Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/nZ5VM_bo_U8mopMxfraQwZwJEoo.roa
File: nZ5VM_bo_U8mopMxfraQwZwJEoo.roa (raw, json)
Hash identifier: GrK2pNObbG/9jwx7Bm2Yx+BLktLo6TWLOk8y5WPrVwI=
Subject key identifier: 9D:9E:55:33:F6:E8:FD:4F:26:A2:93:31:7E:B6:90:C1:9C:09:12:8A
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 019367CDA2B71D91674830D2C4B536F390D8
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/nZ5VM_bo_U8mopMxfraQwZwJEoo.roa
Signing time: Tue 26 Nov 2024 09:29:09 +0000
ROA not before: Tue 26 Nov 2024 09:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.212.127.0/24 maxlen: 24
91.238.107.0/24 maxlen: 24
193.110.146.0/24 maxlen: 24
193.138.90.0/24 maxlen: 24
194.165.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:cd:a2:b7:1d:91:67:48:30:d2:c4:b5:36:f3:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Nov 26 09:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d9e5533f6e8fd4f26a293317eb690c19c09128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:23:94:20:b7:b6:48:9d:c7:ab:21:e8:9a:
96:df:d3:81:22:95:6c:89:71:af:5f:51:62:11:90:
aa:4c:fa:38:91:db:2a:d8:de:0d:87:a6:d6:af:3d:
26:3a:80:1c:02:18:c5:75:cd:e1:fb:92:29:60:86:
cc:2c:6d:ba:53:dd:12:d7:9d:9a:c4:40:a1:c0:db:
bd:52:e7:52:cc:2f:a4:3f:c8:da:a5:9a:6d:48:d5:
4e:bd:a2:3b:4d:62:41:21:b1:15:58:bc:af:33:d1:
35:5f:6b:13:7a:2d:47:aa:a9:69:01:b2:67:6c:d6:
d1:e6:3a:c6:51:dd:ca:67:34:9e:cf:f2:3f:81:23:
5d:5a:0a:fa:f2:a6:38:77:51:9d:4d:fd:69:03:4d:
6e:f3:a9:60:08:57:e9:36:3d:c1:bd:ac:c5:b6:a7:
ad:6a:12:0b:94:64:19:ee:ad:52:47:53:5b:4e:69:
82:2d:b6:b8:8c:cc:49:71:54:73:84:61:ef:98:e3:
aa:5a:60:88:cc:d4:bf:b9:7f:f7:bc:1d:80:97:82:
8f:c8:6d:cb:81:3f:47:42:f2:07:0b:0a:12:f2:34:
c8:51:2b:98:8d:29:ab:43:09:2d:10:2c:42:11:c5:
f4:b2:07:ac:3b:81:7e:3d:e3:71:08:7b:29:dc:fa:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9E:55:33:F6:E8:FD:4F:26:A2:93:31:7E:B6:90:C1:9C:09:12:8A
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/nZ5VM_bo_U8mopMxfraQwZwJEoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.127.0/24
91.238.107.0/24
193.110.146.0/24
193.138.90.0/24
194.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b0:de:ad:6f:12:ff:3f:f8:c8:6c:27:0e:57:97:48:74:ee:
5c:4e:ed:a4:28:2f:e3:e3:82:0b:3d:dc:53:44:9a:f9:b1:e9:
93:ba:3e:21:a5:de:76:4e:d9:91:6f:21:68:84:d1:1c:67:7f:
14:cd:59:70:56:c1:80:24:c5:ad:72:89:3e:c9:d8:25:a9:e8:
19:93:93:30:c8:0c:f6:f4:eb:91:aa:d6:1e:e2:1f:c2:16:e1:
a7:a4:04:fb:8a:b1:aa:c4:95:e9:7f:63:b1:54:a1:dd:5a:93:
4a:bb:94:bc:50:e0:46:32:bf:6c:46:dd:13:10:b4:30:d7:be:
08:c0:5a:60:a9:40:d4:30:ee:52:54:5e:c0:c4:0f:23:40:ff:
25:86:f7:dd:69:d5:ea:ec:2d:a0:97:15:a8:0f:7a:d7:0c:b6:
da:cf:39:bd:5b:67:4e:74:70:db:2f:a4:cc:25:d6:c2:25:3a:
aa:c2:b4:eb:f7:43:0b:7b:3c:db:f9:bd:45:0d:0d:b9:bf:4e:
db:31:12:00:df:6e:b8:aa:d1:01:81:fc:c7:82:2f:6e:d5:84:
e2:7d:89:12:44:28:56:48:f7:c1:d4:51:a2:89:68:9b:40:f6:
87:a5:67:71:69:59:83:32:6c:b5:b8:f3:d5:8e:32:78:6d:1f:
d8:c4:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:19 2024 by rpki-client on console.sobornost.net