Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Kf6tFWa0VcbnQnKEqhOeyC2B2WA.roa
File: Kf6tFWa0VcbnQnKEqhOeyC2B2WA.roa (raw, json)
Hash identifier: ZUBPrsAM/QYX+OLJHQR1xIjDfjdTr4hpLd4pZIcrTnY=
Subject key identifier: 29:FE:AD:15:66:B4:55:C6:E7:42:72:84:AA:13:9E:C8:2D:81:D9:60
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0193F2CC06FDC77904FA2D7CD1AC10DCAFBE
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Kf6tFWa0VcbnQnKEqhOeyC2B2WA.roa
Signing time: Mon 23 Dec 2024 09:14:37 +0000
ROA not before: Mon 23 Dec 2024 09:14:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214922
IP address blocks: 188.212.97.0/24 maxlen: 24
188.212.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:cc:06:fd:c7:79:04:fa:2d:7c:d1:ac:10:dc:af:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 23 09:14:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29fead1566b455c6e7427284aa139ec82d81d960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:ef:16:14:9b:da:9e:b4:4e:3a:fa:03:9b:
7f:90:ab:10:39:2b:ed:5d:17:1e:bd:70:d8:e8:b6:
d9:0d:ad:47:52:09:13:87:bd:73:99:3f:2c:d6:d9:
1a:13:4d:57:a2:51:a1:7a:bd:92:38:59:53:25:c9:
4c:ad:6e:68:cd:f1:ad:a5:fb:fb:a1:5c:3e:36:56:
63:2a:7d:71:0f:a7:10:1f:2b:a5:37:06:7d:52:4d:
37:2c:c6:23:81:10:54:21:5e:01:e3:cb:59:b9:73:
55:f4:61:1f:45:19:4a:87:37:7f:d1:3e:e0:ac:c7:
6d:20:a5:1a:15:97:01:8c:98:79:de:b1:98:9c:b7:
db:48:22:f1:f4:ac:ad:a7:bc:ca:7a:67:48:94:b2:
4e:9c:95:57:c0:09:31:30:ba:bb:55:f4:92:fc:58:
42:f5:ab:a7:38:cd:78:d1:5f:24:34:a7:e3:04:19:
a1:2b:ec:89:5d:78:20:b2:64:e0:3b:e1:ef:99:8e:
a4:65:3d:f2:57:83:27:ec:d5:f5:89:4a:97:96:19:
8f:9e:89:81:40:07:ac:5a:c4:e1:79:64:88:68:3e:
ad:68:cb:78:d8:5e:bf:78:d0:68:f7:01:12:6c:13:
db:b2:4f:5a:e2:78:fb:86:7f:5a:81:8c:44:f6:3b:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:AD:15:66:B4:55:C6:E7:42:72:84:AA:13:9E:C8:2D:81:D9:60
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Kf6tFWa0VcbnQnKEqhOeyC2B2WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.97.0-188.212.98.255
Signature Algorithm: sha256WithRSAEncryption
02:f1:78:88:d1:bf:58:20:86:ac:ad:fe:f1:f2:5e:72:90:24:
3d:55:71:a7:f7:9b:3b:b0:d4:0d:87:8e:70:f4:ed:4a:ca:cf:
8f:04:5e:59:bf:41:56:f9:7b:88:ee:a2:f8:61:64:99:ff:94:
b9:cd:25:19:fc:e9:b1:e5:91:cf:3a:2f:42:e5:18:46:4a:ac:
8c:dd:e7:d6:8c:5b:35:bb:ee:e7:7d:99:94:41:52:4b:05:0f:
2d:a2:50:fd:97:50:c5:3e:6b:1e:75:53:24:1c:54:62:a1:c6:
dc:1b:ee:3f:0d:f8:a7:3f:0f:81:81:18:60:37:c3:6d:12:f5:
58:b2:83:f0:07:0d:66:18:a7:a4:04:e7:5f:f4:b6:4f:e0:6a:
21:1d:d5:09:31:36:80:e5:cc:15:89:37:2c:83:c5:f4:80:bf:
bb:18:25:6a:c5:05:c1:0d:ec:1e:ee:02:3b:2f:a0:4a:b1:aa:
d3:a4:3b:03:99:2a:9a:a9:24:cc:f9:4c:df:7c:bd:10:a2:1f:
6f:2a:62:14:6e:f6:dd:72:5b:8a:66:15:5b:b2:d6:a4:c0:56:
b8:1a:3e:5d:9e:a7:88:2b:9b:24:91:f9:36:61:ef:a3:b9:c1:
14:b3:53:78:b3:cf:8a:b0:8b:00:74:9c:c7:82:55:88:cf:90:
62:d5:cf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:37 2024 by rpki-client on console.sobornost.net