Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/z-CHeXv_CTwvBviO7Vgft3e5eYY.roa
File: z-CHeXv_CTwvBviO7Vgft3e5eYY.roa (raw, json)
Hash identifier: Yk2jzW/A1jDlHWen4CqffFtJtRgatKSmdZ+IyiT4DPU=
Subject key identifier: CF:E0:87:79:7B:FF:09:3C:2F:06:F8:8E:ED:58:1F:B7:77:B9:79:86
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 01942522369E9E24B29E69DFDD3B21035B52
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/z-CHeXv_CTwvBviO7Vgft3e5eYY.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50331
IP address blocks: 178.217.192.0/21 maxlen: 21
178.217.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:36:9e:9e:24:b2:9e:69:df:dd:3b:21:03:5b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfe087797bff093c2f06f88eed581fb777b97986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:2c:5a:9d:c9:32:7f:38:6d:ec:96:39:ad:
52:74:d5:d5:82:f4:06:06:b7:6d:2a:67:87:5c:48:
4d:a2:7e:cb:70:6a:7c:4b:89:85:77:ac:3f:57:29:
ab:1a:c4:fc:0b:db:b2:2d:99:fc:6e:33:e8:b7:c5:
9a:ce:e9:20:c0:12:95:1c:d8:63:5b:f8:ef:8b:1f:
12:6f:c1:f5:52:12:4a:74:0b:01:dc:6f:78:05:be:
ad:f9:81:1e:c4:4b:8d:6d:58:47:35:d9:b0:e8:10:
29:34:1e:35:2e:0e:2e:8e:34:cb:09:9a:6b:bf:bb:
7e:fc:9a:e4:da:01:11:92:de:f1:58:a1:6a:cf:eb:
23:c3:3b:bb:d2:c6:aa:e2:5f:3c:99:e1:6c:d2:bd:
10:c1:97:fb:0d:2b:c5:16:5b:13:6e:4f:31:51:75:
52:5f:49:00:f6:28:85:2e:a8:c4:d3:e1:af:01:23:
9b:ad:1b:0d:62:9d:a2:db:80:f3:75:4e:0c:c5:40:
5a:85:e7:12:24:f3:44:20:6d:de:cd:4b:58:9f:b6:
cc:24:b1:47:3f:a3:ef:6b:55:22:81:a1:00:1f:9c:
e5:30:2f:36:01:79:9f:aa:1e:6d:67:82:30:45:40:
12:b3:37:a0:bb:89:5e:d0:95:2b:c2:50:04:93:c6:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E0:87:79:7B:FF:09:3C:2F:06:F8:8E:ED:58:1F:B7:77:B9:79:86
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/z-CHeXv_CTwvBviO7Vgft3e5eYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.192.0/21
Signature Algorithm: sha256WithRSAEncryption
97:5e:9d:ca:46:b1:7a:22:7a:93:9d:0b:78:21:c7:01:7c:2d:
64:ef:a7:3b:d2:bf:16:34:87:83:bd:74:b2:ef:88:88:2e:87:
79:00:c2:b0:c6:c0:29:10:39:7c:6f:c5:82:99:c4:e7:7b:67:
5e:1b:a4:a8:7a:b2:03:88:dc:27:82:13:9c:cc:a7:9f:9c:83:
1e:77:bd:11:6d:f0:b5:30:03:28:97:b8:0c:a9:f0:ae:d8:da:
d7:ce:23:3b:e7:fe:63:c5:70:a7:9c:e5:a0:2b:23:dd:69:de:
f6:c7:ee:cf:c0:3c:2b:49:bc:8f:6b:23:c8:73:a0:94:81:67:
38:4e:94:07:5a:17:b5:5c:18:3a:c0:ce:8c:a0:5a:95:63:49:
8e:b9:96:ab:ec:bc:78:e2:af:73:09:17:f4:e5:c3:a7:a8:fe:
17:f6:a0:17:17:e5:63:5d:60:b9:f7:ed:10:8c:a6:1e:40:0b:
db:7f:90:a6:0c:b0:8a:b3:91:50:5d:c5:33:9f:93:83:15:0d:
13:81:17:e2:98:42:92:dd:98:5a:a3:d3:7c:a1:e2:0c:43:aa:
b1:93:5e:b9:8a:1e:c8:c3:ed:f3:8e:23:b7:f6:47:02:85:0e:
01:a3:f7:d7:cb:be:3c:35:2a:31:dd:6e:38:bd:93:47:18:61:
06:5d:c6:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIjaeniSynmnf3TshA1tSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzQyMTZiM2JkOTIxYjZjNjYxODdhOGM4NmE0YTRiYjBl
ZTUyM2YwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmUwODc3OTdiZmYwOTNjMmYwNmY4OGVlZDU4MWZiNzc3Yjk3OTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzcsWp3JMn84beyWOa1SdNXVgvQG
BrdtKmeHXEhNon7LcGp8S4mFd6w/VymrGsT8C9uyLZn8bjPot8WazukgwBKVHNhj
W/jvix8Sb8H1UhJKdAsB3G94Bb6t+YEexEuNbVhHNdmw6BApNB41Lg4ujjTLCZpr
v7t+/Jrk2gERkt7xWKFqz+sjwzu70saq4l88meFs0r0QwZf7DSvFFlsTbk8xUXVS
X0kA9iiFLqjE0+GvASObrRsNYp2i24DzdU4MxUBahecSJPNEIG3ezUtYn7bMJLFH
P6Pva1UigaEAH5zlMC82AXmfqh5tZ4IwRUASszegu4le0JUrwlAEk8adbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM/gh3l7/wk8Lwb4ju1YH7d3uXmGMB8GA1UdIwQY
MBaAFNo0IWs72SG2xmGHqMhqSkuw7lI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjct
MGJmNTkwNWIzNWVmLzEvei1DSGVYdl9DVHd2QnZpTzdWZ2Z0M2U1ZVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjctMGJmNTkwNWIzNWVm
LzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstnAMA0G
CSqGSIb3DQEBCwUAA4IBAQCXXp3KRrF6InqTnQt4IccBfC1k76c70r8WNIeDvXSy
74iILod5AMKwxsApEDl8b8WCmcTne2deG6SoerIDiNwnghOczKefnIMed70RbfC1
MAMol7gMqfCu2NrXziM75/5jxXCnnOWgKyPdad72x+7PwDwrSbyPayPIc6CUgWc4
TpQHWhe1XBg6wM6MoFqVY0mOuZar7Lx44q9zCRf05cOnqP4X9qAXF+VjXWC59+0Q
jKYeQAvbf5CmDLCKs5FQXcUzn5ODFQ0TgRfimEKS3Zhao9N8oeIMQ6qxk165ih7I
w+3zjiO39kcChQ4Bo/fXy748NSox3W44vZNHGGEGXcbm
-----END CERTIFICATE-----
Generated at Tue Jan 21 15:03:01 2025 by rpki-client on console.sobornost.net