Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/wfCYfdOyj9MErmJa1f5CxpSS9yo.roa
File: wfCYfdOyj9MErmJa1f5CxpSS9yo.roa (raw, json)
Hash identifier: UJ486bCD5WcInNj8c/6sLojH3Cbt/nnyruRZ96lzSF8=
Subject key identifier: C1:F0:98:7D:D3:B2:8F:D3:04:AE:62:5A:D5:FE:42:C6:94:92:F7:2A
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 01935429B5F846A7A6D12CF0F4E14FB69C75
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/wfCYfdOyj9MErmJa1f5CxpSS9yo.roa
Signing time: Fri 22 Nov 2024 13:57:19 +0000
ROA not before: Fri 22 Nov 2024 13:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210227
IP address blocks: 193.56.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:29:b5:f8:46:a7:a6:d1:2c:f0:f4:e1:4f:b6:9c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Nov 22 13:57:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1f0987dd3b28fd304ae625ad5fe42c69492f72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:94:da:c0:dd:ba:4a:9b:68:38:13:76:7a:
79:92:c3:58:b9:da:c2:67:64:fc:b6:b7:31:ca:27:
30:c2:75:9a:47:92:48:d6:8e:d1:92:98:9a:94:66:
35:00:0b:55:55:42:e0:47:de:1f:f8:00:48:58:5f:
5e:90:85:c2:d8:2d:f9:49:b1:3c:3d:a7:c2:a9:a7:
29:cc:ec:ec:e5:b1:22:66:52:db:ad:a5:d8:2d:4e:
12:46:44:f8:1d:d0:bf:76:a1:75:24:ae:d8:8c:40:
c5:74:e9:de:d3:e0:54:27:99:00:f5:3e:62:f1:a1:
84:70:22:a1:01:f4:03:0a:11:5e:0f:b0:82:71:30:
a8:63:bb:7c:17:36:4a:25:d8:7d:c5:ab:15:cc:79:
c1:9c:a7:23:b5:d1:60:82:79:ed:b7:da:94:99:e6:
35:9d:cb:4d:a4:bc:fb:26:df:6c:b8:8a:db:11:6c:
d9:71:f2:35:01:57:1d:cd:b5:92:65:76:e6:93:80:
b6:2a:d8:d2:67:bc:17:cb:25:46:6b:22:83:f5:1f:
25:b4:d7:e8:4a:09:25:1c:f1:d0:23:fd:58:33:fa:
91:6d:ad:d5:27:90:0c:8b:9f:fe:ed:61:b2:49:8b:
8d:4a:ad:fb:cc:2c:2c:39:e5:ac:a9:40:73:b0:04:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:98:7D:D3:B2:8F:D3:04:AE:62:5A:D5:FE:42:C6:94:92:F7:2A
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/wfCYfdOyj9MErmJa1f5CxpSS9yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3c:0f:9e:b4:83:2f:1c:c5:be:58:84:2b:ce:36:07:c7:07:
be:53:48:fb:ad:1f:ee:41:b5:0a:e3:e5:f3:4e:cc:95:bc:a7:
01:de:67:24:8b:58:2e:59:8f:42:11:86:36:6f:55:22:d1:26:
21:34:61:13:12:fd:5c:05:58:48:13:78:12:d6:08:78:bd:24:
cc:d6:62:93:62:fd:ad:95:4f:17:48:04:17:66:e5:de:bb:f7:
f9:a7:a1:eb:2e:89:b5:b5:db:9f:0b:34:ee:d0:10:f3:0d:f9:
ac:21:97:a9:4a:d5:49:aa:f5:d8:a8:f4:64:cb:53:2c:21:9b:
bf:c9:aa:b0:d4:c0:8a:b4:87:91:06:a2:0b:e3:c1:4e:c3:80:
a7:f6:94:3d:9d:2a:de:27:06:a6:7c:57:b6:9a:c7:b1:75:35:
a5:a1:92:f3:ab:48:96:a4:04:2a:a6:7b:6b:4e:ca:a7:14:4a:
6a:72:7b:63:53:fc:7e:ab:a1:c4:ef:b7:19:ed:5f:05:cb:c2:
25:e4:66:ad:3d:d7:f5:25:6c:3f:de:3d:0d:85:34:52:3e:79:
65:ec:00:38:52:a8:62:7e:a7:81:46:d7:cd:6f:d2:1e:6b:59:
39:fe:31:0e:ac:03:f4:7a:9b:ab:4f:83:19:c1:39:c3:56:1f:
e2:35:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:26 2024 by rpki-client on console.sobornost.net