Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/UOJEj-QeD6R-nbE4RW0lIxBEImE.roa
File: UOJEj-QeD6R-nbE4RW0lIxBEImE.roa (raw, json)
Hash identifier: tOEK5wwA2ReV3NOSpdmLytxlLPJinfVs4flu0f2fagk=
Subject key identifier: 50:E2:44:8F:E4:1E:0F:A4:7E:9D:B1:38:45:6D:25:23:10:44:22:61
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 019367CDA2FDAE28A3223E87A55B7DD36B0A
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/UOJEj-QeD6R-nbE4RW0lIxBEImE.roa
Signing time: Tue 26 Nov 2024 09:29:10 +0000
ROA not before: Tue 26 Nov 2024 09:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.212.127.0/24 maxlen: 24
91.238.107.0/24 maxlen: 24
193.110.146.0/24 maxlen: 24
193.138.90.0/24 maxlen: 24
194.165.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:cd:a2:fd:ae:28:a3:22:3e:87:a5:5b:7d:d3:6b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Nov 26 09:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50e2448fe41e0fa47e9db138456d252310442261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:8a:63:1e:ee:c2:fd:60:3c:d3:b3:91:ad:
15:78:2d:20:ce:0e:bb:bf:d9:07:16:3e:c2:85:31:
3b:6d:c3:8c:01:15:53:18:a1:2c:c2:a9:76:be:e4:
ff:20:3a:84:b9:07:78:bf:26:33:19:51:0f:a7:f4:
79:db:f7:18:38:84:39:06:6f:e8:b2:92:4a:e9:b7:
20:17:a0:1f:8d:42:88:22:e1:bd:0e:f3:62:0a:df:
c4:67:49:f5:ab:25:a5:a5:4b:ed:9c:bc:2d:89:b0:
7a:8a:55:f6:b9:f8:84:88:e4:02:b0:90:22:dc:dc:
da:cf:23:89:e4:fc:e1:a4:64:b8:57:de:1c:ff:28:
b5:ec:77:b6:a6:df:42:e1:ea:95:00:3b:f5:06:fd:
e6:d5:6c:33:7f:de:28:52:f6:fe:60:33:37:b2:e3:
5b:64:c9:de:a5:b6:12:a7:41:bf:1f:a5:57:a9:04:
c5:b7:90:e2:eb:48:d3:89:12:f5:7b:fa:e7:6e:50:
9d:f9:97:df:95:0e:d4:d8:61:d8:c2:85:3f:39:bc:
d4:99:3e:9f:87:11:a9:d5:b8:39:cb:1c:27:b5:59:
dc:de:84:07:8e:ec:86:12:07:38:c7:95:51:2a:31:
b0:75:2b:ec:5b:6f:7e:95:3d:c2:9a:29:7d:d5:89:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:44:8F:E4:1E:0F:A4:7E:9D:B1:38:45:6D:25:23:10:44:22:61
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/UOJEj-QeD6R-nbE4RW0lIxBEImE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.127.0/24
91.238.107.0/24
193.110.146.0/24
193.138.90.0/24
194.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:9d:31:21:8b:96:49:71:64:6d:e6:ae:25:14:d3:59:19:a3:
65:ea:37:35:ab:0f:9d:0c:f2:48:2f:43:76:6b:bc:0a:49:0d:
8d:e9:70:47:ea:b5:86:2f:41:1d:f9:a3:91:2c:fb:89:b5:97:
f8:45:8c:b2:42:c6:f3:29:19:33:92:87:66:3d:79:8f:1a:60:
8c:bd:07:8d:38:6d:c7:76:e5:a3:df:b8:fc:68:d7:11:e7:46:
e2:f0:29:ba:f2:f3:36:ed:eb:45:8c:b0:c4:76:36:ed:87:40:
1f:5f:dc:14:4b:70:fe:d8:c8:a5:24:ab:59:d2:78:57:3f:09:
b9:72:b2:07:66:0d:8a:07:cb:6e:4d:69:6f:0c:0a:94:1f:a1:
35:a1:e8:f9:1d:12:4c:08:1b:29:0a:7e:f4:c4:23:ef:43:f5:
31:c6:70:5e:92:08:84:19:9a:ff:30:9c:ca:48:ef:e6:10:fa:
30:de:d8:2f:08:7a:49:f7:55:ca:ba:38:b6:62:14:9a:9c:ab:
0d:ed:9f:39:43:1b:cd:5f:6c:55:ed:5d:11:9d:ef:f5:6e:0a:
dc:b0:b1:0b:ab:00:e8:52:65:b3:0a:93:79:b7:55:91:1f:46:
71:d7:51:51:f7:d1:ca:4a:4b:77:40:22:8c:54:88:3e:a3:b5:
f5:70:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:19 2024 by rpki-client on console.sobornost.net