Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/eTkVFDnEfQkkEEM7xJJMbulOUMA.roa
File: eTkVFDnEfQkkEEM7xJJMbulOUMA.roa (raw, json)
Hash identifier: XmRr5ff7lXXLor79pJhApL6zlb2Z43actc7Ko/5JaP8=
Subject key identifier: 79:39:15:14:39:C4:7D:09:24:10:43:3B:C4:92:4C:6E:E9:4E:50:C0
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019377646B1BEE93A2A4E4591189DD723436
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/eTkVFDnEfQkkEEM7xJJMbulOUMA.roa
Signing time: Fri 29 Nov 2024 10:08:09 +0000
ROA not before: Fri 29 Nov 2024 10:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42546
IP address blocks: 178.214.192.0/21 maxlen: 21
178.214.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:64:6b:1b:ee:93:a2:a4:e4:59:11:89:dd:72:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Nov 29 10:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7939151439c47d092410433bc4924c6ee94e50c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:44:41:2c:77:77:42:d7:a1:83:5d:e9:1f:
04:45:72:46:4a:0e:03:48:62:07:2d:8a:f3:5c:b9:
a0:a9:ad:32:b7:f1:82:51:ec:a2:ca:17:d5:8f:1d:
ce:63:89:88:3b:4d:16:ed:b9:14:60:a5:f9:6c:6c:
1f:88:1d:4c:d8:6b:a3:c6:da:1e:d0:b7:0d:3f:a5:
12:aa:db:54:1a:fe:f6:ee:88:a5:7e:90:2c:d0:8f:
fe:b9:2b:dd:c7:9b:26:ee:25:03:de:ec:79:1a:99:
7d:bb:92:b3:1f:60:14:26:f1:04:48:ca:d5:2b:23:
43:51:8d:42:6c:56:f3:f7:86:ff:41:ea:0b:9c:2f:
de:d0:d2:63:25:1c:bc:39:4c:fd:cc:75:2d:67:71:
e0:31:32:16:ce:01:a6:5b:d9:0a:c1:e9:f4:4a:4c:
c1:88:59:d8:d6:98:c1:e6:9e:26:46:e3:ae:90:3b:
48:23:78:d1:15:ab:eb:d3:9e:13:ac:e1:63:22:00:
b5:3b:b5:64:c7:a8:a4:97:a1:04:c9:09:4d:4e:79:
ff:b7:97:76:12:01:ca:ce:fe:bb:39:24:7d:37:6d:
da:7b:da:14:02:03:d0:d1:b1:62:36:9e:38:5b:81:
b2:65:d0:31:b4:ba:8f:17:4d:b3:45:f9:c5:3c:c7:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:39:15:14:39:C4:7D:09:24:10:43:3B:C4:92:4C:6E:E9:4E:50:C0
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/eTkVFDnEfQkkEEM7xJJMbulOUMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.192.0/21
178.214.208.0/20
Signature Algorithm: sha256WithRSAEncryption
43:99:a6:82:5b:b0:5c:95:40:8c:44:f9:00:3a:05:71:06:00:
0d:4b:67:eb:50:0e:7f:59:04:5e:9a:49:7c:80:75:80:45:f0:
d1:50:b0:51:75:7c:ae:07:0e:44:c8:52:b5:6d:0a:0a:b9:8f:
4b:65:44:e6:3d:7c:79:41:96:62:ca:5a:52:ba:ca:a9:ff:b3:
37:58:1f:e1:67:04:e7:80:63:5a:cc:70:60:86:44:ca:d8:c2:
ce:9e:b6:87:f0:2f:99:9c:07:f4:62:46:b7:ad:ec:fd:22:0f:
79:a7:1c:0b:13:49:d5:7e:cb:cf:c2:93:b9:10:6f:fe:36:1e:
0d:e9:76:e9:1d:fe:8c:bc:a2:94:28:64:46:ab:c1:c3:23:93:
7d:33:be:3e:7d:3a:28:41:1c:15:96:8f:61:04:4c:30:24:8b:
51:5a:0a:4c:b2:dc:78:67:eb:d0:2f:81:80:65:24:a1:1e:04:
4e:ad:cd:88:e6:e6:8d:2e:ed:5c:8c:49:99:6a:d3:21:91:4e:
6e:38:a5:bb:e6:8e:2b:e2:3f:f5:3f:d2:9b:bb:8b:a1:cc:20:
28:68:02:67:4e:85:10:1a:e6:46:78:8d:3b:bc:8e:21:8c:26:
1d:ac:62:22:a6:8e:63:75:bf:ed:81:3f:e9:fc:01:0e:aa:6f:
cd:7f:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:25:05 2024 by rpki-client on console.sobornost.net