11:df:3e:fe:8f:dd:ee:
63:9e:54:47:eb:dd:01:f9:65:a7:a2:29:77:69:11:
75:4e:c0:b5:70:e4:01:8f:a8:fb:f7:f7:28:a8:62:
39:8c:ee:38:ca:6e:9d:29:40:57:20:b5:a2:6c:62:
ea:cc:cb:29:79:53:d8:1b:56:22:bb:0f:6b:ab:2b:
d6:fb:f8:43:89:3d:a3:f5:10:96:df:b4:84:9d:82:
0a:2d:1a:c9:07:99:32:fc:4a:40:67:7c:25:d9:d7:
b0:91:2e:62:1d:69:ea:c1:92:0c:5f:9e:29:1a:46:
8f:f6:98:77:56:fa:f0:d1:aa:4a:45:35:67:d8:32:
db:de:a1:f7:66:69:08:a9:ea:71:fc:74:ff:fb:3a:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:D9:50:D2:C0:F8:F0:B2:93:A5:41:61:E0:C1:B4:B9:65:01:11
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/V53ZUNLA-PCyk6VBYeDBtLllARE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.112.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:f3:5c:cd:e9:7a:1e:31:b8:96:e3:4a:f3:fb:3f:af:fb:9e:
78:70:66:3c:f8:a3:81:14:6f:c1:3c:df:91:58:b4:11:6f:75:
89:0f:ac:2d:53:77:41:0b:25:63:3b:f8:c1:2f:d1:f1:2d:e7:
be:15:dc:c3:fb:49:72:0e:81:59:31:0f:9b:07:4b:aa:1c:83:
36:cc:36:04:f7:f1:d0:63:63:15:f6:8a:dd:c2:18:98:29:d6:
10:2b:90:a2:e7:89:f4:ca:ea:5f:b7:e9:35:03:14:ae:c8:a2:
fe:c5:9b:ee:06:0e:d5:93:07:76:45:17:8e:78:f4:6f:80:79:
6f:c5:52:fe:6d:3f:71:0d:dd:39:86:7f:36:af:08:69:1e:66:
e1:d8:44:9a:e2:f0:c6:05:90:1f:67:3c:ec:2c:15:9b:12:96:
e0:c7:15:66:7c:26:44:66:40:b1:a2:6a:6f:6b:b9:b8:5f:51:
5b:04:a3:c6:9d:94:1e:58:bb:f3:93:a0:9e:8e:d2:30:4a:18:
a5:bb:eb:bf:9c:98:ca:eb:36:cd:da:2c:76:10:82:85:87:6a:
a5:82:d1:e4:d9:68:6c:e8:cb:44:0b:a3:e3:17:c8:1b:20:6f:
71:a1:c6:b5:24:8a:3d:4d:f7:08:46:08:be:61:16:a4:6b:53:
7c:c1:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:32 2024 by rpki-client on console.sobornost.net