Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/J9CCWku8OI20MAC0A_YOn61A2pA.roa
File: J9CCWku8OI20MAC0A_YOn61A2pA.roa (raw, json)
Hash identifier: IvTDuxYkZuKCo7rRNqlwsaRLyPd8uWFdjqidlQ2M0kI=
Subject key identifier: 27:D0:82:5A:4B:BC:38:8D:B4:30:00:B4:03:F6:0E:9F:AD:40:DA:90
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 0190496FAF59ABD1C9F7D36F450CECC4B0B4
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/J9CCWku8OI20MAC0A_YOn61A2pA.roa
Signing time: Mon 24 Jun 2024 08:49:34 +0000
ROA not before: Mon 24 Jun 2024 08:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59439
IP address blocks: 91.240.178.0/24 maxlen: 24
185.168.52.0/22 maxlen: 24
2a0d:c0c0:3e1::/48 maxlen: 48
2a0d:c0c0:4e1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:6f:af:59:ab:d1:c9:f7:d3:6f:45:0c:ec:c4:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Jun 24 08:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27d0825a4bbc388db43000b403f60e9fad40da90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:96:39:f0:49:0c:cf:1b:05:55:66:ef:78:
03:51:88:e7:a5:27:e5:a4:dd:cd:11:08:ae:4f:f4:
bf:47:0f:4a:95:55:cb:db:8f:b8:2e:97:9d:64:06:
be:51:e5:e3:ce:54:a6:b1:af:6d:65:65:e5:2d:51:
56:b1:ec:22:ff:21:89:21:08:87:d1:81:7f:8b:66:
e1:96:bd:22:d9:0d:1c:09:52:3b:9d:7c:dd:03:a0:
0c:34:72:35:c4:d0:cc:b3:b4:63:c7:93:86:1c:e6:
da:27:f0:49:89:cf:58:23:5c:0e:69:0c:5d:d9:6c:
52:35:cc:47:eb:84:e8:44:c7:cd:df:02:7a:4a:76:
21:61:6c:46:2b:69:c6:0a:26:2a:6e:11:87:0e:ec:
30:cc:22:0d:ad:12:55:58:41:ca:8b:75:5d:c8:b1:
3a:24:b1:7f:f8:10:0d:05:65:e0:c0:e8:ac:d2:40:
3f:20:2a:b3:bc:43:0d:ee:f7:48:2a:b6:47:98:f1:
99:54:84:54:2d:9e:a8:04:6e:e0:8e:ab:d5:8f:ce:
0d:b7:c6:b3:10:4f:57:33:52:b8:67:94:5d:af:14:
cd:07:99:9b:3c:11:17:de:78:ac:7e:66:ff:12:0b:
56:62:4b:53:76:0a:f7:f9:b3:36:9e:58:de:26:bd:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:82:5A:4B:BC:38:8D:B4:30:00:B4:03:F6:0E:9F:AD:40:DA:90
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/J9CCWku8OI20MAC0A_YOn61A2pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.178.0/24
185.168.52.0/22
IPv6:
2a0d:c0c0:3e1::/48
2a0d:c0c0:4e1::/48
Signature Algorithm: sha256WithRSAEncryption
4f:6d:c4:2d:ef:c1:a0:eb:f2:2a:82:2a:04:52:8e:ba:df:95:
c1:00:06:74:42:14:b7:7d:de:fb:08:73:d4:00:af:93:1b:37:
a7:ad:0e:15:b7:87:99:6b:de:2e:27:9b:6e:d3:cc:62:34:8b:
9e:45:24:7a:e2:b9:f7:81:e7:81:33:11:d0:a4:c4:fe:8f:9a:
c5:89:d3:c5:01:95:57:c8:ed:fb:1f:75:11:c7:67:ca:ea:e5:
97:d5:ae:14:1e:51:6d:e0:c8:8e:35:96:79:03:7a:14:e6:ce:
4e:16:73:ac:5c:51:94:6e:ff:41:04:0d:52:29:82:75:55:19:
1b:d6:06:f4:26:5d:76:27:ea:8e:c0:d5:5d:3b:9c:3d:c0:42:
ca:7a:10:bb:32:1c:f7:e7:2e:04:0a:f9:61:9a:55:60:ed:37:
6f:a2:74:1a:43:02:99:67:d9:1f:ab:d2:e8:d1:52:c2:42:a2:
c4:15:67:04:8a:ab:06:e0:4a:93:68:ce:be:74:c5:42:9f:7f:
2f:9a:b4:3f:6f:d3:24:17:0d:83:84:98:0f:b4:57:01:ec:14:
95:f7:24:3a:6a:df:19:4c:79:4b:7a:15:f0:91:ac:f3:e2:c5:
6c:b3:c0:6a:32:63:7c:8e:7c:cc:3d:57:3b:3a:23:b8:6b:19:
ff:2d:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:07:23 2024 by rpki-client on console.sobornost.net