Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WD1MNF8SIOfy5rVwLxqyXb3-VGE.roa
File: WD1MNF8SIOfy5rVwLxqyXb3-VGE.roa (raw, json)
Hash identifier: ts6HwTkwJkgO2UgEaAR/mIagoKY1Iq8w7P8ALHpifRo=
Subject key identifier: 58:3D:4C:34:5F:12:20:E7:F2:E6:B5:70:2F:1A:B2:5D:BD:FE:54:61
Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial: 018CC9BA613F7A5820FD9BC3959B829FCCEC
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WD1MNF8SIOfy5rVwLxqyXb3-VGE.roa
Signing time: Tue 02 Jan 2024 10:31:24 +0000
ROA not before: Tue 02 Jan 2024 10:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41878
IP address blocks: 217.29.225.0/24 maxlen: 24
217.29.224.0/24 maxlen: 24
217.29.226.0/24 maxlen: 24
217.29.230.0/24 maxlen: 24
217.29.229.0/24 maxlen: 24
217.29.232.0/24 maxlen: 24
217.29.231.0/24 maxlen: 24
217.29.233.0/24 maxlen: 24
217.29.228.0/24 maxlen: 24
217.29.227.0/24 maxlen: 24
217.29.237.0/24 maxlen: 24
217.29.236.0/24 maxlen: 24
217.29.239.0/24 maxlen: 24
217.29.238.0/24 maxlen: 24
217.29.235.0/24 maxlen: 24
217.29.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:61:3f:7a:58:20:fd:9b:c3:95:9b:82:9f:cc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
Validity
Not Before: Jan 2 10:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=583d4c345f1220e7f2e6b5702f1ab25dbdfe5461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:8d:36:df:8b:63:2a:56:54:00:2d:94:2b:
3d:45:97:d2:f3:aa:37:7f:c5:47:b8:3e:9d:f6:0d:
36:0c:82:03:0c:a9:83:2c:36:97:55:37:b9:64:fc:
04:36:c0:5b:3e:05:31:04:51:01:1f:17:4c:c0:bc:
a7:ad:23:60:3e:0b:68:bf:94:c5:42:6f:85:e1:2b:
14:d8:80:54:54:de:00:07:b0:bf:2f:96:d0:41:82:
cf:2b:aa:e9:1b:14:03:76:61:f4:50:82:af:a6:cf:
57:8d:10:35:d3:b9:d6:36:41:56:88:52:2c:9b:13:
a6:01:22:74:8c:f3:a3:1c:c9:fd:ff:76:fc:7e:72:
ac:bc:bf:b0:0e:78:52:77:ef:27:9c:e1:c8:21:ba:
a9:17:e7:64:e5:d9:ee:49:17:38:19:f2:2e:91:a3:
4e:ab:72:77:5b:dd:31:89:b4:c8:37:27:35:67:93:
a8:2e:99:94:05:2c:6e:26:98:5d:0b:2c:70:64:2c:
eb:4d:ef:66:c7:cc:85:4c:5e:c4:b6:05:c6:56:fd:
61:ca:75:74:5c:49:72:5f:e6:32:20:d3:ac:3e:fc:
5a:25:1a:fe:7b:52:20:6b:12:8a:fe:06:e0:43:19:
28:2e:c8:42:eb:40:2b:4d:58:fb:76:37:a2:47:04:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3D:4C:34:5F:12:20:E7:F2:E6:B5:70:2F:1A:B2:5D:BD:FE:54:61
X509v3 Authority Key Identifier:
keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WD1MNF8SIOfy5rVwLxqyXb3-VGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.224.0/20
Signature Algorithm: sha256WithRSAEncryption
18:75:f2:47:e7:57:6f:03:44:a6:bd:d4:ac:6a:58:28:e6:49:
3d:ba:38:af:63:6f:97:f8:fc:b4:84:1e:d0:77:cf:51:35:9f:
bd:36:a5:65:3c:74:07:89:b5:c1:e5:bb:11:ea:24:e8:a6:ea:
33:82:c6:60:74:ae:13:e6:b3:1f:73:b5:f9:40:11:79:7b:79:
e0:4a:06:6a:30:e7:b3:92:81:b5:48:0a:53:70:fb:c9:3b:bc:
6c:3e:b0:dc:95:3d:03:19:e2:71:5d:10:d1:f8:b1:28:07:27:
f2:10:83:2a:e7:31:08:5d:7d:a7:a0:73:b2:67:fc:a7:40:69:
49:a8:5e:7e:75:9e:36:5e:61:fc:8c:53:29:f0:0a:35:58:2d:
02:81:b8:d8:bd:23:14:42:d9:58:e8:03:9c:bc:2b:af:1d:2f:
5d:b9:4d:04:55:65:49:8c:ed:94:0f:9e:e8:10:14:ed:ac:a8:
c6:c1:0e:e0:3f:d2:ac:01:56:d5:f6:02:b0:cc:3c:76:da:e5:
18:a8:c1:1a:bb:b4:5a:af:02:e6:11:5d:c9:7c:7e:34:d6:1a:
1f:2a:c8:56:4e:28:96:0d:bf:24:33:11:9e:af:5f:12:39:ae:
37:8e:c3:40:e8:47:b7:9c:6f:57:d0:04:4a:bf:69:90:de:6e:
78:b8:8a:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJumE/elgg/ZvDlZuCn8zsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MTM4ZTNkYjc3NjQwYmVhZGYxZGE1YjE1MTk0YjkzODRh
MTQ0NGUwHhcNMjQwMTAyMTAzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODNkNGMzNDVmMTIyMGU3ZjJlNmI1NzAyZjFhYjI1ZGJkZmU1NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNyNNt+LYypWVAAtlCs9RZfS86o3
f8VHuD6d9g02DIIDDKmDLDaXVTe5ZPwENsBbPgUxBFEBHxdMwLynrSNgPgtov5TF
Qm+F4SsU2IBUVN4AB7C/L5bQQYLPK6rpGxQDdmH0UIKvps9XjRA107nWNkFWiFIs
mxOmASJ0jPOjHMn9/3b8fnKsvL+wDnhSd+8nnOHIIbqpF+dk5dnuSRc4GfIukaNO
q3J3W90xibTINyc1Z5OoLpmUBSxuJphdCyxwZCzrTe9mx8yFTF7EtgXGVv1hynV0
XElyX+YyINOsPvxaJRr+e1IgaxKK/gbgQxkoLshC60ArTVj7djeiRwSlVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFg9TDRfEiDn8ua1cC8asl29/lRhMB8GA1UdIwQY
MBaAFFkTjj23dkC+rfHaWxUZS5OEoUROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDkt
N2E0ZTMzNDBhNDkxLzEvV0QxTU5GOFNJT2Z5NXJWd0x4cXlYYjMtVkdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDktN2E0ZTMzNDBhNDkx
LzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2R3gMA0G
CSqGSIb3DQEBCwUAA4IBAQAYdfJH51dvA0SmvdSsalgo5kk9ujivY2+X+Py0hB7Q
d89RNZ+9NqVlPHQHibXB5bsR6iTopuozgsZgdK4T5rMfc7X5QBF5e3ngSgZqMOez
koG1SApTcPvJO7xsPrDclT0DGeJxXRDR+LEoByfyEIMq5zEIXX2noHOyZ/ynQGlJ
qF5+dZ42XmH8jFMp8Ao1WC0CgbjYvSMUQtlY6AOcvCuvHS9duU0EVWVJjO2UD57o
EBTtrKjGwQ7gP9KsAVbV9gKwzDx22uUYqMEau7RarwLmEV3JfH401hofKshWTiiW
Db8kMxGer18SOa43jsNA6Ee3nG9X0ARKv2mQ3m54uIo+
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:04 2024 by rpki-client on console.sobornost.net