Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/vW4vMOOWPFOLsyBltqK7jj0Sg5U.roa
File: vW4vMOOWPFOLsyBltqK7jj0Sg5U.roa (raw, json)
Hash identifier: Pp6faF8/h0D5RFiGe4tr1HXCPNvcrsBiYfttv2xEPA0=
Subject key identifier: BD:6E:2F:30:E3:96:3C:53:8B:B3:20:65:B6:A2:BB:8E:3D:12:83:95
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 01936971DE1F41A98A995D1ACAA247DD09A3
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/vW4vMOOWPFOLsyBltqK7jj0Sg5U.roa
Signing time: Tue 26 Nov 2024 17:08:10 +0000
ROA not before: Tue 26 Nov 2024 17:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201384
IP address blocks: 85.91.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:71:de:1f:41:a9:8a:99:5d:1a:ca:a2:47:dd:09:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Nov 26 17:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd6e2f30e3963c538bb32065b6a2bb8e3d128395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:82:94:18:8a:70:64:da:74:d1:93:1b:1a:
f2:85:36:22:ac:c5:7b:09:16:77:d9:45:77:2e:5a:
92:bf:95:a5:87:0c:16:e9:d8:c3:fb:dc:05:23:23:
7b:a2:02:e6:c9:47:2e:36:bb:ef:13:a0:7c:bc:c4:
94:1c:25:30:9e:0e:c2:7f:e6:eb:62:0b:ef:fe:de:
1e:4f:68:96:93:a1:e7:1f:2f:9d:b7:1c:09:31:34:
d2:9d:7f:68:61:a6:b7:03:73:fc:45:f8:8f:10:76:
13:de:33:a2:9b:40:12:38:73:a4:92:02:ce:7b:16:
32:07:14:1d:ad:e8:d3:52:d8:95:bb:aa:7e:96:18:
2a:b8:81:92:cf:fc:c9:58:fa:50:fe:71:43:ac:4a:
16:6f:85:29:bb:ad:0b:21:70:d9:e1:1c:4e:af:9c:
8d:00:2a:9c:72:d8:ce:e2:12:94:2f:85:49:2a:9a:
82:6b:5f:be:1e:39:94:ad:f8:0b:c1:5f:76:a1:52:
f7:99:b3:52:99:68:14:a7:5e:e9:77:b4:78:30:0d:
fc:e4:c0:73:5d:ed:e8:52:d0:b6:4b:0e:58:fd:a8:
75:64:6e:78:7f:41:9b:7a:37:bb:5b:5f:27:e3:92:
f9:81:2c:e7:21:6c:10:11:14:92:dc:34:90:81:71:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:2F:30:E3:96:3C:53:8B:B3:20:65:B6:A2:BB:8E:3D:12:83:95
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/vW4vMOOWPFOLsyBltqK7jj0Sg5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.91.107.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4b:f2:bb:87:08:80:23:fe:dd:42:4a:a9:50:f5:f9:b6:73:
e6:f1:b6:7a:8b:ec:bb:10:93:10:d2:36:a8:6d:ce:ea:5b:fa:
dd:af:11:1b:31:15:b9:5f:a7:46:af:4d:15:3c:eb:23:81:db:
39:d1:3d:6d:2c:94:63:6f:81:36:60:a0:2d:31:e2:6a:9a:ba:
f3:c9:c1:70:2f:71:4c:2c:a2:7f:08:c4:f7:13:91:54:0a:4e:
85:f5:b6:0d:06:0d:a4:cd:31:94:e4:21:28:57:6e:c7:74:86:
36:da:4c:03:41:e4:06:54:6b:f0:42:a9:61:2e:d9:e2:65:79:
af:68:3a:02:7b:00:1d:d4:9d:19:3c:55:cc:bf:e7:c1:66:71:
dd:6d:30:48:0e:bd:6d:a8:9f:cc:ea:01:72:68:6d:1b:2d:22:
fb:b7:f7:b6:b4:29:6e:45:59:da:0e:5a:8f:b1:a2:2c:e4:8e:
dc:b7:bb:3e:19:80:53:6f:fc:00:05:40:f9:61:a2:e5:2b:f1:
b3:17:c6:55:d1:f6:83:32:23:58:02:57:c5:3f:f3:61:14:e2:
1a:23:60:03:77:04:f5:4e:0c:de:c8:42:dd:c6:73:29:2e:8c:
cc:1a:89:be:61:9c:d8:02:b6:91:30:1f:2a:f4:cf:15:7f:a9:
13:47:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:42 2024 by rpki-client on console.sobornost.net