Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/7WSKT7J7wk-RVKJtDz1fd7mWpsg.roa
File: 7WSKT7J7wk-RVKJtDz1fd7mWpsg.roa (raw, json)
Hash identifier: /Un2yQ8q/BQSWtMUR+JKOfPXs7KbUyT/Iu16V+Kmhv4=
Subject key identifier: ED:64:8A:4F:B2:7B:C2:4F:91:54:A2:6D:0F:3D:5F:77:B9:96:A6:C8
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 0191E59983AD219B31430CEFB0DAB624C802
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/7WSKT7J7wk-RVKJtDz1fd7mWpsg.roa
Signing time: Thu 12 Sep 2024 09:38:48 +0000
ROA not before: Thu 12 Sep 2024 09:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60754
IP address blocks: 212.8.50.0/23 maxlen: 23
212.8.50.0/24 maxlen: 24
212.8.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:99:83:ad:21:9b:31:43:0c:ef:b0:da:b6:24:c8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Sep 12 09:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed648a4fb27bc24f9154a26d0f3d5f77b996a6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:17:05:66:75:51:74:be:ff:bf:ab:67:26:
a3:b4:7b:f1:47:2d:94:a5:db:0d:28:e8:b3:04:30:
8e:ef:b7:74:26:0a:5b:88:16:3b:dc:d2:ea:e7:f9:
72:e9:a7:e2:e0:2a:f2:73:0d:4c:31:2a:b2:8e:6b:
c7:24:fc:b7:07:bc:4e:60:31:b3:91:b8:71:be:1b:
78:70:03:76:84:26:2a:38:88:c7:2d:23:43:13:01:
dc:f1:a5:74:d9:a9:2e:27:4e:dc:1f:44:91:ec:9c:
67:44:d4:8e:ec:b0:95:ea:65:c3:c8:a5:84:01:6d:
1c:a7:47:6d:74:1c:e4:48:db:a3:7f:e4:94:e3:47:
e4:a2:f6:f5:3f:a7:c4:e5:b9:4b:e0:8d:24:dd:3c:
45:d0:43:67:43:a7:6b:e3:cd:18:d0:fa:c4:9b:e8:
88:b4:d4:af:15:87:97:d4:a0:8b:52:9f:89:48:a7:
44:6f:16:e2:48:b8:f9:46:63:f7:8e:84:8b:a2:7f:
25:cd:99:b7:35:eb:33:3f:5a:f5:02:2f:c1:59:a1:
a2:22:58:7c:27:d4:ab:6e:fe:05:d1:89:9c:dc:59:
6c:ad:96:e2:af:6c:18:73:75:2e:2d:18:94:07:0a:
25:b5:ca:40:91:b4:8d:66:83:27:bf:1a:8b:00:e9:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:8A:4F:B2:7B:C2:4F:91:54:A2:6D:0F:3D:5F:77:B9:96:A6:C8
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/7WSKT7J7wk-RVKJtDz1fd7mWpsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.50.0/23
Signature Algorithm: sha256WithRSAEncryption
22:fb:3b:1d:d3:65:d9:30:67:94:21:f0:ab:60:b4:86:d2:12:
cb:bc:49:8d:57:2e:b0:38:9e:ed:80:41:dc:ee:9a:1a:0c:34:
33:11:db:7b:8c:45:85:15:25:08:3a:81:2f:3a:29:2c:c0:50:
c0:85:28:ca:dd:a5:da:1d:95:03:31:50:42:bd:08:8b:27:c7:
47:cd:47:28:3e:cf:60:4a:bd:d4:83:be:eb:60:8f:87:da:e2:
7d:5c:f7:6a:24:0b:6e:67:f2:b0:61:6b:f2:df:2e:26:61:9c:
4b:a4:4d:f5:c5:98:a5:62:63:7a:4e:1b:c3:a3:fa:4e:f9:e8:
b8:81:10:95:b7:70:3c:e2:82:ee:2d:58:d7:5c:08:7b:dc:fb:
d5:14:5e:0d:24:62:d0:35:95:69:03:4c:f2:64:80:1b:ac:6b:
eb:80:e9:aa:e7:4e:f3:62:c4:70:89:de:4a:e3:52:f7:7a:a3:
13:79:ea:ef:50:6b:91:35:e6:16:2c:cd:db:66:2d:44:66:50:
8e:5f:61:66:84:66:51:47:ea:ff:3b:35:4e:5e:af:1d:48:d4:
2c:7d:79:ce:1b:68:27:c6:70:a2:49:c8:5a:b1:40:2c:8c:fb:
48:c2:7d:92:1d:b0:9c:01:d2:0d:3a:72:cf:a1:31:76:66:0b:
31:2e:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:38 2024 by rpki-client on console.sobornost.net