Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Wtx68IbdJ09bdyYrt82HRKx5ivo.roa
File: Wtx68IbdJ09bdyYrt82HRKx5ivo.roa (raw, json)
Hash identifier: 9OmhQK/FJ1AS8c6Ni0HB3wBNRUjGSnL/PxJ1dKzw4bw=
Subject key identifier: 5A:DC:7A:F0:86:DD:27:4F:5B:77:26:2B:B7:CD:87:44:AC:79:8A:FA
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 01938BA24DD346660FB5F5DDAB01B4948915
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Wtx68IbdJ09bdyYrt82HRKx5ivo.roa
Signing time: Tue 03 Dec 2024 08:28:09 +0000
ROA not before: Tue 03 Dec 2024 08:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213936
IP address blocks: 87.246.180.0/24 maxlen: 24
87.246.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:a2:4d:d3:46:66:0f:b5:f5:dd:ab:01:b4:94:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 3 08:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5adc7af086dd274f5b77262bb7cd8744ac798afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:c0:f7:c5:01:a4:83:83:c4:c7:aa:b8:ea:
73:62:3f:15:c3:2d:ed:3b:ea:07:26:29:b0:c9:ba:
af:b0:b8:b8:05:5d:d5:82:30:71:36:24:1b:1a:90:
c7:17:1e:0d:e0:2a:68:0a:03:fc:f0:c5:38:65:da:
1f:8b:93:70:be:fd:d2:88:51:a1:44:a7:a2:08:dc:
ee:f2:47:99:97:44:d5:13:50:7c:ba:2d:83:e5:cc:
2f:bf:16:56:40:ac:e3:f8:1b:dd:d3:a9:42:71:93:
46:eb:37:07:71:0f:51:f4:67:f6:a3:27:aa:e0:4c:
6a:0e:d3:14:4a:28:3e:2f:b1:7c:bf:39:9c:bb:ab:
65:aa:43:c7:fb:34:6a:c4:20:e0:9c:93:15:de:57:
af:5e:6c:7b:8d:ff:8f:d6:fe:e2:96:d2:8c:2d:35:
40:31:25:30:46:d1:7c:a8:f2:a3:a0:c1:33:3b:08:
42:52:c1:e0:7b:09:c2:48:61:98:a7:32:5b:59:ef:
62:19:04:c0:f4:7f:d5:64:86:4b:88:21:26:09:8f:
41:4b:bd:16:4f:17:85:c5:29:bb:81:5d:03:1b:27:
75:dd:cb:ff:dd:07:6a:35:20:08:e0:80:98:09:4c:
71:d9:25:c1:49:ac:ad:f1:e9:60:4a:07:4f:99:33:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:7A:F0:86:DD:27:4F:5B:77:26:2B:B7:CD:87:44:AC:79:8A:FA
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Wtx68IbdJ09bdyYrt82HRKx5ivo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:44:23:b4:83:36:d8:1f:24:9f:aa:8c:2a:e1:ec:a2:de:ff:
99:68:c2:b7:3f:6c:27:4f:5f:02:86:c5:a9:9a:27:17:2c:8c:
ea:d4:59:d8:bd:96:ce:e5:94:41:65:20:0d:f7:22:4d:e2:7c:
55:3b:9e:e2:09:34:8e:12:24:8d:c3:f1:d2:fd:91:e6:53:ec:
9b:b1:77:af:a8:62:05:f6:3e:89:a0:80:01:f7:b7:fd:08:0b:
11:68:e4:b7:67:8d:a0:02:08:31:2c:f0:88:71:ca:ae:2a:01:
e4:d2:92:bf:0c:81:72:7f:94:16:d2:e2:88:52:3f:80:04:71:
45:81:81:6b:cd:e5:57:d1:0b:a0:53:8b:cc:2b:cf:23:54:f0:
8a:d8:a0:ce:bc:ac:24:03:96:24:92:8b:23:a6:97:9e:15:c7:
f2:be:25:94:64:b6:07:40:c0:01:9c:cc:98:3e:89:9e:cd:3f:
99:95:b5:8a:f8:3b:a6:17:84:6a:d1:5e:75:89:58:20:f4:61:
26:c2:95:70:2c:1f:cd:b3:99:3b:fc:97:c4:e5:da:1e:78:d2:
6c:47:50:63:20:6a:d3:14:3a:9a:69:cf:e5:f8:73:7c:2f:5f:
0a:b6:9d:c8:b6:9e:88:b9:7e:ab:fc:c8:cb:61:c4:02:46:66:
d7:fe:00:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOLok3TRmYPtfXdqwG0lIkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjQxMjAzMDgyODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWRjN2FmMDg2ZGQyNzRmNWI3NzI2MmJiN2NkODc0NGFjNzk4YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmfA98UBpIODxMequOpzYj8Vwy3t
O+oHJimwybqvsLi4BV3VgjBxNiQbGpDHFx4N4CpoCgP88MU4Zdofi5Nwvv3SiFGh
RKeiCNzu8keZl0TVE1B8ui2D5cwvvxZWQKzj+Bvd06lCcZNG6zcHcQ9R9Gf2oyeq
4ExqDtMUSig+L7F8vzmcu6tlqkPH+zRqxCDgnJMV3levXmx7jf+P1v7iltKMLTVA
MSUwRtF8qPKjoMEzOwhCUsHgewnCSGGYpzJbWe9iGQTA9H/VZIZLiCEmCY9BS70W
TxeFxSm7gV0DGyd13cv/3QdqNSAI4ICYCUxx2SXBSayt8elgSgdPmTMApQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFrcevCG3SdPW3cmK7fNh0SseYr6MB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvV3R4NjhJYmRKMDliZHlZcnQ4MkhSS3g1aXZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/a0MA0G
CSqGSIb3DQEBCwUAA4IBAQCNRCO0gzbYHySfqowq4eyi3v+ZaMK3P2wnT18ChsWp
micXLIzq1FnYvZbO5ZRBZSAN9yJN4nxVO57iCTSOEiSNw/HS/ZHmU+ybsXevqGIF
9j6JoIAB97f9CAsRaOS3Z42gAggxLPCIccquKgHk0pK/DIFyf5QW0uKIUj+ABHFF
gYFrzeVX0QugU4vMK88jVPCK2KDOvKwkA5YkkosjppeeFcfyviWUZLYHQMABnMyY
PomezT+ZlbWK+DumF4Rq0V51iVgg9GEmwpVwLB/Ns5k7/JfE5doeeNJsR1BjIGrT
FDqaac/l+HN8L18Ktp3Itp6IuX6r/MjLYcQCRmbX/gAW
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:38 2024 by rpki-client on console.sobornost.net