Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/gAxNSZrd0YvbOemI39Ko60ntBi4.roa
File: gAxNSZrd0YvbOemI39Ko60ntBi4.roa (raw, json)
Hash identifier: SvORWdPEgv3nDf2JXRiZIgvSS0KSZj9M3hE9nCKUgMQ=
Subject key identifier: 80:0C:4D:49:9A:DD:D1:8B:DB:39:E9:88:DF:D2:A8:EB:49:ED:06:2E
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 018CC8DF7AC234384DF5D06693BBA08B1CBD
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/gAxNSZrd0YvbOemI39Ko60ntBi4.roa
Signing time: Tue 02 Jan 2024 06:32:18 +0000
ROA not before: Tue 02 Jan 2024 06:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197679
IP address blocks: 91.224.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7a:c2:34:38:4d:f5:d0:66:93:bb:a0:8b:1c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=800c4d499addd18bdb39e988dfd2a8eb49ed062e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:fd:c6:39:21:d7:af:e6:ef:0e:22:89:26:
b9:4b:a8:ad:fc:b9:cd:f0:8b:43:41:be:9b:bf:24:
9d:5a:9d:c6:51:75:d2:53:40:68:73:47:13:bb:84:
be:7a:bb:0e:6e:b0:18:80:50:5b:cb:93:9e:f1:96:
dd:18:d4:b8:e7:b2:70:af:66:a0:23:64:2f:32:6e:
a7:d7:73:b6:b4:68:b1:07:75:1c:21:f6:d7:52:ae:
ef:e4:2d:76:a1:b0:00:b4:8b:28:05:05:51:e4:4d:
49:bb:a6:a9:cb:7a:64:1c:ad:07:fc:37:7d:a9:0d:
89:2e:c6:17:f0:d7:0e:b0:59:d9:24:f7:e2:d4:f7:
b0:7d:f9:1f:9f:4b:e9:0f:b8:78:04:de:dd:76:68:
16:2b:d4:b5:bc:42:74:aa:ce:b7:4f:b0:3a:df:59:
9e:eb:7f:fe:ed:ad:f6:b4:01:20:32:9e:e6:f4:84:
86:4f:29:1c:76:bc:f2:c5:9e:c2:0b:a7:68:24:4a:
8f:78:30:e6:da:03:5f:61:49:53:45:17:5f:0c:ad:
e8:fd:7c:85:7a:b9:db:88:ee:6a:e5:10:1a:e7:c4:
f0:3b:17:59:ad:fc:58:7a:62:8c:55:f7:f6:f3:4d:
91:0d:94:21:f4:e3:00:45:91:62:1b:73:94:e5:82:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:4D:49:9A:DD:D1:8B:DB:39:E9:88:DF:D2:A8:EB:49:ED:06:2E
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/gAxNSZrd0YvbOemI39Ko60ntBi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.238.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:5d:11:4f:20:e3:c7:af:91:57:18:a6:2f:37:c4:5b:e6:2f:
ee:4f:1f:fd:ba:f6:a9:e4:64:2e:6c:c8:0a:38:9a:24:6f:a9:
22:1c:a8:7f:35:5d:dc:05:1e:3c:42:50:de:31:ad:c5:d4:e1:
29:1c:a1:3a:3f:20:36:a3:50:eb:a8:89:6f:43:49:51:b7:90:
86:06:e5:ee:4f:1e:26:f9:0e:55:8f:df:fb:3a:0e:93:0c:64:
3a:04:13:e5:b2:2e:dd:4a:84:af:ac:02:e6:7b:28:89:46:0a:
d4:b9:3f:45:64:ea:78:dd:a9:3a:eb:f9:7c:c2:27:8f:8b:e0:
ee:d1:70:ca:4c:9c:ad:4a:0b:36:7b:5d:94:70:70:9a:05:96:
98:0b:df:4d:5a:10:3b:c6:9a:9e:95:51:b9:22:ab:97:51:3d:
96:34:d8:da:98:b0:ac:42:25:c7:c5:e4:e8:c9:63:c2:a8:bc:
17:ef:51:3a:68:46:d4:8c:05:47:73:04:1f:40:43:0a:23:1e:
60:4c:b2:32:97:0a:5f:89:1e:ac:36:39:b6:db:13:0d:4a:65:
87:b9:18:ba:5b:cd:2f:f5:c7:08:cf:03:40:6d:df:08:e7:b5:
dc:9f:10:62:d3:1a:53:10:80:80:d2:fe:85:3c:22:2e:d9:85:
eb:97:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net