Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wo-sVGEOgnHQjhV8xgnE6OEA-Ts.roa
File: wo-sVGEOgnHQjhV8xgnE6OEA-Ts.roa (raw, json)
Hash identifier: 72YMtLth6XxK5RR2aVrgxEv6qdU8WShuXusMlA4MoWg=
Subject key identifier: C2:8F:AC:54:61:0E:82:71:D0:8E:15:7C:C6:09:C4:E8:E1:00:F9:3B
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01850F6BB17A0643C14A48B32BEBE0140408
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wo-sVGEOgnHQjhV8xgnE6OEA-Ts.roa
Signing time: Wed 14 Dec 2022 06:56:33 +0000
ROA not before: Wed 14 Dec 2022 06:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.5.146.0/24 maxlen: 24
147.78.120.0/24 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:6b:b1:7a:06:43:c1:4a:48:b3:2b:eb:e0:14:04:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 14 06:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c28fac54610e8271d08e157cc609c4e8e100f93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:e2:0a:1c:16:a8:e1:76:57:7a:66:11:5c:
97:79:ec:0f:87:65:7e:66:97:74:5a:1e:09:12:39:
ae:21:88:c1:1c:c5:dd:5d:55:df:39:9a:87:97:c3:
d1:a3:3e:28:78:06:a0:a5:51:b5:fe:ad:84:c5:02:
5c:35:59:b8:06:fe:1b:9e:15:e6:a1:4b:32:e4:0f:
6f:0b:f8:1d:d8:73:7d:2d:a4:98:01:99:f8:3d:dc:
d6:2b:b4:7d:4a:43:c7:a3:01:11:0c:5f:f9:4a:c4:
96:d0:e5:1b:d5:17:fd:5b:f1:fc:89:3a:f7:02:f6:
a2:30:a9:ad:c2:c5:06:6f:cf:b2:60:d6:d1:b1:58:
b7:ad:60:0c:71:d3:ce:a0:bb:9c:da:83:27:25:da:
51:4f:9e:a8:dd:19:ed:a2:01:aa:b5:1d:42:6c:70:
fb:bd:c9:71:4e:ae:07:5f:7e:7c:32:7b:65:0d:4e:
b0:1d:ad:c6:2f:f4:5e:9f:da:e1:d9:e8:fe:91:41:
8b:dd:03:ce:b3:0b:1b:72:c4:ba:99:8b:04:29:91:
eb:f5:6a:56:ad:64:45:10:99:32:17:8f:55:41:32:
93:31:0c:7e:64:b1:73:06:04:9d:94:51:91:3b:fa:
76:7b:70:06:ad:d4:ab:58:2f:23:b4:39:05:3a:34:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8F:AC:54:61:0E:82:71:D0:8E:15:7C:C6:09:C4:E8:E1:00:F9:3B
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wo-sVGEOgnHQjhV8xgnE6OEA-Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.120.0/24
193.142.22.0/24
194.5.146.0/24
Signature Algorithm: sha256WithRSAEncryption
78:31:eb:14:45:fd:91:45:62:3a:f2:ba:7e:9c:e2:5b:e8:42:
0a:a9:72:b1:d1:d6:7c:26:27:97:fd:8c:83:38:db:ea:d3:68:
4f:b1:2a:09:c9:46:c8:02:38:4e:eb:71:d4:21:52:74:88:1f:
7b:65:98:8e:0f:28:8e:a3:bd:8c:83:37:3a:5d:65:ae:9b:15:
3a:2e:3e:64:20:9f:e8:5b:dc:d3:08:8b:2c:84:2f:a7:82:ea:
17:1c:a1:59:eb:13:47:d3:0b:82:45:8a:40:43:a6:72:36:5e:
69:22:9b:31:50:26:30:96:5c:ad:ab:f2:cd:9c:56:4c:ca:3d:
8d:61:31:78:aa:44:2b:91:35:f9:cd:89:ab:84:e4:18:14:0d:
26:86:ae:42:cd:3c:66:85:f9:74:77:b8:d5:36:a1:22:08:fa:
ae:6f:3e:7b:36:34:91:0d:90:f0:3d:b5:32:3a:b6:e4:9c:8b:
18:5a:c2:42:fa:e6:44:d7:28:3b:a4:9a:57:f7:f7:a0:32:cc:
ea:dc:6d:50:32:2d:ef:d3:78:5f:e0:fe:c7:f0:e1:56:cc:02:
77:ab:ee:33:6c:9b:d3:45:a6:85:eb:9e:8a:67:af:4e:69:67:
6b:01:96:c4:1e:a7:ba:a4:f9:83:49:36:33:9e:4c:6d:94:4e:
74:53:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net