Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/WcqXmyeD0MPKwfOijS38HAjlrNE.roa
File: WcqXmyeD0MPKwfOijS38HAjlrNE.roa (raw, json)
Hash identifier: nEDhwObk1rPvYyhIbUZoInj5qN6IkFQKvxo35/W7psI=
Subject key identifier: 59:CA:97:9B:27:83:D0:C3:CA:C1:F3:A2:8D:2D:FC:1C:08:E5:AC:D1
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0193739736E4C3CA7250DAB81E63A52E4BCC
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/WcqXmyeD0MPKwfOijS38HAjlrNE.roa
Signing time: Thu 28 Nov 2024 16:25:09 +0000
ROA not before: Thu 28 Nov 2024 16:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16345
IP address blocks: 194.85.128.0/19 maxlen: 24
195.209.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:97:36:e4:c3:ca:72:50:da:b8:1e:63:a5:2e:4b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Nov 28 16:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ca979b2783d0c3cac1f3a28d2dfc1c08e5acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:74:5b:9e:fc:29:47:57:54:5d:ff:1f:26:
67:b0:91:60:1d:51:bb:bb:c0:8f:90:d7:47:15:78:
1d:c1:2f:a7:d9:82:16:8d:80:06:ef:3b:8b:fa:09:
48:3e:68:84:1d:e8:b2:d7:92:95:52:0c:98:d0:c0:
6f:bf:00:0b:6f:b9:d3:a5:80:cf:1e:5c:85:23:d9:
fc:3d:4b:14:e6:81:02:0a:79:51:bc:18:6b:01:17:
b8:d9:05:fc:95:58:20:db:7f:37:6e:19:0b:72:52:
e1:9e:65:89:9d:3b:2b:3d:f9:df:30:da:e0:d5:b0:
98:2b:63:d9:cb:b3:94:01:c4:3e:5e:fd:ba:7a:b0:
7c:e7:f6:3d:da:60:2a:d2:60:49:dc:06:4d:7e:8c:
84:5f:7d:90:14:f4:ef:36:92:06:ab:99:a3:5e:42:
c1:ff:18:68:da:45:53:0e:ca:81:35:f4:72:6c:48:
59:30:24:a5:1d:46:61:ec:c9:c4:1b:3a:b2:bb:47:
ec:06:fc:79:ef:46:e0:ae:e2:bc:b1:bf:8a:51:c7:
4f:9c:84:d6:b0:41:f7:19:3a:4e:cd:a0:0e:d7:1e:
30:87:be:94:0e:7f:23:de:ba:29:cb:26:40:2e:1c:
20:86:94:ef:e9:d4:30:d6:da:dd:5e:1c:ad:99:4c:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CA:97:9B:27:83:D0:C3:CA:C1:F3:A2:8D:2D:FC:1C:08:E5:AC:D1
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/WcqXmyeD0MPKwfOijS38HAjlrNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.128.0/19
195.209.160.0/20
Signature Algorithm: sha256WithRSAEncryption
64:be:b5:de:62:69:b5:55:d1:72:b6:63:64:7f:a5:7f:d1:4f:
6a:02:78:31:05:3b:57:a3:4a:7b:7c:d5:b3:91:f1:ea:e1:2c:
19:7b:fe:61:02:75:bc:a4:1d:74:51:4d:56:00:61:d4:40:2b:
3f:d5:ac:a8:96:24:cd:14:45:ec:67:25:81:77:01:a6:35:fd:
e7:74:39:e3:ea:f5:7b:c2:a3:8a:36:29:33:d5:54:8d:77:77:
51:d7:5e:72:2e:5d:dd:90:3a:f0:a1:5c:7d:33:22:10:05:76:
fd:1b:2e:a1:e2:f8:bd:0e:b9:d4:dc:35:ca:2a:60:09:c4:c0:
e8:56:2a:37:23:66:80:0b:c5:ac:86:60:36:e3:42:17:ca:9e:
9f:a3:5e:2e:14:47:b7:c6:9a:cb:4b:f2:fb:77:de:90:2d:9f:
e8:79:80:d6:be:c0:e7:0a:95:b5:ce:41:75:10:0e:2c:60:81:
1f:d7:ce:b0:4c:c8:02:c1:30:95:ef:ae:6c:bd:df:1a:f7:88:
32:50:a3:7c:90:e2:1f:31:4a:58:78:d3:ec:28:2e:1c:5d:23:
d7:0f:2f:57:6b:4c:02:19:a1:6d:fa:96:86:55:9e:77:30:04:
d9:d5:c2:12:dd:83:dd:88:b1:20:e5:95:92:0e:85:eb:12:14:
d8:a4:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:14 2024 by rpki-client on console.sobornost.net