Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/hmvNJjNGEyayqOYfU4_EVOjUveU.roa
File: hmvNJjNGEyayqOYfU4_EVOjUveU.roa (raw, json)
Hash identifier: Db5YaJgczxVnwNBQ64/S0JHWWv2WTM8yo68LbyyvN6k=
Subject key identifier: 86:6B:CD:26:33:46:13:26:B2:A8:E6:1F:53:8F:C4:54:E8:D4:BD:E5
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 0193CE97007B3AF58C44DA69BFA2A18A7E88
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/hmvNJjNGEyayqOYfU4_EVOjUveU.roa
Signing time: Mon 16 Dec 2024 08:30:22 +0000
ROA not before: Mon 16 Dec 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35468
IP address blocks: 193.222.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:97:00:7b:3a:f5:8c:44:da:69:bf:a2:a1:8a:7e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Dec 16 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=866bcd2633461326b2a8e61f538fc454e8d4bde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:55:d0:c8:08:35:d3:d1:2d:3a:fe:c5:02:
6a:00:19:ce:69:25:3e:06:fe:53:9d:c6:a0:8f:f6:
52:3d:fb:46:76:bf:b6:62:f9:58:d2:da:85:a5:5f:
df:55:7e:17:34:cd:5e:65:dd:5b:59:5e:8b:df:78:
d8:cc:26:78:8f:c7:37:d5:d8:dc:69:ef:35:2e:52:
f8:92:42:0f:e7:20:9d:f6:88:a3:76:ab:35:4e:08:
47:c3:54:d0:39:7d:de:41:eb:e7:81:74:8e:00:7c:
5f:22:b7:19:68:36:c9:41:a2:cc:86:c8:29:b3:0f:
9b:f7:50:a5:15:ce:7e:39:36:fe:72:27:f5:6b:a3:
cd:17:96:45:00:08:9b:92:54:3d:79:a8:3b:f1:46:
11:7b:81:7a:c5:44:88:31:b8:84:b5:57:d7:bb:57:
e3:20:a0:96:c2:3a:09:b5:02:f1:bf:d3:45:54:d5:
d1:71:1f:8d:8e:23:89:c6:52:b2:9b:5d:22:d8:c8:
71:30:3d:a3:39:43:9e:ea:2b:ad:23:48:bb:7d:3d:
b3:c0:4c:a3:c9:a6:70:9c:b1:7c:0b:f0:07:bb:5c:
e8:9e:d3:e3:32:b6:eb:02:3c:35:c3:b8:a2:0c:68:
68:97:44:78:66:99:97:e9:b9:21:ba:8d:fd:88:fb:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:CD:26:33:46:13:26:B2:A8:E6:1F:53:8F:C4:54:E8:D4:BD:E5
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/hmvNJjNGEyayqOYfU4_EVOjUveU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.63.0/24
Signature Algorithm: sha256WithRSAEncryption
99:75:ae:02:82:42:97:a6:15:3c:7d:ab:65:59:1c:19:98:54:
f9:e7:97:a9:5a:c8:cb:a4:34:1d:9f:51:e8:ea:30:58:1a:06:
88:97:3b:cc:23:53:df:56:ee:18:1c:e3:9a:01:70:f9:69:3a:
90:e2:da:da:d2:c4:d0:83:4b:83:11:d6:84:36:a1:bf:68:6f:
6f:22:36:2f:a0:cc:8e:8a:37:1f:76:af:87:8a:c4:c2:21:fb:
7a:06:ea:d5:3a:80:0e:c8:85:2d:b6:f5:3f:c4:09:c5:49:a9:
e0:39:bc:a3:d2:45:10:99:12:e3:f2:0c:23:e4:49:4d:56:95:
a5:ae:83:64:41:94:8a:48:ae:3c:5a:bc:bf:d1:50:d6:49:19:
f2:4e:d0:16:54:70:1a:7c:26:13:da:ab:84:e0:ca:9d:b3:a0:
e3:e9:ac:0b:2d:96:74:bf:61:09:cd:15:7e:ee:d5:2d:b2:27:
7f:75:e7:c2:73:28:61:e3:eb:fa:18:ab:60:ad:67:5b:3a:12:
57:6c:80:99:3d:81:b6:ea:45:0f:31:41:00:80:6e:f7:7a:a5:
5a:86:93:71:1c:0c:1b:17:1b:8c:7f:0c:9a:76:23:35:c6:fe:
03:ea:d8:1e:80:92:28:b1:6b:f5:30:c0:9a:f5:dd:3f:bc:79:
e5:eb:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:36 2024 by rpki-client on console.sobornost.net