Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/wrSDMgBHMqrd0AudvJU9IInM2lc.roa
File: wrSDMgBHMqrd0AudvJU9IInM2lc.roa (raw, json)
Hash identifier: kTTINHC4YQAfcQgKrKI8Ey9zqXnMX1tqXi1LGGLyJsc=
Subject key identifier: C2:B4:83:32:00:47:32:AA:DD:D0:0B:9D:BC:95:3D:20:89:CC:DA:57
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 0193D3C3C59ADC10938D8C8837276F3ED3EF
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/wrSDMgBHMqrd0AudvJU9IInM2lc.roa
Signing time: Tue 17 Dec 2024 08:37:22 +0000
ROA not before: Tue 17 Dec 2024 08:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43937
IP address blocks: 87.251.0.0/20 maxlen: 24
93.89.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:c3:c5:9a:dc:10:93:8d:8c:88:37:27:6f:3e:d3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Dec 17 08:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2b48332004732aaddd00b9dbc953d2089ccda57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:e7:b9:86:ae:e5:e2:0b:ae:9f:14:fe:10:
fd:8e:96:fb:fe:c8:18:2d:df:ae:dd:93:f6:20:f0:
0e:6f:35:cb:c0:5c:31:eb:d3:ec:4a:74:93:4c:5e:
49:41:28:3a:b1:b7:e6:3e:f4:71:36:98:a8:0c:9a:
d7:0d:ff:a6:0e:b9:ae:71:67:52:aa:7a:7a:00:d8:
cc:32:a7:cf:5b:d1:ed:4b:f5:48:27:ff:29:a2:7a:
e2:2b:43:c3:02:fe:9d:14:e1:67:08:2c:13:80:71:
cc:38:64:65:20:94:2b:83:e8:25:c1:eb:0b:e6:b3:
27:63:36:96:f9:ec:87:82:7f:0f:0a:64:ed:75:9d:
fe:da:0b:1e:9e:dc:07:21:94:fe:70:5e:fc:06:68:
0a:97:13:0c:cd:24:80:8b:f0:01:46:4f:2a:e0:e2:
99:ff:bc:fb:95:1c:03:9f:66:64:71:b4:85:53:16:
4f:0d:7a:c6:ca:a1:82:33:f5:3f:ad:45:a8:ed:6f:
ba:1d:c6:f2:4d:83:c3:52:b7:d7:4f:a3:52:7e:62:
ad:2f:9c:95:52:0f:d8:8d:17:37:6d:ce:11:89:e2:
64:61:5f:bf:73:1d:fb:5a:5e:cd:21:cd:e6:69:ed:
bc:fb:f5:d8:39:42:34:40:1d:3e:3f:4b:62:9d:88:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:83:32:00:47:32:AA:DD:D0:0B:9D:BC:95:3D:20:89:CC:DA:57
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/wrSDMgBHMqrd0AudvJU9IInM2lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0/20
93.89.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:44:78:04:25:a0:7c:c4:ee:b3:70:d2:32:29:3b:08:7c:2e:
34:9b:23:ea:75:5d:ec:42:3e:d5:38:09:c0:61:be:c2:11:01:
0f:ef:d7:73:24:c6:70:d2:2d:9e:b6:03:03:43:1d:38:f5:26:
2f:3d:16:33:c3:78:c2:6d:83:e8:00:f0:e0:8a:38:0d:36:02:
f8:41:0b:bd:bc:29:fc:3b:6a:e9:63:55:c2:cc:0c:da:b4:65:
52:1a:0d:9d:91:e5:c8:fb:a5:08:0d:c1:f2:c9:7e:80:6d:21:
4e:de:27:ba:4e:32:62:65:75:3d:48:17:7d:fc:4e:ee:3d:72:
1d:33:56:db:05:ac:eb:dc:d3:be:c9:4e:53:62:a4:b6:c8:3a:
ab:3c:e8:5b:4e:29:d5:d6:d2:f3:ab:10:a3:0d:07:62:69:78:
9e:b4:72:af:09:ae:89:a2:4a:16:c9:9a:a0:6f:80:8f:0c:d3:
b6:10:90:01:26:cd:83:56:d8:4f:07:14:65:3a:ea:98:19:75:
1d:fd:eb:e2:10:41:f4:53:c9:3a:d4:40:cc:10:2a:36:23:b3:
d1:f0:94:18:2c:71:aa:75:89:86:fc:e8:0f:b9:12:34:ad:d1:
10:cd:b8:1f:30:e3:45:4d:67:63:24:2e:2c:50:8a:99:ab:f3:
ff:12:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:36 2024 by rpki-client on console.sobornost.net