Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/jSKbm_q5VpeqGXNRBH7PIRZAlFw.roa
File: jSKbm_q5VpeqGXNRBH7PIRZAlFw.roa (raw, json)
Hash identifier: QVCWTyK6xBfGyF2GBYqJwBqGvBHo7Ne9EbVPpJNkS8Q=
Subject key identifier: 8D:22:9B:9B:FA:B9:56:97:AA:19:73:51:04:7E:CF:21:16:40:94:5C
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 0193DF0CE30013332AFBDBF69104D329B535
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/jSKbm_q5VpeqGXNRBH7PIRZAlFw.roa
Signing time: Thu 19 Dec 2024 13:13:03 +0000
ROA not before: Thu 19 Dec 2024 13:13:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213692
IP address blocks: 91.238.195.0/24 maxlen: 24
2a13:dc80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:0c:e3:00:13:33:2a:fb:db:f6:91:04:d3:29:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Dec 19 13:13:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d229b9bfab95697aa197351047ecf211640945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:91:dc:87:2a:69:1d:64:a1:cb:de:95:61:
58:b0:03:08:c4:e3:42:d5:0e:7d:6f:d6:62:b4:a2:
f2:73:78:45:09:b0:3b:c4:0c:b4:d7:38:40:11:96:
4b:5c:d4:9f:49:63:e6:d5:21:fd:0f:f7:25:d9:84:
07:a2:e7:29:14:4d:15:3a:72:39:55:71:3e:87:d1:
d4:44:ec:6c:d1:55:e0:94:56:dd:6e:b3:88:b6:92:
b8:d7:e8:61:f3:b6:8a:f7:cc:8b:3a:51:f9:61:9e:
57:56:35:72:57:2a:61:30:1a:b0:20:06:ee:79:bd:
76:b6:94:57:d6:8a:ea:88:b4:5a:bd:38:86:56:98:
4e:a0:9e:52:35:08:ec:91:3d:6b:02:66:5b:89:75:
7f:3e:15:38:dc:8f:35:5d:3f:a9:0f:60:ab:f7:dd:
6d:00:e5:e4:4c:90:08:31:c9:20:ff:aa:55:06:35:
a4:00:03:8a:6c:c1:f7:92:63:28:4d:d6:bb:f9:65:
54:4f:5e:22:13:f5:9d:9e:77:2e:ce:39:35:6f:0a:
7e:36:3b:78:2e:67:e6:30:6f:53:ca:c2:92:44:5a:
3c:c7:d0:99:27:a1:0a:a9:1f:1a:88:36:44:58:42:
eb:76:7f:26:07:7c:ae:24:a1:96:4b:fe:e2:2e:d0:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:22:9B:9B:FA:B9:56:97:AA:19:73:51:04:7E:CF:21:16:40:94:5C
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/jSKbm_q5VpeqGXNRBH7PIRZAlFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.195.0/24
IPv6:
2a13:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
a6:6a:cc:21:25:ce:a3:74:1e:d7:85:97:15:70:86:39:a4:99:
9f:b6:04:89:b1:ae:80:b0:06:36:c9:55:22:45:71:5a:98:58:
cc:0b:47:47:33:9c:4d:c6:2b:15:3b:dc:32:eb:de:b8:cc:af:
76:b0:d4:50:3b:70:ef:7a:a7:28:02:02:80:5a:c2:eb:6b:29:
bf:67:49:56:5d:30:05:2a:9d:f4:5d:42:2e:31:59:1f:0e:95:
13:4d:04:9c:3b:96:cf:f4:76:a9:43:36:9f:ad:e5:7d:ff:ab:
0b:35:04:9a:0e:c7:4c:c4:4f:c2:b4:ac:b6:f7:2b:73:15:4e:
63:0b:a3:05:4d:78:5c:08:f4:6e:5a:be:72:ae:d6:b5:d7:61:
a2:f6:15:2d:85:72:ee:6e:6a:48:f1:a6:7e:d1:3e:7d:12:af:
5f:f5:b0:a1:c8:11:0b:87:68:38:43:3f:fd:9b:8a:20:b9:59:
b7:50:6f:dc:bb:93:e3:92:70:2c:3b:d2:5a:db:e3:0c:86:e4:
b8:04:6a:a8:b0:0b:83:0e:24:21:cc:43:ef:ef:c5:7e:b6:f8:
17:ba:2a:7f:ac:7a:0e:77:14:b2:a1:93:57:b2:d9:5b:b1:fa:
d6:67:72:c6:7a:ea:57:3c:53:32:df:84:ba:a3:3e:b1:ac:0c:
dc:30:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:46 2024 by rpki-client on console.sobornost.net