Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/vWAT8ooSI8y1wPYt0RqXg5ioFeI.roa
File: vWAT8ooSI8y1wPYt0RqXg5ioFeI.roa (raw, json)
Hash identifier: aWpY1JqqbCcC5ckZGEckte8YP0UKlunRm2qDmJGaCCk=
Subject key identifier: BD:60:13:F2:8A:12:23:CC:B5:C0:F6:2D:D1:1A:97:83:98:A8:15:E2
Certificate issuer: /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial: 0192DD6B2C5A5DEF0B24B32C27AD6B921A80
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/vWAT8ooSI8y1wPYt0RqXg5ioFeI.roa
Signing time: Wed 30 Oct 2024 12:34:01 +0000
ROA not before: Wed 30 Oct 2024 12:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48450
IP address blocks: 94.247.64.0/21 maxlen: 21
94.247.64.0/22 maxlen: 22
94.247.68.0/22 maxlen: 22
185.123.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:6b:2c:5a:5d:ef:0b:24:b3:2c:27:ad:6b:92:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Validity
Not Before: Oct 30 12:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd6013f28a1223ccb5c0f62dd11a978398a815e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:af:12:57:91:14:1d:25:ec:60:52:13:09:
7e:d6:b0:5c:80:d2:24:c7:64:eb:23:f1:94:a9:85:
37:2b:e8:dc:59:e0:49:86:5d:59:19:2d:aa:f7:96:
32:d4:b9:06:be:d3:5e:7f:1a:e0:a5:55:63:6e:da:
94:70:5f:69:6a:df:0e:11:79:d8:d4:23:98:2f:71:
4d:bb:48:8d:c9:77:76:5a:3a:4e:b3:a2:95:55:26:
2c:2c:86:b3:47:7b:a3:c5:2f:60:de:07:d1:64:54:
ec:2c:3a:95:b2:c0:a7:8d:ed:1a:cc:0f:c1:b0:92:
f4:a0:87:83:a8:81:9d:53:aa:fb:04:27:86:1f:a0:
88:70:75:cc:f9:7b:25:56:68:bd:dd:e9:37:16:5b:
ca:6c:59:01:de:e9:aa:3a:9c:e7:d2:e8:c1:a2:ce:
5b:da:58:85:21:be:4e:64:6d:4d:88:a2:ec:c9:08:
42:d4:b7:99:7f:5e:a3:a5:38:ec:6b:b9:97:a0:c1:
05:f8:47:7c:80:27:f6:1d:ce:c5:53:ec:2f:b6:3f:
ed:f5:d7:4f:0f:e4:35:a3:8c:d3:ae:25:4f:04:f7:
f9:ee:95:67:77:7f:5f:f9:77:8f:e5:3e:29:a5:48:
ee:2f:f6:6d:e3:70:f6:bf:a9:0d:6f:49:5d:a2:a9:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:13:F2:8A:12:23:CC:B5:C0:F6:2D:D1:1A:97:83:98:A8:15:E2
X509v3 Authority Key Identifier:
keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/vWAT8ooSI8y1wPYt0RqXg5ioFeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.64.0/21
185.123.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:11:21:af:5d:d2:19:96:88:45:36:ca:ba:42:cc:7d:9f:57:
3c:23:ca:e2:dd:5b:d1:d7:2c:bd:2a:86:76:f6:b0:e6:24:dd:
9f:2e:0d:08:37:b5:22:77:5e:ce:83:44:38:b6:b6:b9:34:49:
24:5b:b6:a8:54:f0:e7:3f:85:08:48:9a:39:ed:c5:8e:6e:0c:
81:95:e9:72:af:4e:07:39:63:32:20:5c:b8:19:f4:a8:27:ba:
ec:f2:bc:53:00:55:ac:e0:96:52:b7:fd:56:e9:41:36:63:d3:
a0:25:75:3d:61:42:6a:6b:d1:c2:27:1a:85:4a:62:16:90:80:
67:29:28:4c:a6:a2:00:91:4c:ad:16:43:26:49:5c:0d:ed:67:
0e:5e:dd:c0:5c:8c:ec:3c:36:49:f6:1f:b0:b1:00:0b:b4:91:
58:c8:cf:29:b8:b2:67:0e:6e:db:b4:04:14:13:c5:9d:41:01:
8e:77:91:bd:0d:bb:aa:24:3b:65:7b:13:20:6e:a7:31:50:90:
f3:03:23:35:68:27:13:f1:d7:20:b9:bf:6c:c3:ae:4b:a1:11:
22:bb:04:dd:aa:82:c6:00:8b:f8:77:ce:d2:43:c3:e4:5b:f3:
28:7c:bd:97:8c:10:2d:bf:7e:8f:a1:76:cc:a9:ae:3d:38:de:
52:c6:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:10 2024 by rpki-client on console.sobornost.net