Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/whVd2a6Fejgf6yD8wWMwIwnaf5g.roa
File: whVd2a6Fejgf6yD8wWMwIwnaf5g.roa (raw, json)
Hash identifier: yf8tbvXXovRwQ2kf8LoL0T052Dswr0tJTxp9o6IHULs=
Subject key identifier: C2:15:5D:D9:AE:85:7A:38:1F:EB:20:FC:C1:63:30:23:09:DA:7F:98
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01936987D713F97B592E6C06FEDD09DABCB8
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/whVd2a6Fejgf6yD8wWMwIwnaf5g.roa
Signing time: Tue 26 Nov 2024 17:32:10 +0000
ROA not before: Tue 26 Nov 2024 17:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48525
IP address blocks: 194.147.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:87:d7:13:f9:7b:59:2e:6c:06:fe:dd:09:da:bc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 26 17:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2155dd9ae857a381feb20fcc163302309da7f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:7d:07:7f:17:c9:b4:d7:5b:a0:57:12:3c:
f0:31:4d:9d:98:49:8c:d9:88:02:e7:47:f4:4c:2e:
44:8d:81:13:35:96:c6:ee:85:0d:68:04:b4:78:ff:
7e:eb:17:da:b2:ee:9b:1c:83:54:4a:e7:50:94:53:
9b:40:e6:82:fd:91:3c:d7:95:c9:d0:31:11:a7:78:
9a:11:8d:3c:2d:e4:65:52:bb:c5:e2:7c:c8:39:69:
e6:c5:24:6c:f0:34:5a:b8:13:b7:f8:2e:05:e9:38:
31:fc:23:7f:1e:f9:48:be:68:ec:5f:6f:8c:3d:80:
03:cb:f7:0f:96:44:a2:6e:e9:79:83:3c:35:2c:db:
91:a4:cb:99:14:9c:eb:c1:40:27:fe:c2:be:e5:e5:
0a:df:6a:d7:fa:92:36:94:36:72:2e:2c:ef:06:9c:
e7:d8:94:d0:46:de:52:d7:c3:07:dd:e2:ca:3d:92:
1a:5f:30:76:c2:a0:5d:b1:bc:db:ca:7e:de:ec:90:
68:7f:69:14:d8:e0:9f:df:a8:7d:a3:e3:14:96:ab:
2d:8a:19:ef:e7:dc:9e:4f:fa:c0:80:be:06:5f:02:
49:ca:0d:9c:fb:37:a0:fb:9b:98:7a:5c:69:cc:a1:
b1:31:6e:01:3d:73:e5:67:a9:00:98:89:a1:92:78:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:5D:D9:AE:85:7A:38:1F:EB:20:FC:C1:63:30:23:09:DA:7F:98
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/whVd2a6Fejgf6yD8wWMwIwnaf5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.110.0/23
Signature Algorithm: sha256WithRSAEncryption
27:65:c5:48:a9:f1:09:b0:14:92:72:9c:05:3e:2a:ef:29:d7:
0d:7d:23:bb:f8:d5:04:02:ae:47:7a:e8:15:77:82:d7:fc:63:
9d:86:4b:61:e6:5c:d7:8c:49:59:24:d3:9f:08:54:9e:a5:75:
ba:ff:2e:09:c4:61:f6:1b:6b:bf:01:48:44:a0:ac:d4:fb:2d:
9e:f8:06:20:08:dd:cb:5a:26:47:e6:c8:c2:47:25:97:cb:ad:
77:f6:0d:a7:46:98:53:89:b9:de:f9:a0:e6:01:bb:ae:12:10:
ed:ca:2a:0b:f3:cf:ce:5f:9c:2f:fc:69:d6:0f:ad:08:35:f3:
57:32:a0:1b:2a:de:a4:83:2a:6e:59:d2:e9:70:1a:18:5c:95:
5a:14:00:7f:a0:6e:37:94:6c:8f:59:12:d8:4f:bc:0a:ba:af:
70:74:e4:2b:43:eb:f3:4f:c8:c4:be:9e:6f:c2:39:b9:93:ac:
d3:6f:7a:f6:89:26:72:5b:24:60:5c:65:21:5b:a3:3b:7a:d1:
90:6a:85:05:dd:ea:a6:28:40:35:ec:32:9b:03:65:92:03:c1:
55:ec:18:2a:b9:08:5b:77:c3:fd:83:0b:61:44:aa:9a:4a:b8:
8c:b2:61:ab:54:1b:a4:13:b9:42:0a:9d:9f:e7:24:1b:d8:80:
ad:3c:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:11 2024 by rpki-client on console.sobornost.net