Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/2WC12P6d9ywQiU8j1MIrOf4QdgI.roa
File: 2WC12P6d9ywQiU8j1MIrOf4QdgI.roa (raw, json)
Hash identifier: Nkgr9r6cThfNit9X6XI6wZhAOXgUWAGLb4ybZMjkFJw=
Subject key identifier: D9:60:B5:D8:FE:9D:F7:2C:10:89:4F:23:D4:C2:2B:39:FE:10:76:02
Certificate issuer: /CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Certificate serial: D08126
Authority key identifier: 9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/2WC12P6d9ywQiU8j1MIrOf4QdgI.roa
Signing time: Sat 01 Jan 2022 00:56:58 +0000
ROA not before: Sat 01 Jan 2022 00:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664550 (0xd08126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Validity
Not Before: Jan 1 00:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d960b5d8fe9df72c10894f23d4c22b39fe107602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:63:d6:52:38:a4:5e:4b:1e:4d:9b:4c:cb:
1c:5f:f9:a1:f8:00:85:55:57:d6:e0:1b:c3:b8:c5:
6f:4e:56:01:08:d2:14:2d:c2:e3:aa:6b:72:42:df:
8c:ec:d2:00:1d:47:90:9d:68:eb:ea:09:3a:af:ba:
0b:3e:40:3c:be:fb:17:54:2e:6d:cf:79:91:db:6f:
3b:99:9e:32:04:ed:f7:87:03:7d:27:4f:28:00:4a:
0f:83:3b:38:13:8f:5e:74:8a:68:06:71:81:1f:fe:
5b:d8:28:fa:14:c9:6d:c3:99:ba:58:4b:e7:e9:46:
53:1d:60:a2:8f:66:2d:ec:ee:d8:59:b6:45:fa:7d:
84:03:74:cc:20:da:bd:7a:a3:65:4e:d2:96:6e:46:
ff:67:2b:c4:76:20:be:bd:9f:b1:e6:ac:10:70:bd:
ef:6c:53:54:9f:08:48:6f:c1:49:8e:1d:1f:c8:5f:
21:8d:0a:dd:3c:09:bd:e2:3a:86:5c:da:6f:94:67:
97:75:05:f5:4f:a7:4b:79:09:ce:89:63:8d:d6:08:
2e:62:22:d0:92:e2:6a:bc:7a:2a:6b:86:e6:26:4c:
6f:66:0d:58:93:c2:ca:5a:12:98:de:d3:3d:4a:2c:
af:e0:06:6c:31:a6:02:fa:1f:ee:86:db:01:03:01:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:60:B5:D8:FE:9D:F7:2C:10:89:4F:23:D4:C2:2B:39:FE:10:76:02
X509v3 Authority Key Identifier:
keyid:9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/2WC12P6d9ywQiU8j1MIrOf4QdgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a2:1c:7b:c2:04:e2:b5:a2:d9:19:94:3b:ba:3d:25:67:92:
16:a5:33:be:75:b8:96:84:e0:ab:6f:26:f4:77:cf:08:b2:86:
65:d1:16:20:e7:19:18:c8:a0:1f:06:d9:a6:5d:21:63:6c:05:
74:a0:f3:e0:04:9c:2e:83:c2:e7:9b:fe:28:0a:8f:e5:7f:04:
54:7c:6d:ef:58:55:4c:f3:55:f0:b2:86:8d:eb:d4:45:8e:7c:
93:29:3a:09:86:65:82:85:94:4e:8b:1c:5d:95:25:53:33:e9:
99:c5:c8:ba:b8:aa:4d:c8:a6:b5:15:8e:66:8b:6d:0f:6f:b4:
dc:60:ab:84:d4:a8:85:47:84:b0:fa:34:d7:7b:c4:66:5a:50:
e2:69:9d:21:ba:bd:eb:2d:d0:f9:f1:11:ac:04:65:40:e6:93:
0b:2c:ea:69:2c:89:d7:aa:90:2c:ff:3d:5e:4e:ef:85:bd:ec:
29:ee:0a:56:28:69:e7:22:d5:92:74:cb:53:d0:23:43:d6:78:
74:fe:ca:fc:f4:a5:4e:60:57:5a:dc:b2:fa:f8:8b:90:09:01:
84:7d:02:21:f8:ff:ed:fe:5f:c4:1e:c3:6c:3e:39:2b:a9:39:
a2:7a:05:69:43:f8:4a:54:5f:c8:30:be:11:ca:56:5a:21:89:
a7:1b:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net