Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/fJ26hpkQea9C1Rms6cN74Hj19KM.roa
File: fJ26hpkQea9C1Rms6cN74Hj19KM.roa (raw, json)
Hash identifier: ZNkCnIuWGc6Fl7N/rFJCpvN9XttAZgZe/TnzszBJAZ4=
Subject key identifier: 7C:9D:BA:86:99:10:79:AF:42:D5:19:AC:E9:C3:7B:E0:78:F5:F4:A3
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 0193F8CE6A0A3B4038833BEFFB9C70661581
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/fJ26hpkQea9C1Rms6cN74Hj19KM.roa
Signing time: Tue 24 Dec 2024 13:14:57 +0000
ROA not before: Tue 24 Dec 2024 13:14:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42546
IP address blocks: 178.214.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:ce:6a:0a:3b:40:38:83:3b:ef:fb:9c:70:66:15:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Dec 24 13:14:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c9dba86991079af42d519ace9c37be078f5f4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:21:d6:2e:44:bd:a0:75:cf:e7:c8:aa:51:a2:
04:56:a1:04:9f:70:63:4f:b6:fb:76:60:0f:c9:70:
7b:46:8a:15:83:89:16:8e:61:99:04:ab:1b:89:ac:
5a:92:c7:22:11:e9:e2:95:35:82:76:24:7f:a7:90:
a2:60:0a:2e:93:4e:12:8d:86:ed:39:ab:cb:59:b2:
de:b8:12:3c:95:3a:40:6e:22:ba:d0:28:0f:af:17:
e3:29:72:bb:75:7c:62:f9:09:3a:16:bf:35:0c:cb:
3f:6c:3f:05:e1:1d:d5:9d:6f:b3:5f:91:40:6d:57:
b2:fc:f1:79:a9:1f:10:d0:19:6e:60:fb:e6:25:c4:
55:01:bb:a1:e6:4f:d8:cb:26:6b:ee:ab:68:2e:3f:
bb:10:6f:d8:23:3b:c6:ec:9b:78:1a:65:28:48:cf:
86:55:e7:59:73:51:99:8b:47:76:9c:23:c6:81:6b:
3d:35:bd:e0:0e:b7:9b:c4:0b:09:a5:36:9e:f2:cf:
0d:7b:aa:cb:c0:77:7d:62:18:c9:7c:db:73:f7:2d:
19:f8:e5:9e:e2:27:e4:f3:13:04:e1:d6:8e:78:13:
0b:25:05:d7:b6:92:8f:51:e8:14:54:3e:d6:bb:f7:
2f:f2:03:2c:8f:b5:b1:01:8d:e7:08:05:49:81:a2:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9D:BA:86:99:10:79:AF:42:D5:19:AC:E9:C3:7B:E0:78:F5:F4:A3
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/fJ26hpkQea9C1Rms6cN74Hj19KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.192.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:75:7e:b3:f6:60:91:f6:11:fc:43:57:68:91:ec:2a:07:e2:
7e:f3:a1:b2:5c:23:a8:21:e5:be:4b:34:e7:0d:ff:ed:f8:a5:
c0:41:56:b8:09:e2:de:69:d7:a1:b6:8d:44:60:5d:8e:62:a2:
cc:af:ca:ff:fd:f9:ee:c9:e3:d4:15:43:15:12:2d:a4:15:d9:
14:c0:b5:93:35:e9:20:4b:b5:3e:9b:e6:51:5e:b6:48:2e:2c:
cb:01:d2:70:4c:1b:bf:fe:95:60:41:38:05:19:3a:a4:d6:51:
94:99:dd:2c:31:00:e2:1a:53:72:b1:e1:a6:34:fb:68:aa:f6:
d8:c0:85:d9:87:b7:ce:8a:86:5a:d6:c6:8f:3d:eb:7d:17:fc:
6f:a6:18:2f:53:f3:0b:1d:83:48:87:dc:34:f3:97:7b:7d:a4:
ca:32:86:4c:97:d0:9c:e6:be:31:d2:2a:c7:d6:43:a0:e9:6c:
16:ea:9a:03:e4:ff:bd:c7:44:c0:f0:ff:8c:35:56:f0:63:e7:
02:16:d8:01:f4:a2:fa:90:4e:b6:ef:35:78:f1:f4:38:b1:02:
9c:03:5a:9f:a6:d3:b0:95:f1:df:ca:ab:18:ee:6e:e0:5d:54:
8b:c1:b0:bf:c7:ba:87:6d:82:14:5c:5a:4a:a5:35:95:bf:af:
c2:38:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:47 2024 by rpki-client on console.sobornost.net