Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/wfGb-cRNLEWEI5RPtp75Jxfqy84.roa
File: wfGb-cRNLEWEI5RPtp75Jxfqy84.roa (raw, json)
Hash identifier: x/WzJWW3Fa3LwBmy+oMjhW9cxXLD0nASVbL6eEuTFl8=
Subject key identifier: C1:F1:9B:F9:C4:4D:2C:45:84:23:94:4F:B6:9E:F9:27:17:EA:CB:CE
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 018CC56E57176EFCD34987FBB3179D22D375
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/wfGb-cRNLEWEI5RPtp75Jxfqy84.roa
Signing time: Mon 01 Jan 2024 14:29:51 +0000
ROA not before: Mon 01 Jan 2024 14:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:57:17:6e:fc:d3:49:87:fb:b3:17:9d:22:d3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Jan 1 14:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1f19bf9c44d2c458423944fb69ef92717eacbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:49:3a:fe:74:c1:40:f2:b3:d2:e9:f1:bf:
7d:9c:5a:18:fc:17:8e:2b:95:3d:1c:fd:e0:87:0a:
39:68:ac:02:78:46:65:82:36:a7:42:83:79:31:c2:
8b:d2:d8:10:82:a2:52:f6:3d:ed:47:58:ea:28:18:
02:c1:a5:0c:52:fc:2f:6b:f3:cf:0d:d0:cf:96:26:
b5:b3:54:d4:06:82:3a:15:56:a9:97:25:63:2c:55:
42:b2:1e:8d:34:63:06:79:21:5a:63:96:83:0f:d4:
80:29:e4:d4:b6:49:eb:e1:d6:57:58:9a:45:83:f5:
bd:e4:c3:c6:f0:a5:5e:7f:3b:dd:ed:d1:3f:e7:9b:
b6:9e:e9:f0:19:36:f5:b6:09:fa:a9:a5:4f:93:1e:
19:13:fc:33:f0:87:59:ce:0f:7e:80:04:c6:fb:1d:
bf:34:dc:b8:7c:37:00:3d:69:90:4a:6d:76:d4:35:
a0:90:5a:7c:d2:12:0b:0c:cd:78:60:cb:e2:37:9c:
5d:2a:59:ea:60:7b:96:bb:09:e3:bd:60:71:0e:95:
72:a5:78:6a:02:06:b4:7c:78:40:5d:79:4d:56:eb:
f2:e5:f5:20:a7:a4:2c:07:82:67:28:fa:a2:c9:46:
d9:fe:07:44:85:22:fd:15:f5:c3:91:4b:e4:98:d9:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:9B:F9:C4:4D:2C:45:84:23:94:4F:B6:9E:F9:27:17:EA:CB:CE
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/wfGb-cRNLEWEI5RPtp75Jxfqy84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.129.0/24
Signature Algorithm: sha256WithRSAEncryption
33:65:8e:d3:f6:84:30:5f:24:be:1b:20:22:95:ea:4b:c7:bf:
83:41:96:90:61:e8:2e:51:d0:b6:ea:e4:32:87:0f:fe:1b:f8:
51:c2:7d:0d:82:96:27:42:38:6b:3d:d4:91:93:f4:8a:8a:3a:
20:45:97:b7:60:0e:a5:8e:1d:7b:fe:e3:64:a7:39:a5:9f:1d:
ec:f3:a8:d4:23:fb:c7:97:31:6f:9a:20:17:6c:48:5c:02:6e:
72:ff:4b:cb:06:f8:2a:de:d4:6f:72:10:52:38:82:c3:76:df:
a3:3d:60:d5:bd:40:3c:dd:b5:b5:0f:7c:2e:3d:01:1f:5f:54:
4c:49:12:fc:0d:7c:29:80:2b:81:9f:be:07:ea:2d:c6:f7:42:
11:ed:e2:ba:2f:e4:a4:7d:ec:24:87:6a:63:ca:e6:d1:e8:36:
4d:8e:44:00:ac:97:81:58:dd:a5:e4:d9:be:13:a5:73:e5:0d:
9d:de:31:c8:45:89:f5:be:ce:78:cf:99:43:70:0a:fe:07:04:
47:15:3a:08:b7:24:a1:05:f5:74:40:96:77:b0:8e:bf:89:80:
d8:57:cf:9a:db:1d:16:25:f6:b7:a5:87:57:7f:b5:6b:63:ab:
2e:ca:c4:65:0c:1a:5a:44:58:bf:ba:7a:80:b7:e0:a3:20:07:
68:cd:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:43 2024 by rpki-client on console.sobornost.net