Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/wZSOCq3zbVvwKcIkP41A2jKtGX8.roa
File: wZSOCq3zbVvwKcIkP41A2jKtGX8.roa (raw, json)
Hash identifier: UW1lAoEBdoFMPb5pewt4LywTWwYkehssN95NqOVdvpI=
Subject key identifier: C1:94:8E:0A:AD:F3:6D:5B:F0:29:C2:24:3F:8D:40:DA:32:AD:19:7F
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0193E375FA0956347F0212CB4CF689CB5E4B
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/wZSOCq3zbVvwKcIkP41A2jKtGX8.roa
Signing time: Fri 20 Dec 2024 09:46:20 +0000
ROA not before: Fri 20 Dec 2024 09:46:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57456
IP address blocks: 83.217.220.0/22 maxlen: 24
83.217.220.0/23 maxlen: 23
83.217.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:75:fa:09:56:34:7f:02:12:cb:4c:f6:89:cb:5e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Dec 20 09:46:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1948e0aadf36d5bf029c2243f8d40da32ad197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:77:8f:85:cc:7c:de:9d:46:3e:c1:b0:16:
07:b4:68:bc:5c:ae:83:bb:46:a9:87:92:85:16:cf:
9e:22:94:ab:e4:78:f8:8d:fd:99:01:86:37:f8:31:
83:f3:21:70:78:9f:df:9a:45:db:db:cf:aa:06:34:
b2:68:cd:c2:be:0e:96:8e:a5:9a:60:57:84:ca:e2:
4f:7a:6c:3e:b5:f6:34:72:49:10:13:45:4a:5a:90:
ea:66:49:64:2d:5e:94:a1:bd:79:f7:9b:7d:70:0c:
b7:b5:1e:68:6e:d5:cb:ff:7f:ad:a0:6a:d9:be:07:
81:f4:1a:f2:04:51:4d:e6:06:c9:a9:2f:26:55:41:
9e:d2:4f:15:5f:63:3b:21:cb:b4:00:aa:d5:1e:25:
b0:98:ea:2f:c6:ad:d7:0b:9f:a9:37:ae:b4:1b:b0:
40:50:3c:8f:80:a7:6f:e9:5a:48:3e:22:90:c5:41:
3c:19:a4:df:c4:84:e9:3c:b7:e9:91:6c:a2:d0:b7:
9f:f0:50:55:6d:8b:e6:02:84:09:d6:2f:b6:84:92:
bf:0e:ea:ea:a2:5e:8f:7e:ef:ea:98:8f:ad:47:6e:
d5:f1:a1:89:20:bb:0c:87:74:e8:89:47:0d:9c:22:
0b:16:9b:5c:c9:02:41:a1:67:00:81:4d:51:55:3e:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:94:8E:0A:AD:F3:6D:5B:F0:29:C2:24:3F:8D:40:DA:32:AD:19:7F
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/wZSOCq3zbVvwKcIkP41A2jKtGX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.220.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ce:51:9f:9f:d6:04:bc:26:a7:91:3f:7f:77:dd:84:ae:27:
15:ea:ad:0e:bf:66:cf:28:13:cb:fc:de:b3:7b:7d:ad:40:48:
38:91:32:06:05:be:df:21:a7:08:d3:14:7e:ce:7b:0b:db:bc:
01:ce:c1:67:c8:c0:77:86:eb:af:66:1b:f1:bf:dd:e8:c8:61:
00:33:0f:f1:11:b1:55:1a:f8:1a:cb:36:c6:f2:1f:41:2c:70:
74:cb:5a:7b:db:75:db:95:54:8c:74:3a:89:7f:0c:06:ac:71:
72:39:98:a6:18:07:89:c7:67:dd:b8:35:7a:51:eb:fa:f3:04:
8b:5b:47:1f:a2:2d:fb:98:9e:78:5b:0c:7b:98:37:3f:d3:17:
35:84:39:63:cd:3d:f4:7f:c9:b8:4a:55:f5:a4:51:5d:aa:39:
ba:02:aa:cd:33:2e:66:6c:ce:82:fa:36:95:6d:a1:4a:48:81:
92:20:29:2b:82:aa:b5:80:4b:0a:93:e7:7a:e7:9d:a0:81:6e:
13:9d:0c:04:6b:b2:27:c9:71:3c:db:a2:2e:1f:2d:6a:b7:0f:
36:67:a0:ec:ff:25:38:89:24:de:59:b1:9d:4d:a9:81:08:1b:
6f:5e:b5:d5:b7:3b:39:fd:88:cd:de:49:47:b5:b8:34:55:41:
10:bd:0c:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPjdfoJVjR/AhLLTPaJy15LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjQxMjIwMDk0NjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTk0OGUwYWFkZjM2ZDViZjAyOWMyMjQzZjhkNDBkYTMyYWQxOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxql3j4XMfN6dRj7BsBYHtGi8XK6D
u0aph5KFFs+eIpSr5Hj4jf2ZAYY3+DGD8yFweJ/fmkXb28+qBjSyaM3Cvg6WjqWa
YFeEyuJPemw+tfY0ckkQE0VKWpDqZklkLV6Uob1595t9cAy3tR5obtXL/3+toGrZ
vgeB9BryBFFN5gbJqS8mVUGe0k8VX2M7Icu0AKrVHiWwmOovxq3XC5+pN660G7BA
UDyPgKdv6VpIPiKQxUE8GaTfxITpPLfpkWyi0Lef8FBVbYvmAoQJ1i+2hJK/Durq
ol6Pfu/qmI+tR27V8aGJILsMh3ToiUcNnCILFptcyQJBoWcAgU1RVT6zFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMGUjgqt821b8CnCJD+NQNoyrRl/MB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvd1pTT0NxM3piVnZ3S2NJa1A0MUEyakt0R1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU9ncMA0G
CSqGSIb3DQEBCwUAA4IBAQCAzlGfn9YEvCankT9/d92EricV6q0Ov2bPKBPL/N6z
e32tQEg4kTIGBb7fIacI0xR+znsL27wBzsFnyMB3huuvZhvxv93oyGEAMw/xEbFV
GvgayzbG8h9BLHB0y1p723XblVSMdDqJfwwGrHFyOZimGAeJx2fduDV6Uev68wSL
W0cfoi37mJ54Wwx7mDc/0xc1hDljzT30f8m4SlX1pFFdqjm6AqrNMy5mbM6C+jaV
baFKSIGSICkrgqq1gEsKk+d6552ggW4TnQwEa7InyXE826IuHy1qtw82Z6Ds/yU4
iSTeWbGdTamBCBtvXrXVtzs5/YjN3klHtbg0VUEQvQwI
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:11 2024 by rpki-client on console.sobornost.net