Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/WcaU4LHxpTXmiyPNmFTe-aJNbaE.roa
File: WcaU4LHxpTXmiyPNmFTe-aJNbaE.roa (raw, json)
Hash identifier: wJ1dRD31p8fudZIZk9jW/6onwXbCrB9NdPZk4d1jtUc=
Subject key identifier: 59:C6:94:E0:B1:F1:A5:35:E6:8B:23:CD:98:54:DE:F9:A2:4D:6D:A1
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 0193DD39F77F9A7403D9E20C4F5CBE732CF8
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/WcaU4LHxpTXmiyPNmFTe-aJNbaE.roa
Signing time: Thu 19 Dec 2024 04:43:03 +0000
ROA not before: Thu 19 Dec 2024 04:43:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48271
IP address blocks: 212.2.224.0/21 maxlen: 24
212.2.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:39:f7:7f:9a:74:03:d9:e2:0c:4f:5c:be:73:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Dec 19 04:43:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59c694e0b1f1a535e68b23cd9854def9a24d6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:27:de:0a:10:29:4e:21:02:32:9f:d2:8c:
df:ae:52:c0:4c:d1:79:84:94:b4:d8:6c:45:60:fb:
59:1a:3e:51:ea:b0:f3:e5:fe:43:88:b8:a9:89:14:
74:e0:c4:b9:1e:9c:cb:e9:74:27:95:3e:76:3a:54:
15:d7:22:46:86:e9:5e:a8:43:64:1f:23:11:3d:d4:
05:47:fb:2c:7c:9e:f7:e1:8d:cb:41:11:47:1c:d2:
2d:bb:2e:8b:18:0e:26:e2:96:37:64:0b:13:fc:f2:
e6:9d:ba:16:9b:ff:5f:3c:45:72:4f:c1:da:ef:f4:
4d:78:d2:ff:d5:a8:d2:8a:2e:71:54:ea:92:2a:b4:
d0:ff:07:cf:6d:9f:9e:ac:e0:c7:65:bd:51:c9:1a:
fc:38:17:2e:4e:03:f1:4f:4a:1e:f3:61:e5:af:4b:
df:9f:b2:47:39:ed:b8:2a:a2:d7:ae:73:64:5f:1c:
bf:fe:82:d7:7a:aa:af:72:b9:5c:bc:e8:6c:f8:02:
c3:bb:39:98:e1:90:2f:7c:73:f8:26:c5:19:3b:32:
4b:b5:be:db:30:77:c2:df:68:05:9c:a7:4f:5a:22:
4c:95:cb:d9:89:7b:5e:fd:04:e7:7d:b6:78:ac:0c:
ac:08:a7:84:b7:95:66:6a:3f:29:b4:d6:c7:17:79:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C6:94:E0:B1:F1:A5:35:E6:8B:23:CD:98:54:DE:F9:A2:4D:6D:A1
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/WcaU4LHxpTXmiyPNmFTe-aJNbaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.224.0-212.2.232.255
Signature Algorithm: sha256WithRSAEncryption
5e:e2:f5:32:6b:3f:ad:c9:3c:df:7c:37:f3:32:f6:2a:11:9d:
e7:b7:10:a3:f3:19:9c:a3:ec:66:c9:3a:09:5a:d3:87:48:f2:
08:aa:4d:31:f2:0d:d1:ae:a3:b5:a2:56:24:a9:0a:5e:05:eb:
22:83:9b:a5:74:38:77:01:c8:68:a4:4f:b9:14:71:20:3a:90:
21:22:1a:9d:11:60:72:2c:39:1c:35:d4:02:e0:4c:1c:66:24:
bc:85:15:df:7b:09:64:c4:61:b3:f0:3a:f7:7c:e1:df:ef:58:
4a:b1:80:cf:ac:50:13:1c:49:19:c4:3c:d2:d0:e2:e5:49:ed:
60:14:15:80:26:38:dd:14:c2:de:92:6f:f6:07:d2:5d:87:09:
a8:80:d1:29:10:95:e6:ab:c1:4e:62:f3:bf:c3:dc:f3:48:36:
07:f0:e3:e8:7b:05:1b:6f:c4:e0:04:fb:40:fc:19:bf:f9:56:
1f:7d:0d:ee:ed:93:60:1b:5d:e0:bb:d1:8a:b0:19:f3:57:5a:
3e:07:b0:05:cb:18:92:13:f7:65:fc:0e:44:d7:81:b4:1d:ee:
97:32:3d:73:5d:8a:cb:ce:f5:39:e3:c2:07:f8:d8:2d:a8:79:
e1:77:74:e1:fc:33:15:64:36:46:ae:54:05:81:09:8e:50:31:
36:01:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:38 2024 by rpki-client on console.sobornost.net