Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/wZQZBa630tBduXh_shpOKILvgok.roa
File: wZQZBa630tBduXh_shpOKILvgok.roa (raw, json)
Hash identifier: 79so7/CKLHp5+cFKm/VCTplcywOdgRUKnXkmfSZA2+4=
Subject key identifier: C1:94:19:05:AE:B7:D2:D0:5D:B9:78:7F:B2:1A:4E:28:82:EF:82:89
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 0193B2AE381EA63EF4A301C3BA47E6003BA6
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/wZQZBa630tBduXh_shpOKILvgok.roa
Signing time: Tue 10 Dec 2024 22:26:22 +0000
ROA not before: Tue 10 Dec 2024 22:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46427
IP address blocks: 192.189.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:ae:38:1e:a6:3e:f4:a3:01:c3:ba:47:e6:00:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Dec 10 22:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1941905aeb7d2d05db9787fb21a4e2882ef8289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:76:d6:33:2c:d6:bf:51:7b:8f:16:2b:e0:
df:8b:3c:35:d8:b1:f5:8b:b9:9e:16:ae:83:a0:95:
31:04:85:7c:c5:07:3c:6c:98:bd:18:5c:86:80:82:
5c:b8:8d:60:30:8f:ce:0f:83:0a:a4:ad:ed:37:35:
58:b4:4f:fd:fd:4f:20:79:a4:bc:6b:a8:f3:55:94:
63:f3:ec:18:8c:31:da:6a:0c:a8:5e:60:64:a3:f5:
6f:dd:be:d3:e5:48:0c:38:1a:1e:23:c9:73:02:da:
81:7e:ac:01:10:3e:ea:29:d5:ea:b7:21:fc:54:e6:
f2:b4:d1:f8:28:7b:8a:3c:d8:11:41:1d:7a:ab:0e:
f8:80:6d:95:d5:3c:3e:8b:32:aa:43:20:ce:94:89:
bc:a5:4c:1b:e2:ef:5e:f9:f9:b6:f6:68:8c:50:70:
af:9f:06:8e:7d:ba:13:2d:aa:93:92:eb:aa:8a:b5:
16:76:63:7d:2c:51:63:a3:42:f8:35:39:5f:bf:37:
18:d5:28:93:55:30:97:d2:81:4d:71:40:80:16:f3:
aa:99:8a:be:8b:47:af:25:47:cd:c6:f3:84:f2:51:
62:63:88:4c:e4:fa:3b:96:ab:04:04:15:9a:3d:bc:
e0:0f:da:ab:c9:40:0a:98:40:62:a1:73:32:41:17:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:94:19:05:AE:B7:D2:D0:5D:B9:78:7F:B2:1A:4E:28:82:EF:82:89
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/wZQZBa630tBduXh_shpOKILvgok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:58:69:45:ec:74:10:5a:f2:76:2a:72:93:d0:a3:d0:bb:06:
43:2c:8e:b0:c4:9d:f2:31:1e:d2:ad:84:a3:c9:b1:07:e6:48:
ee:78:52:b8:b4:64:07:52:89:74:2e:04:7b:8e:06:df:1b:53:
89:5b:80:36:41:0c:4f:93:ce:22:f7:23:a1:30:f6:93:8d:15:
bf:d9:a5:02:16:97:f9:84:01:54:c7:54:da:07:1d:f1:82:42:
bf:56:90:5e:2f:2d:7f:82:b3:2e:30:07:26:d6:d8:5a:00:aa:
09:31:e2:2e:57:35:aa:bd:7c:26:a1:4a:fb:d2:27:06:4d:8c:
60:1e:21:54:0f:40:a5:43:f7:cf:e8:50:23:25:08:0e:d0:d3:
36:19:0f:49:de:d6:77:de:bc:36:e6:3d:1f:08:65:61:41:db:
ab:1c:52:d6:fd:03:9a:eb:18:f4:02:37:86:35:a8:32:b0:b6:
36:0b:a5:92:9e:4e:ec:1d:33:a6:d2:82:3b:a1:bc:63:df:e7:
e7:9c:4c:ec:f5:9f:dd:f6:50:07:40:00:2e:08:61:f0:b2:d5:
3c:df:8a:90:95:96:da:42:8c:53:b8:62:62:5f:e4:be:3a:ff:
d5:7e:60:ff:86:4e:72:83:26:00:5a:8e:3f:51:07:c1:fe:ce:
08:7c:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:10 2024 by rpki-client on console.sobornost.net