Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/g99OU9rCW_z_sfvxrb6FQYOey14.roa
File: g99OU9rCW_z_sfvxrb6FQYOey14.roa (raw, json)
Hash identifier: c5zYE8/y95ExoeoHsPjoeF4/7m0QFHS1HkLpfbFQD1U=
Subject key identifier: 83:DF:4E:53:DA:C2:5B:FC:FF:B1:FB:F1:AD:BE:85:41:83:9E:CB:5E
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 019295511530F3A2DE5248FF3908375987F5
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/g99OU9rCW_z_sfvxrb6FQYOey14.roa
Signing time: Wed 16 Oct 2024 12:32:51 +0000
ROA not before: Wed 16 Oct 2024 12:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397630
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:51:15:30:f3:a2:de:52:48:ff:39:08:37:59:87:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Oct 16 12:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83df4e53dac25bfcffb1fbf1adbe8541839ecb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:f7:1a:1e:47:fa:da:e1:97:6e:be:0a:bc:
0d:cd:63:01:0a:2d:3c:66:e2:ca:a4:36:d7:72:bb:
11:6d:41:c7:54:e3:98:26:36:8d:bd:aa:57:21:21:
44:52:81:d8:ba:24:43:04:a7:59:2b:26:98:58:6e:
8c:f1:af:15:c1:95:c0:22:ab:83:b9:34:98:fe:05:
19:9c:70:a7:e8:3e:b0:2d:83:84:3e:62:c7:44:4a:
a3:de:c0:40:be:f0:8f:79:0c:f2:41:32:6d:60:35:
88:4c:d2:a3:12:f7:f4:82:5b:50:c1:d4:f1:7f:18:
d4:b8:93:25:45:71:f8:6d:ec:ee:85:d8:f4:83:a3:
c4:f3:d2:9f:65:0e:3d:a3:02:dd:5a:13:12:17:db:
ec:15:a3:3a:e0:13:c8:af:18:c5:f5:b1:e8:ad:78:
ed:d6:1b:8d:0b:73:d2:b0:b4:b5:86:11:d2:fc:24:
bd:34:b7:58:2a:03:0a:2e:5b:ed:cb:99:8a:96:c1:
e1:99:82:7d:28:df:b9:d7:b1:6c:c3:d2:3a:62:95:
14:a8:6d:62:51:54:25:0a:7b:7d:df:ee:75:a4:35:
71:63:ef:32:a2:61:7b:b4:89:bd:8f:a3:5f:b8:36:
54:16:a8:d1:d6:88:ad:ec:3d:78:42:2f:3a:65:67:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:4E:53:DA:C2:5B:FC:FF:B1:FB:F1:AD:BE:85:41:83:9E:CB:5E
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/g99OU9rCW_z_sfvxrb6FQYOey14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1f:d6:ec:c6:32:80:d1:57:bd:7e:18:50:52:1d:0a:e4:0a:
b1:34:98:93:f8:5f:1a:b0:32:be:7d:df:ef:51:33:d9:13:51:
35:6b:b0:1e:44:f1:16:83:7c:4c:94:df:c3:3f:35:01:4f:b3:
e3:f8:0e:56:3b:b6:a4:7f:90:e7:ee:be:b2:e2:12:a3:e4:90:
50:b9:ae:93:29:ef:4c:48:68:01:05:4c:1d:59:33:ef:e3:ca:
8f:49:bb:c7:37:ac:f8:54:80:08:d2:db:e1:8f:2d:b0:25:4c:
f4:65:b1:82:1a:71:5a:2e:13:e2:17:f9:e0:67:8a:71:fc:1d:
f4:86:d1:0e:9b:32:9b:a3:d6:83:58:5c:3f:ce:81:2c:8c:a5:
bf:3b:e0:04:7c:6f:3c:7f:7b:8b:26:d3:31:d0:c4:a9:ec:79:
1d:cd:eb:d1:7f:f0:e6:5a:20:52:d7:6a:44:e1:a5:c7:08:36:
13:c4:6b:2b:cb:ee:7d:2c:44:d8:de:ce:bf:11:e6:a2:53:7d:
cf:31:43:09:7d:ad:a7:c8:08:4d:35:5f:d3:c4:c2:f7:a9:fe:
51:a1:c4:c6:4a:1c:83:6f:c4:21:08:ca:13:ce:67:60:61:bc:
7d:7f:95:4e:6e:1b:aa:ce:a2:08:13:ed:fe:9e:a4:22:6b:5d:
4c:7b:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:32 2024 by rpki-client on console.sobornost.net