Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/TFehAqRLq1f3Ij52QB399D8m-Vg.roa
File: TFehAqRLq1f3Ij52QB399D8m-Vg.roa (raw, json)
Hash identifier: wjLu4Y9V0dyITmBrQRY0uT/yOMvfYqdSyeanXTzJWM4=
Subject key identifier: 4C:57:A1:02:A4:4B:AB:57:F7:22:3E:76:40:1D:FD:F4:3F:26:F9:58
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 018CC7953260800B490299A87892D1B84B78
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/TFehAqRLq1f3Ij52QB399D8m-Vg.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48119
IP address blocks: 91.207.126.0/24 maxlen: 24
91.207.126.0/23 maxlen: 23
91.207.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:32:60:80:0b:49:02:99:a8:78:92:d1:b8:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c57a102a44bab57f7223e76401dfdf43f26f958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:0e:e7:08:1e:57:17:c2:53:38:ef:ac:05:
1f:7e:11:1f:7d:a3:19:ab:bb:28:3a:e5:10:b8:92:
56:ca:69:c0:3b:2f:79:ce:7a:ec:a5:4a:0b:24:d3:
58:19:36:6f:3f:b8:f7:01:1d:92:00:ce:8e:cf:56:
fb:b6:8f:89:71:79:90:41:1c:ae:39:95:53:97:2f:
df:be:9e:97:dc:84:4d:ea:7e:ae:2a:7b:38:0b:94:
10:4d:82:b0:60:ec:e5:ae:58:d6:b9:18:18:f2:ff:
e2:fa:f2:93:3f:7d:24:81:d3:ba:e3:5c:a9:02:8f:
1c:33:3b:4e:a4:ba:7e:88:02:13:4b:44:94:d3:5c:
ba:60:69:d9:97:3f:2b:9c:fe:80:23:be:6f:81:9b:
62:9d:6c:f6:1e:43:b5:24:6c:fb:8b:2a:fc:48:23:
e5:4f:a8:28:50:15:91:bc:c6:67:c3:45:7d:3b:ea:
7b:9d:b9:7d:f4:fa:2a:ef:ff:4a:92:b8:41:95:d1:
d7:a8:18:eb:97:c2:82:f3:db:a4:27:65:48:6a:3c:
cd:04:5a:04:85:77:48:a5:e7:98:2a:5e:3a:c9:c9:
86:58:fd:50:a8:57:5b:06:9f:75:2f:2d:dd:d5:51:
71:8c:86:dc:6a:3e:a7:e9:48:82:a5:6a:f6:94:94:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:57:A1:02:A4:4B:AB:57:F7:22:3E:76:40:1D:FD:F4:3F:26:F9:58
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/TFehAqRLq1f3Ij52QB399D8m-Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:05:ab:2a:ff:3a:2c:91:8e:1e:a9:87:e0:ec:97:bc:4b:7f:
b9:e0:4a:33:98:1d:5b:ca:0b:ed:0e:f1:b6:47:4e:fd:a6:ee:
db:2e:ff:3f:b6:f0:c7:d0:09:82:fa:79:8b:36:63:45:dc:54:
8f:c6:1a:84:a6:91:e8:b5:d1:f8:8d:e2:d0:70:9b:96:0a:79:
ad:e5:e6:05:01:2d:b8:c8:42:3d:e1:56:30:e0:ed:4b:47:30:
36:88:23:c3:8e:48:3f:06:29:b9:10:01:3d:26:ec:a0:47:9c:
0b:34:b6:ea:d6:cd:4a:65:8a:24:8f:52:49:ad:50:64:74:08:
78:25:0f:6c:3a:b8:5f:fb:2b:21:2d:8d:79:35:3b:90:c7:f4:
43:b6:0b:33:5a:65:1f:84:86:93:03:59:d7:c1:66:47:36:63:
d0:80:0a:ef:cd:f1:18:ca:f4:85:3c:a7:93:e9:b1:dd:fa:ac:
cc:46:7e:3e:bb:57:75:4f:e2:4a:7d:55:47:fb:aa:28:47:ad:
18:6c:be:20:7e:49:74:1e:4e:75:af:0a:a2:c8:c9:53:cd:e3:
98:5b:25:4d:b3:3d:8f:15:fd:29:e0:d4:a6:f5:2d:d6:fa:98:
2e:a6:39:74:b2:bc:36:14:c4:6d:1f:49:fe:64:9c:8f:84:89:
2c:06:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net