Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/WW1dhPspdzrS4NSMY6hFFBO3V6Y.roa
File: WW1dhPspdzrS4NSMY6hFFBO3V6Y.roa (raw, json)
Hash identifier: VfyWZMU8FphU5OyR4rTQAreGa7RxxbEkARWgxYdr2wg=
Subject key identifier: 59:6D:5D:84:FB:29:77:3A:D2:E0:D4:8C:63:A8:45:14:13:B7:57:A6
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 01938DB29232DAAECA9FDA2BE22106BF90E2
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/WW1dhPspdzrS4NSMY6hFFBO3V6Y.roa
Signing time: Tue 03 Dec 2024 18:05:10 +0000
ROA not before: Tue 03 Dec 2024 18:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28707
IP address blocks: 62.213.192.0/19 maxlen: 24
62.213.238.0/24 maxlen: 24
2a00:c78::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:b2:92:32:da:ae:ca:9f:da:2b:e2:21:06:bf:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Dec 3 18:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596d5d84fb29773ad2e0d48c63a8451413b757a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:16:33:1f:2f:b5:91:ff:d7:04:53:64:bf:
59:b1:5e:45:c8:49:00:bd:75:99:da:bb:c7:3f:9f:
33:ed:6a:b4:57:0c:db:cd:e6:b2:b9:a9:5e:89:c4:
d9:cc:84:c0:ee:ce:35:6a:2c:0c:de:8d:ed:81:be:
5c:03:67:30:ab:48:49:bc:a9:6d:f0:33:25:2e:76:
32:ce:c3:60:d7:bd:41:26:07:be:8a:12:2f:d9:ba:
1e:34:77:72:1a:ce:54:9a:31:ab:0a:42:48:f1:1a:
83:b8:58:ee:3c:00:39:ea:25:91:7d:28:e1:a8:1b:
71:f9:d7:d5:17:b6:8c:f3:e3:cb:97:2d:d8:eb:5b:
e7:35:98:33:bd:5d:a3:1e:33:eb:ab:85:49:5c:72:
46:67:f1:9c:e1:aa:68:b1:8d:53:6e:5a:f5:d1:56:
b6:f9:ea:0e:b0:4a:fd:8a:59:a3:c4:11:38:b3:31:
38:9b:c6:c3:39:cb:11:c2:b7:93:48:0a:1c:fb:a9:
3a:25:ab:aa:16:9f:1e:2e:ea:12:1a:0d:8c:37:38:
86:09:8d:cb:01:b6:73:0f:b3:05:3a:cb:27:a4:81:
84:46:d1:98:c8:d3:6b:bd:a4:11:d0:f6:66:a3:86:
4e:d1:06:26:37:f0:68:69:96:b5:26:72:db:41:5e:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6D:5D:84:FB:29:77:3A:D2:E0:D4:8C:63:A8:45:14:13:B7:57:A6
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/WW1dhPspdzrS4NSMY6hFFBO3V6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.213.192.0/19
62.213.238.0/24
IPv6:
2a00:c78::/32
Signature Algorithm: sha256WithRSAEncryption
9b:f6:16:22:fc:d4:92:3c:f2:7b:81:25:79:7e:0b:a5:a3:b3:
20:1e:cb:be:94:90:d0:35:96:3d:33:9e:7e:d2:69:89:f2:d9:
b6:cb:b7:c9:3d:86:06:72:ed:24:b3:d4:25:52:97:d5:5f:ec:
bc:9c:65:1c:b2:62:76:a4:6e:e6:6e:ee:73:07:83:c2:0b:2c:
43:fa:45:d2:85:cb:68:df:1d:2d:b6:40:8b:80:73:e7:a8:39:
41:7b:b9:15:ee:70:1d:65:b3:3e:64:bf:a5:fd:0a:e0:a7:f0:
4e:ab:e4:24:d7:a4:67:8a:14:e3:f5:3a:cf:8f:ec:32:71:5b:
5e:eb:62:66:28:90:8a:19:0c:31:4e:80:63:8b:47:0a:51:83:
73:a6:3c:33:cc:6c:1c:81:1d:79:c2:6c:c1:3b:60:6e:18:f7:
ce:10:1d:48:2c:f8:42:0a:27:78:f3:de:4d:14:14:5f:68:c2:
64:00:ee:3f:29:e4:08:e7:ef:e6:1c:1d:03:cb:3a:52:14:c5:
11:1f:38:bc:82:ad:db:71:58:25:d3:69:15:11:b7:76:96:3e:
54:24:b0:e9:d3:04:7d:4d:10:3f:c4:38:93:71:ed:1e:52:72:
39:6a:c4:ec:ea:6e:6b:da:dd:77:93:6b:0e:ed:ad:df:57:51:
ef:25:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:17 2024 by rpki-client on console.sobornost.net