Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/NPrB3VqfC0QqfZlfVcFCWjBug8U.roa
File: NPrB3VqfC0QqfZlfVcFCWjBug8U.roa (raw, json)
Hash identifier: RkthPg/geHa6VmqTKMsq1WdU2s59YdX4qPUe+del0YA=
Subject key identifier: 34:FA:C1:DD:5A:9F:0B:44:2A:7D:99:5F:55:C1:42:5A:30:6E:83:C5
Certificate issuer: /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial: 0616D0BB
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/NPrB3VqfC0QqfZlfVcFCWjBug8U.roa
Signing time: Sat 01 Jan 2022 08:54:30 +0000
ROA not before: Sat 01 Jan 2022 08:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 91.217.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102158523 (0x616d0bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Validity
Not Before: Jan 1 08:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34fac1dd5a9f0b442a7d995f55c1425a306e83c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:e6:c6:69:41:1a:f5:d0:78:56:f1:c6:01:
98:f0:a6:4c:01:94:af:ed:62:b1:1a:ff:d0:fd:c3:
f1:65:dd:70:28:f7:bc:59:ac:c4:41:ae:cf:9b:f2:
7d:1d:52:82:66:a4:56:03:01:86:e1:90:ea:6d:af:
e5:5d:f9:1d:80:b4:83:42:0d:b7:98:db:c8:53:4e:
ad:19:a8:ad:71:d9:d1:0b:32:53:a9:63:f8:33:a3:
75:99:de:44:db:03:18:da:a9:65:8c:8e:f0:5a:0b:
35:25:3b:6b:61:19:9c:8b:8d:c1:a5:cf:b5:f5:14:
3f:bb:ae:3f:02:71:e7:87:14:32:90:8e:57:e6:34:
23:19:e1:95:52:fd:2c:3d:9d:8e:ff:5a:47:e6:61:
9e:88:63:23:92:61:d0:41:64:93:44:f3:43:85:3a:
9b:7f:71:75:93:aa:1a:d6:e0:ba:c7:b2:fb:8d:c4:
ad:2a:09:b6:0b:d9:93:91:78:9e:82:ed:84:94:58:
f1:ca:3e:6a:fa:3c:de:90:87:c3:71:39:1c:88:d9:
73:57:c0:77:4d:c0:ad:a7:d4:af:92:d4:14:8b:cc:
d6:56:99:35:0f:af:66:60:38:71:31:7f:d2:e3:d7:
6e:02:c3:19:21:7e:eb:36:54:b6:75:6b:ad:2d:c0:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:C1:DD:5A:9F:0B:44:2A:7D:99:5F:55:C1:42:5A:30:6E:83:C5
X509v3 Authority Key Identifier:
keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/NPrB3VqfC0QqfZlfVcFCWjBug8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.72.0/24
Signature Algorithm: sha256WithRSAEncryption
71:22:2f:1c:19:b1:e9:a3:0e:f4:ef:bf:f9:02:28:78:fa:a9:
ba:a9:0d:05:76:ac:9a:95:51:13:ec:76:78:96:5d:28:0f:c8:
0f:23:0e:5d:96:42:65:cf:74:be:8c:9b:af:40:cd:7b:f8:be:
46:14:f6:8f:97:49:0a:e9:e4:10:b9:85:2a:bd:1c:8f:28:5f:
31:57:58:de:28:16:74:63:22:39:11:d3:5d:a9:1c:d6:6d:05:
ed:94:6d:4e:f3:8c:05:38:7a:81:f3:5a:27:6b:49:8d:34:32:
11:9a:e1:57:8b:97:ad:92:7d:d4:dd:ce:64:16:e8:c5:09:75:
c9:18:d3:50:26:c3:66:77:19:34:18:8a:77:a2:46:06:36:8b:
ac:fa:47:80:29:3c:3e:65:ea:ea:c1:a9:6c:bd:f4:ef:a9:54:
a8:70:07:8a:62:e5:96:b1:c3:ce:52:c9:0c:b0:1d:5d:d1:3c:
97:de:57:c3:58:6b:d2:6a:80:14:48:3a:9f:d5:ae:0a:12:41:
e9:2b:7e:09:ad:4b:ee:fa:7f:24:e8:ef:e5:c1:65:d3:83:7c:
54:a3:0e:2b:23:98:71:d4:f7:be:7c:81:44:af:52:b0:94:c6:
d6:60:8c:de:b1:64:7d:af:97:bd:14:6f:32:cd:7c:d6:7b:43:
51:61:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net