Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wrGQCK2Fkf_HrSakPEC4G5fhBSk.roa
File: wrGQCK2Fkf_HrSakPEC4G5fhBSk.roa (raw, json)
Hash identifier: s5zV0GzhESP1KxcsC/P+2whcvncNreQ4p1rUNwJaaes=
Subject key identifier: C2:B1:90:08:AD:85:91:FF:C7:AD:26:A4:3C:40:B8:1B:97:E1:05:29
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D78CCB6F639F440B8309B61ACFFAD3
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wrGQCK2Fkf_HrSakPEC4G5fhBSk.roa
Signing time: Wed 01 Jan 2025 21:48:36 +0000
ROA not before: Wed 01 Jan 2025 21:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215702
IP address blocks: 78.28.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:8c:cb:6f:63:9f:44:0b:83:09:b6:1a:cf:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2b19008ad8591ffc7ad26a43c40b81b97e10529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:83:20:44:56:8c:d6:36:e3:9c:10:56:34:
8f:fc:dc:9d:1d:7b:d0:68:22:39:f3:cb:a7:39:c0:
89:b8:cd:eb:4a:68:ed:79:18:d6:25:fd:2d:36:04:
10:bb:18:bd:4d:5a:1b:53:6e:42:a0:9b:3f:f5:b4:
34:60:de:7f:9c:85:11:ad:ac:a1:db:ab:90:38:aa:
78:78:ee:9e:7b:5b:87:09:10:a3:13:6f:c6:fe:1e:
32:2c:8d:57:9f:e6:68:ae:1c:39:c4:63:04:de:be:
07:d6:67:80:c8:e3:e0:c0:77:0f:7a:e3:e5:ff:7a:
ff:66:7c:44:98:58:37:84:3e:e5:11:3e:58:eb:ba:
37:48:c0:8e:b8:ba:74:85:a6:7d:65:10:32:2f:0e:
81:ef:b3:2b:64:1d:f1:07:bf:81:a3:97:63:65:b4:
89:3a:78:da:bf:b9:17:71:20:58:55:de:cf:27:c7:
d0:9c:cd:93:d7:30:7c:59:6a:cb:08:f5:82:8a:6d:
77:e7:fd:4a:01:49:19:f7:ae:9a:ae:e0:fd:af:26:
62:85:56:1c:f5:54:f2:5f:42:38:00:26:54:a7:9a:
1b:f5:ba:c0:4c:d9:93:49:e3:1a:ac:a8:22:db:b1:
c1:d7:40:ad:72:8d:35:76:0c:09:07:eb:ef:d8:15:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:90:08:AD:85:91:FF:C7:AD:26:A4:3C:40:B8:1B:97:E1:05:29
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wrGQCK2Fkf_HrSakPEC4G5fhBSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:09:88:d4:5a:fc:de:52:6c:a6:63:5d:46:c4:09:02:2a:30:
c3:07:4b:e4:63:bc:ae:f3:4d:fe:90:c1:b8:57:a1:5f:13:f9:
a0:1f:0e:54:30:9a:33:cd:70:89:93:01:87:4e:ee:34:30:3a:
aa:c2:b2:20:50:24:7f:0c:e8:d9:4e:1d:ab:00:5b:ac:7c:b5:
23:9c:0c:e2:c8:a4:62:d6:b5:64:a9:a0:aa:99:07:60:b4:54:
29:f7:45:df:b9:68:fb:b3:60:3f:3a:44:ba:34:3a:cf:b6:50:
aa:08:e6:67:16:45:8b:ba:00:a6:e2:27:3b:39:62:33:dc:36:
36:3b:fc:19:6d:ed:fe:5e:64:a4:ff:64:e7:3d:92:1a:7a:63:
fe:02:89:68:84:2e:24:39:12:fb:15:bb:6e:ad:56:9f:d4:41:
d0:35:08:c6:2a:f4:04:f6:00:f7:b2:85:9b:94:b7:f7:0c:0d:
ab:f9:c5:ba:8a:0a:83:d2:92:2b:71:cb:ea:87:70:69:1d:c2:
fa:ee:48:89:43:f3:eb:fa:7a:28:7b:ed:4c:eb:2b:f8:d5:d8:
9f:d6:b7:11:d2:08:e5:50:96:24:9a:6f:91:f0:b2:25:7b:76:
f1:e6:44:15:e3:d4:fd:74:26:bb:02:0a:1c:e7:78:b0:9e:78:
df:26:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net