Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/Vxi_Q7z-hnvx8TgwZJTaFXq_bJQ.roa
File: Vxi_Q7z-hnvx8TgwZJTaFXq_bJQ.roa (raw, json)
Hash identifier: 0V1XrC6jyK2u4wqvcMNgdb6ZdKXhTNTFREb/JVm/sEM=
Subject key identifier: 57:18:BF:43:BC:FE:86:7B:F1:F1:38:30:64:94:DA:15:7A:BF:6C:94
Certificate issuer: /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial: 061618A0
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/Vxi_Q7z-hnvx8TgwZJTaFXq_bJQ.roa
Signing time: Sat 01 Jan 2022 08:54:30 +0000
ROA not before: Sat 01 Jan 2022 08:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197706
IP address blocks: 81.21.232.0/24 maxlen: 24
91.217.73.0/24 maxlen: 24
81.21.235.0/24 maxlen: 24
91.217.7.0/24 maxlen: 24
91.217.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102111392 (0x61618a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Validity
Not Before: Jan 1 08:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5718bf43bcfe867bf1f138306494da157abf6c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:d4:1f:ac:3d:0f:eb:8f:f2:4a:14:3b:10:
4e:8c:03:10:d6:9f:23:b3:77:9a:da:32:d9:ca:74:
c5:f3:50:90:87:60:5c:dc:7d:06:4b:4f:fc:7c:0b:
0f:b3:ab:9e:c3:2e:dd:44:3b:bc:3f:a0:6b:44:03:
55:97:45:52:15:22:88:92:f9:e6:e7:9c:32:6a:03:
92:51:ce:ca:0e:e5:7d:f0:39:16:2d:ad:7d:86:15:
e1:bc:e2:9d:ff:e5:e2:ab:eb:1c:4c:bb:25:f9:f1:
d8:e3:e5:bd:f6:46:75:b4:71:7a:9f:6a:68:fa:3d:
d6:6a:6d:87:55:35:7f:34:6a:15:ae:c9:c0:58:80:
b7:d8:2e:e0:bc:97:8f:7d:1a:31:5a:c3:26:42:36:
b4:e3:d6:fe:65:6e:0b:2a:3d:dd:d5:d8:3f:10:9b:
f5:83:1b:f3:64:3f:06:88:74:63:66:89:f6:48:3f:
90:68:81:00:8d:25:02:ff:fe:4c:76:de:d1:5c:72:
ef:0c:68:d5:de:bb:6d:d2:ff:c3:2e:51:df:81:77:
9f:ff:91:17:06:28:d7:79:e1:6f:45:99:34:cf:1d:
aa:7c:5c:03:a0:9a:b4:56:b2:2a:1f:80:bf:a5:85:
cd:c0:22:2d:5e:10:9a:13:ca:b3:e7:ac:23:d5:ee:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:BF:43:BC:FE:86:7B:F1:F1:38:30:64:94:DA:15:7A:BF:6C:94
X509v3 Authority Key Identifier:
keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/Vxi_Q7z-hnvx8TgwZJTaFXq_bJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.232.0/24
81.21.235.0/24
91.217.6.0/23
91.217.73.0/24
Signature Algorithm: sha256WithRSAEncryption
83:99:03:40:42:9d:03:09:a3:4c:01:f0:21:bc:15:84:6e:a4:
73:1e:09:91:3d:b1:c0:4d:5b:dd:2a:4a:c2:1a:ac:23:c4:e4:
01:11:d6:31:2d:6a:3b:ba:ac:26:a4:dd:bf:a0:a9:2e:66:59:
74:10:a5:23:1a:f1:20:5d:0b:b5:b6:ef:81:db:7e:16:2d:69:
e7:d5:75:4e:9a:20:51:d4:60:59:94:c9:3c:8c:f3:1d:55:a3:
b1:99:0a:c1:6c:28:f4:2e:06:79:97:27:6b:e1:f8:29:b5:25:
5a:4c:19:cf:72:28:a6:91:22:2e:ee:ba:b1:72:ca:80:67:59:
b6:cb:98:f8:dd:f7:6a:a6:6b:1b:e9:09:ef:bd:ea:fe:d1:c6:
45:64:9b:d4:7b:8a:0a:12:dc:29:ec:b1:03:61:d9:c1:a8:a7:
d8:6d:18:46:92:ac:41:ab:c8:d4:be:45:b9:e4:be:8e:a1:ea:
9d:e0:eb:e2:f5:b7:47:2c:82:d9:3b:49:6c:58:b1:50:8a:7c:
e0:8a:93:c6:25:ab:a2:d7:19:61:20:3d:1a:2e:23:c5:32:56:
d8:ff:6c:fa:7c:ff:05:6e:b3:a0:9e:71:8b:ec:41:da:41:0f:
03:d6:40:e0:26:0a:15:76:8e:76:0a:68:c2:df:12:3b:3c:8e:
f5:0c:c8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net