Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/lO8C3Pk_bdq6lRUiaHOVlNH8gew.roa
File: lO8C3Pk_bdq6lRUiaHOVlNH8gew.roa (raw, json)
Hash identifier: WhgBdJ1BR2MZN0jFV+fJ/FC+IwaDp4RICmofSNMy354=
Subject key identifier: 94:EF:02:DC:F9:3F:6D:DA:BA:95:15:22:68:73:95:94:D1:FC:81:EC
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 01939B716E0ADCF34ABD45506E476567D92B
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/lO8C3Pk_bdq6lRUiaHOVlNH8gew.roa
Signing time: Fri 06 Dec 2024 10:08:42 +0000
ROA not before: Fri 06 Dec 2024 10:08:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211796
IP address blocks: 91.188.248.0/24 maxlen: 24
91.188.249.0/24 maxlen: 24
91.202.244.0/24 maxlen: 24
2a0c:6ec0:1::/48 maxlen: 48
2a0c:6ec0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:71:6e:0a:dc:f3:4a:bd:45:50:6e:47:65:67:d9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Dec 6 10:08:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94ef02dcf93f6ddaba95152268739594d1fc81ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:68:1b:1e:a5:f7:87:4c:e6:c6:91:2e:eb:
64:af:3d:e5:fe:9e:7d:3b:47:9a:c4:76:b3:ac:5a:
99:7c:53:76:67:04:6b:45:f8:e9:74:57:29:11:17:
b5:5e:a6:f5:25:9f:95:0d:41:c0:54:64:da:97:63:
1d:7f:23:50:bc:4d:3e:27:1f:9c:f2:84:4d:e3:a6:
f0:be:e9:89:53:e4:0b:9f:36:b9:69:be:45:7e:1a:
ad:54:4c:13:2d:0e:80:91:bc:5e:e3:28:0b:d2:19:
a9:d6:c9:9b:61:7d:03:e0:ac:b3:18:75:b0:5a:16:
72:d7:fe:0d:77:8f:fb:21:91:df:92:49:0a:67:c0:
45:ec:96:d1:b8:4c:49:70:ce:63:4a:a0:df:99:f7:
ed:63:91:47:c3:10:8a:34:3f:a2:40:0e:3b:d8:96:
4c:64:45:56:9b:b8:2e:a5:5f:3d:c4:31:1b:98:21:
eb:c8:e9:b9:60:a2:bd:8e:98:aa:7f:b6:6c:0c:e5:
d0:bb:da:a2:8a:5f:01:65:ea:84:52:68:3f:45:3f:
51:09:f3:70:14:d5:a7:e0:78:6d:c7:0d:d0:03:f1:
4b:6c:a3:23:a5:c5:39:f9:5a:ff:02:09:97:f6:a7:
f9:49:1e:47:06:33:da:80:29:d2:6d:41:1e:01:73:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:02:DC:F9:3F:6D:DA:BA:95:15:22:68:73:95:94:D1:FC:81:EC
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/lO8C3Pk_bdq6lRUiaHOVlNH8gew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.248.0/23
91.202.244.0/24
IPv6:
2a0c:6ec0:1::-2a0c:6ec0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
df:39:0a:2b:14:c6:b5:91:b9:f6:82:69:60:28:39:18:54:e0:
a7:df:dd:c9:01:59:ff:0e:bf:32:e0:28:ed:4f:a2:95:9a:f0:
d4:d3:57:86:98:7e:59:ae:84:ef:33:7b:aa:5d:c7:44:f4:16:
32:8b:88:af:fd:35:77:63:31:09:c6:74:21:13:47:b0:58:92:
ce:e8:b5:1d:43:67:a0:92:c2:6b:4d:56:09:58:7c:f8:95:40:
11:f6:82:b3:45:d5:da:a7:ff:f2:53:10:65:37:11:74:a5:54:
c0:0f:d6:55:b2:49:e3:b8:de:02:e5:14:72:d2:a0:83:bf:e1:
ec:be:3e:93:16:fe:26:2a:57:e5:ad:0f:c8:f5:54:2c:40:91:
e6:54:0f:c4:9a:13:26:d2:80:4c:9b:b3:7f:3c:9c:ab:07:e0:
11:b3:ff:2b:dc:b5:a1:7a:9d:33:47:88:df:83:f4:1e:a0:9e:
75:98:0f:3f:d7:7d:ae:72:c8:a9:e4:89:0a:ee:35:9d:67:0b:
cc:87:f8:10:d3:1c:71:1e:c5:21:d1:6a:45:e3:fb:66:ac:aa:
72:eb:da:8d:41:4c:c7:d0:fa:9e:20:26:e3:b8:96:72:6c:13:
04:ce:8d:6a:56:1e:1e:7a:7a:1d:0b:64:cd:3f:ab:e2:a8:7c:
a3:fc:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:22 2024 by rpki-client on console.sobornost.net