Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/G2Ri--zRKGqb836m7m8dPjHouLg.roa
File: G2Ri--zRKGqb836m7m8dPjHouLg.roa (raw, json)
Hash identifier: ATNPLMLIWCAf0VVFQ9MeEoLwIJM6ovEij0v3/oycksI=
Subject key identifier: 1B:64:62:FB:EC:D1:28:6A:9B:F3:7E:A6:EE:6F:1D:3E:31:E8:B8:B8
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 019398FEB79FBA9CF8EFC23122FEA0390FDC
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/G2Ri--zRKGqb836m7m8dPjHouLg.roa
Signing time: Thu 05 Dec 2024 22:44:10 +0000
ROA not before: Thu 05 Dec 2024 22:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20374
IP address blocks: 157.23.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:98:fe:b7:9f:ba:9c:f8:ef:c2:31:22:fe:a0:39:0f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Dec 5 22:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6462fbecd1286a9bf37ea6ee6f1d3e31e8b8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e3:5b:56:d5:59:0e:13:cb:44:f7:dc:13:ce:
b6:03:70:f9:d5:4a:25:f0:dd:5c:67:d0:f0:d6:7c:
57:0c:5b:8d:f9:86:ff:ee:3c:59:95:b7:2d:5f:e4:
42:2e:6c:ad:24:a6:bd:12:65:91:f2:29:23:46:41:
b9:d6:4a:36:16:0b:0e:ab:04:40:62:93:cb:c1:3b:
24:fa:a4:8e:36:7f:20:db:ce:e7:8f:ac:93:b9:ea:
f5:38:d8:05:29:7c:1e:0a:db:a8:91:86:1e:ca:97:
c9:6b:95:bb:9d:df:92:5a:4a:07:78:a8:d1:10:57:
aa:a5:fd:ef:28:e7:00:7c:2a:2c:60:c1:c8:9a:08:
78:09:cd:77:79:f2:0f:51:aa:e8:f8:95:5a:45:bf:
a9:fa:d6:c0:d1:0b:81:02:b5:a8:fa:5c:2b:91:c3:
50:aa:be:dc:5d:06:3e:71:4b:d4:25:34:77:fe:b6:
86:3e:4e:bb:b7:2e:bd:83:45:06:04:95:61:e1:11:
40:d0:2b:81:b3:5a:64:fa:ec:0d:23:0a:0c:1f:cf:
e2:b1:d9:1c:b7:4c:31:30:4c:e7:c2:1d:f5:13:61:
8e:d1:e7:c6:2f:df:34:8c:9c:71:f2:d3:f3:db:28:
ad:55:7b:82:e7:f5:2b:2b:60:e9:f8:99:ff:1e:12:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:64:62:FB:EC:D1:28:6A:9B:F3:7E:A6:EE:6F:1D:3E:31:E8:B8:B8
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/G2Ri--zRKGqb836m7m8dPjHouLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.178.0/24
Signature Algorithm: sha256WithRSAEncryption
09:40:d7:e2:9d:d0:b3:da:24:b6:e1:61:8b:27:36:ac:e6:84:
53:52:2c:d3:5e:d5:6d:1f:c0:b9:f2:7d:f8:09:ac:f8:43:2a:
b9:22:03:8d:62:af:21:e4:31:66:1e:9d:01:cd:5e:9f:a5:ba:
c6:e7:e5:c3:86:14:36:38:9c:ef:74:f3:e2:d9:1c:63:ab:41:
d2:1d:d8:dd:11:1f:d1:f7:22:c9:63:d9:df:50:f5:ec:bd:2b:
cd:6a:d2:9e:5b:c1:56:c2:16:d4:69:26:d2:7a:f7:66:2d:d1:
c5:1d:41:c2:99:8c:a7:06:23:f8:61:16:1a:0d:06:9c:28:f2:
e5:45:62:cf:f5:33:2c:d2:56:12:05:30:fe:f3:5e:99:e2:e1:
be:76:8a:f9:15:c8:3a:8a:46:01:d5:7c:7a:b1:6d:6d:25:10:
89:86:90:7d:ec:47:dd:ad:a6:4a:fb:a8:cf:a6:3d:36:96:b3:
71:c9:d3:7f:a6:a2:a4:f8:81:93:24:72:23:4d:d2:80:73:ce:
2d:92:f9:d3:64:79:c4:a4:f6:c5:bd:d7:26:4d:ec:37:2b:0a:
ac:bc:39:1a:50:6d:9b:62:b3:6b:30:cb:70:0b:f9:93:53:70:
cb:a3:68:13:12:2c:4a:5c:4f:58:0b:1d:f4:85:93:ef:de:24:
96:b3:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net