Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/CrzfP6eJmkEoc-NqKH-ffM_RMNo.roa
File: CrzfP6eJmkEoc-NqKH-ffM_RMNo.roa (raw, json)
Hash identifier: TNt02zpVnJwwoUzgd2eUz/lOtvgHieiwajBi1tRwMpg=
Subject key identifier: 0A:BC:DF:3F:A7:89:9A:41:28:73:E3:6A:28:7F:9F:7C:CF:D1:30:DA
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019299C1A23414B600A819F687C097570670
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/CrzfP6eJmkEoc-NqKH-ffM_RMNo.roa
Signing time: Thu 17 Oct 2024 09:14:16 +0000
ROA not before: Thu 17 Oct 2024 09:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42546
IP address blocks: 178.214.192.0/21 maxlen: 21
178.214.200.0/22 maxlen: 22
178.214.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:c1:a2:34:14:b6:00:a8:19:f6:87:c0:97:57:06:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Oct 17 09:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0abcdf3fa7899a412873e36a287f9f7ccfd130da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:4c:85:29:39:60:58:a9:66:77:c2:0e:c3:
5b:b0:fc:fb:d4:1c:26:01:d2:0f:64:cb:5b:1c:08:
7b:37:08:2a:10:e5:1d:5b:d7:27:a8:d0:7f:ca:eb:
b9:d3:dd:55:95:57:c9:25:aa:c2:30:df:1d:86:ca:
b7:e9:ab:f9:8e:2b:82:87:90:0c:ec:9f:62:17:2c:
97:47:17:94:61:c1:30:41:38:78:ae:fd:5c:f5:e1:
45:b1:02:cd:6e:6d:1a:8f:98:71:e7:8e:b5:9c:4e:
8a:5e:8c:2f:2e:65:16:da:39:9f:9e:31:5f:3f:e4:
47:9e:d6:df:7d:82:bf:15:03:aa:c8:5c:d9:8b:34:
c6:7c:29:9f:9d:c7:fd:e0:4f:65:f5:79:05:60:a4:
8f:f7:f2:12:fc:97:1a:4c:de:6a:7f:11:7b:7a:69:
90:b5:09:a8:9b:fa:c7:50:f8:11:71:c3:df:0c:ad:
ef:1f:0e:b4:d0:c3:e7:ce:80:00:88:c9:aa:b5:34:
a7:85:f4:e9:60:cc:3e:75:74:25:a6:62:c6:f3:00:
5f:b9:d7:54:1c:88:db:f7:79:72:a9:2e:9b:3f:b0:
85:52:17:46:5a:fa:ed:32:6a:f3:d6:22:30:96:26:
a9:fa:9b:40:ef:eb:19:22:5f:4f:1f:0d:87:47:b3:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BC:DF:3F:A7:89:9A:41:28:73:E3:6A:28:7F:9F:7C:CF:D1:30:DA
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/CrzfP6eJmkEoc-NqKH-ffM_RMNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.192.0-178.214.203.255
178.214.208.0/20
Signature Algorithm: sha256WithRSAEncryption
55:6f:3c:c8:ed:53:50:a9:53:c8:6b:5e:e7:f9:c6:91:63:7e:
8b:a4:e4:a7:5e:a3:7d:19:50:75:a8:c1:ea:c9:b9:66:ff:e4:
51:fb:b4:94:16:76:73:f2:c9:d1:44:0a:2a:98:aa:c1:f8:ee:
95:3e:3c:97:a9:b6:39:bd:7a:4c:1f:c3:05:9d:6f:8e:81:4f:
dc:11:5d:3a:56:3a:75:d0:1a:23:12:b8:c2:fc:37:b7:6d:21:
4b:a2:27:e7:21:5a:be:7f:69:ca:1b:7a:19:3d:fb:05:4a:1a:
e2:8f:63:ec:04:37:11:8c:a6:b2:52:da:5c:58:21:45:0d:81:
00:1d:e6:a9:e2:02:29:1c:b3:43:96:c3:57:55:2a:ec:1d:4f:
55:10:e3:0c:3e:2d:b1:0e:57:b6:ad:76:99:50:7b:af:c3:26:
26:62:ff:9e:56:b0:d9:78:c8:49:19:d4:9f:53:00:bb:df:9e:
84:15:8c:16:c7:68:34:24:cc:74:46:92:51:2b:66:49:b9:1c:
a5:cf:52:50:04:21:e0:2a:14:10:15:66:f4:2e:b4:6a:72:ff:
52:80:4d:b3:38:e6:cb:12:6c:b9:34:f9:1c:5d:e8:b6:7c:89:
3c:07:61:ed:04:5f:72:d2:09:f8:29:3d:1e:e8:6d:ce:30:1a:
f5:87:ca:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:14:47 2024 by rpki-client on console.sobornost.net