Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/vWmNd0FW81Tp6Wx3y_iOaX8u_gU.roa
File: vWmNd0FW81Tp6Wx3y_iOaX8u_gU.roa (raw, json)
Hash identifier: ZYthEaXrgMw9BmWSd7buyvK8LaRXnO7Q9mZYXgIzl7k=
Subject key identifier: BD:69:8D:77:41:56:F3:54:E9:E9:6C:77:CB:F8:8E:69:7F:2E:FE:05
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 018ECCA3F4C32DF840957F4E17B999B572C0
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/vWmNd0FW81Tp6Wx3y_iOaX8u_gU.roa
Signing time: Thu 11 Apr 2024 10:11:20 +0000
ROA not before: Thu 11 Apr 2024 10:11:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196633
IP address blocks: 91.213.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:a3:f4:c3:2d:f8:40:95:7f:4e:17:b9:99:b5:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Apr 11 10:11:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd698d774156f354e9e96c77cbf88e697f2efe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:4c:62:af:0d:cd:42:77:3f:42:f2:35:20:
c1:59:05:29:9c:50:8e:fd:77:d1:61:77:f6:75:5e:
cd:8f:b3:13:f6:41:c0:36:71:53:76:0c:d1:df:28:
13:d0:e8:95:99:2a:d6:a7:89:3f:c5:df:82:74:da:
67:ed:28:02:e7:ab:06:00:64:d1:a4:6a:4a:f6:73:
60:60:56:f5:42:43:20:4a:c2:12:6c:c3:34:43:17:
26:3b:b5:84:52:29:dc:b0:f0:79:1a:75:f1:66:ea:
cc:21:31:84:0c:6b:7b:7c:b7:24:db:2a:07:ea:f4:
81:2c:43:61:06:90:97:48:ee:94:76:8e:88:6d:6d:
d4:74:9f:40:d8:0d:1c:b4:c1:8d:93:bf:88:64:28:
5f:d3:12:81:eb:ae:10:7c:1e:80:a0:23:26:0d:c6:
9d:c4:53:14:0a:ae:b1:62:c3:8a:4f:a2:d5:2f:42:
d7:2d:b4:2b:44:08:bf:19:34:ee:1a:c0:93:93:38:
6c:e2:1d:82:a5:99:3a:db:22:56:2f:ec:dc:05:34:
9e:a5:9d:a4:12:cc:55:44:0c:74:fb:43:37:b9:7e:
cb:b8:5f:09:2b:7e:55:b9:3d:ee:92:5b:22:86:09:
7e:d4:93:64:41:1e:a0:97:bf:c9:c6:e6:a5:bb:00:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:8D:77:41:56:F3:54:E9:E9:6C:77:CB:F8:8E:69:7F:2E:FE:05
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/vWmNd0FW81Tp6Wx3y_iOaX8u_gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.82.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a7:48:e2:38:a6:82:15:e5:b5:eb:10:aa:ac:35:c3:a9:dc:
7d:7e:d1:88:0f:2c:8b:c3:a0:17:7f:ec:b0:29:bf:c5:c3:52:
37:e8:44:fc:5c:30:a5:65:65:c1:32:fb:e7:dd:7d:0b:12:77:
69:19:5d:b3:5d:92:70:fb:85:d5:ac:85:02:fe:e7:0d:1f:b0:
f9:06:52:d5:9c:45:32:9a:fc:17:ea:34:ad:b6:49:a1:3b:1e:
91:2b:70:4e:7c:6b:23:dd:d5:f6:02:bb:ff:65:68:2f:ca:ff:
9a:22:9c:32:e4:66:c9:5a:b9:78:b2:6c:f8:0a:95:aa:ca:95:
d7:b1:84:b3:78:2b:62:31:42:ad:ab:31:62:d5:98:5b:19:bb:
d3:c2:c3:2d:1d:d7:9a:77:ce:89:0e:af:bf:52:97:78:7b:b5:
04:3f:a8:38:38:bc:04:37:b5:04:7f:d5:43:33:e9:da:62:0d:
b8:c3:6b:80:3c:16:81:f1:8e:f7:9e:37:b4:18:f1:56:9d:d6:
4b:1e:dd:8b:77:a6:bd:91:0c:04:69:77:6f:2f:68:4d:2d:97:
2c:da:9d:ab:f5:b1:bb:06:73:58:ae:f0:2d:a1:dc:74:68:5b:
e4:8d:1c:bd:62:eb:18:3d:07:40:93:14:f3:62:17:02:5c:ff:
f4:bb:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:45 2024 by rpki-client on console.sobornost.net