Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/YGiGpKMjp2VIjFIJLCkxfa9BJcM.roa
File: YGiGpKMjp2VIjFIJLCkxfa9BJcM.roa (raw, json)
Hash identifier: 8aT4LET8dMPwweceUph7MLQL4nPMARBB9N0FhnZZBCY=
Subject key identifier: 60:68:86:A4:A3:23:A7:65:48:8C:52:09:2C:29:31:7D:AF:41:25:C3
Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial: 01937288616C97636CA0F8C75FBDF112E86F
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/YGiGpKMjp2VIjFIJLCkxfa9BJcM.roa
Signing time: Thu 28 Nov 2024 11:29:20 +0000
ROA not before: Thu 28 Nov 2024 11:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197198
IP address blocks: 91.216.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:88:61:6c:97:63:6c:a0:f8:c7:5f:bd:f1:12:e8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Validity
Not Before: Nov 28 11:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=606886a4a323a765488c52092c29317daf4125c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:1a:d3:d6:7c:72:7e:fc:f7:3c:9e:21:c7:
74:e5:22:d9:56:dc:f6:78:1d:cd:b9:dc:97:fa:a6:
f4:f6:c1:87:ce:b6:f2:89:4d:aa:6e:9d:79:38:6c:
1c:e2:dd:f1:ec:7f:08:b0:6e:c6:0c:d2:19:61:ee:
f5:66:c5:54:4a:01:83:f4:07:cd:2d:48:25:eb:44:
95:a2:c9:48:ba:b5:94:81:db:b8:66:c7:00:58:7c:
ae:a5:17:65:01:0e:46:34:0c:cf:5f:f1:05:3c:f5:
72:ac:45:17:61:14:ae:bc:6b:ab:eb:e8:28:b8:67:
ce:d8:1f:cb:d6:d2:20:fb:da:53:04:9a:31:14:8f:
4a:6d:5b:a5:ef:3f:c9:03:07:b9:2e:fa:e0:90:68:
3c:74:af:f5:a2:13:c5:79:cb:f5:c2:55:22:a5:d8:
63:a3:4d:37:e5:31:a7:ce:e0:41:30:2c:d2:7b:89:
04:8b:c1:2a:e7:06:9e:7a:c7:88:3c:e3:11:e1:6c:
c1:8b:95:e1:21:a9:31:55:8b:2c:8d:f0:05:a2:76:
3a:71:1c:74:e4:22:7c:f1:40:a0:65:6b:06:6c:21:
b8:3e:fc:47:88:8e:2b:f3:ae:39:01:30:3d:0f:4d:
b2:b7:17:d8:a9:8b:35:dc:f3:69:61:db:f9:08:57:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:68:86:A4:A3:23:A7:65:48:8C:52:09:2C:29:31:7D:AF:41:25:C3
X509v3 Authority Key Identifier:
keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/YGiGpKMjp2VIjFIJLCkxfa9BJcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3f:b0:5a:31:92:c7:7c:56:e3:49:81:46:70:38:d9:9b:db:
7a:f0:65:b6:fd:ff:e5:3c:90:87:89:7d:72:1d:04:57:35:bd:
eb:be:03:e0:5a:a8:6b:72:00:00:f1:ba:00:61:29:ec:13:3e:
9f:54:51:c3:44:42:36:b7:df:95:0c:46:39:f6:5d:28:96:a0:
67:3d:53:46:24:e0:79:13:3d:3e:32:1a:81:e2:38:0b:b0:d4:
7b:b3:68:aa:41:e3:77:48:ee:3f:af:db:3f:db:84:90:84:2c:
08:2e:8d:13:6a:50:76:df:5f:df:15:9d:26:fc:f3:8e:82:ee:
df:15:8d:ec:3c:de:8d:74:e6:bb:41:bd:57:e9:3b:bb:c5:46:
8a:97:ed:80:96:c7:45:21:ff:0c:87:fd:02:e7:1a:9e:18:a6:
14:88:fa:c7:da:4c:3d:d4:7c:53:5b:9f:a1:06:2d:44:15:17:
75:a9:78:1c:55:4e:ba:64:a6:b1:f9:fa:b8:28:c9:bf:96:3c:
8e:7a:a4:d9:b7:7a:f6:9b:17:49:f4:b5:10:4a:b3:1b:82:a5:
33:f3:a0:df:9d:42:61:9f:57:ce:ed:fa:70:74:5e:de:b1:da:
a6:bd:fa:6a:22:86:06:c7:eb:8e:7e:70:6c:1b:4d:83:1b:68:
2d:09:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:28 2024 by rpki-client on console.sobornost.net