Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/5Z7mDtpPorxK_WFoWWn4Fg4kQEI.roa
File: 5Z7mDtpPorxK_WFoWWn4Fg4kQEI.roa (raw, json)
Hash identifier: pC15ZpLugxExTLoiBYzT7zPRycDb7LilpZ5faMe3te4=
Subject key identifier: E5:9E:E6:0E:DA:4F:A2:BC:4A:FD:61:68:59:69:F8:16:0E:24:40:42
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 0193F618DECEFAC4E36AFF458679E5CA50B5
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/5Z7mDtpPorxK_WFoWWn4Fg4kQEI.roa
Signing time: Tue 24 Dec 2024 00:37:25 +0000
ROA not before: Tue 24 Dec 2024 00:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62290
IP address blocks: 91.193.54.0/24 maxlen: 24
185.24.116.0/22 maxlen: 22
185.24.116.0/23 maxlen: 23
185.173.212.0/22 maxlen: 22
212.102.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f6:18:de:ce:fa:c4:e3:6a:ff:45:86:79:e5:ca:50:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Dec 24 00:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e59ee60eda4fa2bc4afd61685969f8160e244042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:7a:2b:06:ad:dd:fd:91:3d:66:70:5f:c2:
45:3a:6b:4b:16:0d:54:b2:ac:67:15:9e:d1:05:69:
a7:15:3b:20:ca:9d:cd:2f:9f:a1:db:3d:6f:af:ac:
86:09:62:c6:a6:e0:40:f5:07:d4:90:ca:ca:b7:ac:
64:d6:d7:bb:c0:2e:8a:79:3e:86:52:d3:f1:17:2f:
e6:60:3b:ac:3b:86:93:04:85:8b:b1:3d:f5:bf:94:
b1:7b:0e:92:bf:5b:7d:c4:28:5b:a7:78:c0:a0:96:
1c:c8:50:45:fe:00:88:0c:cd:0f:be:bc:f3:c2:3a:
e1:8a:d2:57:25:61:a1:06:d9:9d:77:ff:bb:58:04:
13:7e:b8:19:ad:ac:d5:44:7d:1f:ee:d8:58:27:e2:
b2:ef:1c:53:ac:6a:8a:70:1b:be:5f:91:b9:84:78:
cf:8b:1e:66:27:f2:50:52:ce:81:47:c2:df:26:af:
85:42:84:23:bd:4f:95:b0:c2:3d:a4:65:47:1b:b6:
f8:2a:29:2a:e0:5f:19:7a:b0:bc:c9:92:f0:82:9c:
48:af:33:a9:1b:4c:3a:a7:b7:4c:d9:b1:0b:9d:84:
16:6b:97:2d:01:e1:62:8a:6b:84:a2:6b:64:bb:c0:
e0:d3:0f:4e:39:fa:9d:ef:c1:4c:12:40:e3:d1:d5:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9E:E6:0E:DA:4F:A2:BC:4A:FD:61:68:59:69:F8:16:0E:24:40:42
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/5Z7mDtpPorxK_WFoWWn4Fg4kQEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.54.0/24
185.24.116.0/22
185.173.212.0/22
212.102.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:72:0a:53:75:e4:24:48:ef:7e:40:d0:8e:6f:46:91:1b:e6:
56:21:3d:57:1b:72:71:96:73:32:44:97:97:1c:52:40:68:f0:
49:be:4e:c0:7a:71:2a:69:3f:99:62:be:8b:7c:f8:6f:57:08:
5e:ed:14:2e:83:f1:f5:ae:7b:ca:57:4a:61:05:31:95:c1:38:
ff:68:8b:11:f1:bc:d6:b4:89:ee:bc:14:48:e2:c6:98:3d:4b:
cd:06:78:f7:24:15:01:16:14:7b:8f:aa:06:6b:c4:66:e1:8d:
cf:3c:b4:0b:d4:64:71:fa:c5:06:8c:32:f7:b4:0a:6c:f2:46:
ac:7b:ec:3c:2d:36:c0:a0:14:a5:8f:78:d4:e3:e3:07:b1:bb:
ad:43:0d:b0:e8:37:c0:b9:8c:cf:dd:7c:81:34:00:a0:e5:15:
83:39:28:99:06:bb:d1:c1:bb:cb:2c:60:bc:28:60:b3:59:dd:
53:a1:4a:04:1e:16:a8:a6:1f:1f:0c:10:ad:b5:da:f0:5f:0d:
2d:97:97:1b:06:d7:ad:05:b6:1e:7a:3d:fe:1c:d7:e6:a0:d0:
b1:60:47:66:4c:a3:70:46:d1:f5:40:44:54:cc:d5:aa:13:37:
64:cd:7b:87:63:2a:9f:0e:b2:25:37:b3:0d:89:6d:72:4e:35:
b8:2e:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:46 2024 by rpki-client on console.sobornost.net