Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2WqL6XEnHHxt5ZLjVw0wuKqLTxs.roa
File: 2WqL6XEnHHxt5ZLjVw0wuKqLTxs.roa (raw, json)
Hash identifier: A+CMUySWaszuKDBHWqJtyyanWO0LO2E5rcXMD55JrDs=
Subject key identifier: D9:6A:8B:E9:71:27:1C:7C:6D:E5:92:E3:57:0D:30:B8:AA:8B:4F:1B
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA993C19B45547BACB00C26F2CC5434D
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2WqL6XEnHHxt5ZLjVw0wuKqLTxs.roa
Signing time: Tue 02 Jan 2024 14:34:49 +0000
ROA not before: Tue 02 Jan 2024 14:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209836
IP address blocks: 87.107.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:3c:19:b4:55:47:ba:cb:00:c2:6f:2c:c5:43:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d96a8be971271c7c6de592e3570d30b8aa8b4f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:54:ef:4f:bb:5e:bb:0f:48:6e:5f:77:0a:16:
b4:86:3e:71:0a:93:fe:40:d6:83:67:17:f5:99:34:
48:52:69:eb:b9:e0:df:a4:ec:c9:a8:68:34:bb:8b:
8b:59:01:53:21:ff:e4:45:0a:23:e5:52:9f:53:03:
e2:44:9c:5e:88:2f:14:66:80:a3:5c:da:26:b9:28:
ee:d8:fd:a8:14:6f:f5:3a:95:31:c5:4f:18:89:5f:
7a:d3:5d:4b:ca:72:9d:76:79:87:71:73:4a:69:d4:
b4:66:67:13:f1:b1:5f:05:b0:eb:45:ca:75:7d:6d:
95:78:58:d2:c2:9d:a8:ec:d0:ba:35:10:1d:6b:80:
9c:f6:7f:e0:07:ce:fa:61:ae:ee:fd:1e:be:49:a7:
4f:bb:10:84:ee:4b:4a:20:41:0f:16:40:7b:02:e7:
1d:92:7e:18:55:40:7c:be:23:4f:9b:05:97:6f:65:
10:af:ba:a8:13:43:5f:eb:b2:96:6b:a5:b7:80:5a:
96:7d:b2:72:1c:14:74:6d:7c:53:51:22:e8:d6:9e:
8e:25:e4:27:7d:f2:91:fc:f4:80:1d:43:0d:df:fd:
7c:06:d6:de:6b:b5:19:29:27:99:dd:3f:94:ed:50:
74:e0:30:31:99:d4:9c:3f:45:e1:13:b4:42:88:81:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:8B:E9:71:27:1C:7C:6D:E5:92:E3:57:0D:30:B8:AA:8B:4F:1B
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2WqL6XEnHHxt5ZLjVw0wuKqLTxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.160.0/22
Signature Algorithm: sha256WithRSAEncryption
71:2b:96:19:91:8d:76:88:f6:80:db:b2:3d:87:ce:8c:6a:63:
32:4e:17:6d:6b:4c:c5:b3:d7:09:7a:3f:33:c3:ec:c2:7b:92:
59:de:23:47:0f:1f:7e:76:f1:01:16:6a:e5:97:7b:d2:3b:46:
a6:34:8f:1f:31:6f:12:1d:27:37:48:91:48:c4:b7:51:4e:88:
a2:39:6f:c7:4b:c8:b0:f7:9e:11:93:15:06:79:92:55:79:03:
b5:60:3f:a2:e2:e6:d2:57:2c:a3:9f:00:45:ba:23:78:90:43:
32:67:d8:87:88:47:d0:da:be:42:bd:b0:cf:75:7c:11:e7:00:
2b:be:7e:20:30:c5:8b:ea:ef:07:a3:3c:6f:d9:b0:6d:cb:89:
4b:34:e1:94:6c:3e:2b:1a:18:a7:b7:58:be:ec:84:92:f5:1e:
b1:32:68:b4:28:d9:9a:00:85:96:8b:f7:5f:05:13:19:50:c7:
5b:46:3a:e9:56:32:96:5d:a0:70:70:c7:77:81:b9:ed:7b:ea:
f3:a3:b2:1b:dc:c5:0a:e1:d4:68:2e:7e:d6:7f:52:de:70:b7:
79:3a:4b:e6:a3:e9:9e:99:86:a7:4c:fe:33:d9:31:a3:ae:9a:
04:ef:ef:4e:33:da:2b:01:fc:19:2b:5d:c4:8c:c9:99:7a:f0:
87:c8:9e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:30 2024 by rpki-client on console.sobornost.net