Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wQVGa2uFoGu8wcESPphihwjVwu8.roa
File: wQVGa2uFoGu8wcESPphihwjVwu8.roa (raw, json)
Hash identifier: x9djaAIm7YRR7YDhdDJ8uAQ0FvU1MrMySC/Hw6/qBBU=
Subject key identifier: C1:05:46:6B:6B:85:A0:6B:BC:C1:C1:12:3E:98:62:87:08:D5:C2:EF
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0193F28382AF15D51A5251AD42C96E2D2B78
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wQVGa2uFoGu8wcESPphihwjVwu8.roa
Signing time: Mon 23 Dec 2024 07:55:25 +0000
ROA not before: Mon 23 Dec 2024 07:55:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54252
IP address blocks: 212.87.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:83:82:af:15:d5:1a:52:51:ad:42:c9:6e:2d:2b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Dec 23 07:55:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c105466b6b85a06bbcc1c1123e98628708d5c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:13:3a:0c:42:1b:3b:3a:51:6f:ee:ce:94:
b8:a1:a7:3d:fd:c1:a4:61:ae:be:e6:5e:68:8e:1e:
8e:d5:3b:3c:00:2d:66:88:95:ab:e7:41:f0:94:0b:
4f:2e:6b:f6:89:35:eb:b9:c1:12:5a:cf:ba:cb:10:
00:bc:0b:d1:d5:6f:43:bf:38:d5:11:3c:1a:1b:87:
0d:4d:93:30:86:2a:81:25:12:1f:51:ca:4f:fe:a9:
04:6b:d4:03:8e:05:a4:89:66:8b:de:85:c7:17:05:
4f:33:18:cc:c9:da:05:9e:4a:90:7f:57:43:b4:f3:
26:8e:46:fd:e9:43:47:f9:a3:f3:ac:4b:10:28:db:
ee:67:a0:7b:a8:cf:29:56:97:36:dc:58:02:ab:61:
e7:ce:01:9f:25:40:4e:97:14:2b:af:2c:a0:9b:b7:
12:bf:13:e1:6d:7e:60:e8:3b:fa:87:60:37:02:06:
18:59:57:d8:39:cf:53:52:0a:53:b4:56:8e:e4:72:
f9:b0:fc:87:30:89:e6:43:c4:1e:e2:69:47:3a:21:
78:c5:a1:8d:e1:be:1b:fd:11:39:60:0e:53:d2:ed:
58:90:ed:b8:31:4e:df:36:3c:d0:09:bc:e4:71:26:
94:87:57:f9:78:6a:b5:62:40:0b:10:2d:59:c4:b7:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:46:6B:6B:85:A0:6B:BC:C1:C1:12:3E:98:62:87:08:D5:C2:EF
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wQVGa2uFoGu8wcESPphihwjVwu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.202.0/23
Signature Algorithm: sha256WithRSAEncryption
82:58:59:e2:18:29:2a:89:fd:3e:fc:66:2c:44:94:bd:a8:34:
60:80:21:f1:dc:f4:ee:81:88:98:d4:0c:cd:81:bf:cd:cf:e3:
ec:75:b5:b0:c7:56:cd:a0:59:b4:3e:c8:71:93:03:93:bd:bf:
59:2d:14:52:f9:f3:c3:2c:bb:84:ec:7c:6c:66:03:36:c3:55:
f1:69:0f:00:a9:94:6c:4f:8b:ad:e3:f8:f7:08:a9:32:bf:86:
fb:b7:73:62:8f:8e:e4:06:e6:aa:17:d9:8b:4b:fa:76:89:13:
b0:b9:41:69:b4:69:5f:11:d2:63:27:75:dd:26:8c:e9:ed:e7:
32:a3:ab:a3:26:78:f6:67:c4:24:aa:35:ad:80:fa:b9:c0:2b:
78:6d:7d:e6:b1:7d:66:6e:a0:83:cc:71:b9:9d:fd:10:1f:99:
a6:37:42:a9:d5:ec:6b:a5:90:60:69:4a:b6:54:91:82:13:33:
f4:1f:f8:76:05:a3:48:f1:ec:af:de:8a:9a:3d:57:ce:42:f6:
17:a1:32:03:b4:d1:3e:5d:f9:7d:60:e4:b3:b7:86:c0:4d:05:
ac:b6:0a:3d:53:14:aa:dd:23:47:63:89:f8:a5:ed:23:50:87:
ef:ec:aa:0e:34:3a:8a:6a:e2:f8:53:4d:16:6c:5f:31:9f:7d:
5a:ef:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:27:45 2024 by rpki-client on console.sobornost.net