Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/8B_dpUr6na7eK2UTLBIAQcEkP3s.roa
File: 8B_dpUr6na7eK2UTLBIAQcEkP3s.roa (raw, json)
Hash identifier: Mo0d4ut6suEF7qqqmF0/VzUQT0p5OvwuS6WEgWZGw+o=
Subject key identifier: F0:1F:DD:A5:4A:FA:9D:AE:DE:2B:65:13:2C:12:00:41:C1:24:3F:7B
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 0193E8514430B9A23AB244AAE52B2D5E0695
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/8B_dpUr6na7eK2UTLBIAQcEkP3s.roa
Signing time: Sat 21 Dec 2024 08:24:20 +0000
ROA not before: Sat 21 Dec 2024 08:24:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48944
IP address blocks: 91.232.72.0/23 maxlen: 23
91.232.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:51:44:30:b9:a2:3a:b2:44:aa:e5:2b:2d:5e:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Dec 21 08:24:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f01fdda54afa9daede2b65132c120041c1243f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:8b:4c:14:27:0f:dd:e0:f3:fe:60:65:3e:
9e:f0:9a:88:8c:81:b9:6e:70:57:2e:dd:dc:85:d7:
1a:b5:fa:a0:d6:ea:3b:32:83:51:7f:78:6b:62:0c:
8a:6e:2c:02:ad:3d:34:6e:d3:87:8b:df:a9:3f:00:
ad:85:ae:4b:47:9f:20:f7:6a:a0:c1:a9:f6:df:79:
cf:83:9d:59:5e:cb:aa:69:20:b9:3b:0b:b0:3b:78:
98:61:f4:b8:ad:0f:85:83:1e:e0:b1:dc:9d:2b:e1:
df:99:e9:60:91:3f:1b:5b:ee:42:46:df:95:c8:89:
db:3d:f5:2f:a8:90:a6:52:33:88:43:e7:fe:04:2b:
e9:1b:a2:82:60:2e:30:09:e5:9e:71:e8:23:69:01:
e1:69:f0:e3:57:ee:91:39:2b:30:40:06:68:8a:49:
13:dd:49:8b:b2:36:f0:4c:18:a8:83:47:a9:fd:63:
59:a4:cc:3c:64:26:e7:cb:25:35:c8:f1:53:45:c5:
b8:8a:21:f2:a3:c9:ce:fa:3c:5d:51:6c:e7:96:95:
26:2a:aa:bb:7d:47:23:65:fc:21:a5:16:a6:e1:8e:
53:50:bc:50:d8:ad:bb:96:41:b8:23:62:f6:fd:5e:
1a:53:75:2b:b5:21:7c:b9:5d:d7:65:12:69:8f:b4:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:DD:A5:4A:FA:9D:AE:DE:2B:65:13:2C:12:00:41:C1:24:3F:7B
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/8B_dpUr6na7eK2UTLBIAQcEkP3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.72.0/23
Signature Algorithm: sha256WithRSAEncryption
91:4a:a8:5d:ec:b4:60:17:bc:cc:4c:7e:a4:b2:e2:03:cc:35:
ae:c1:d2:56:e6:b2:b4:07:b8:16:bd:47:11:89:e5:23:c5:3b:
23:46:ac:af:3e:43:70:77:84:53:bb:02:5c:8d:4a:78:d3:c4:
fe:0d:d0:01:3b:46:f1:05:5c:94:37:43:0e:ac:f5:7f:db:ea:
98:c2:86:e4:d6:55:b6:33:87:b1:92:3e:9e:6a:b4:de:9b:c6:
fb:de:3f:90:25:dc:ef:3c:52:8b:e5:d6:0f:00:6d:1a:89:86:
02:af:cb:12:54:eb:1a:24:c6:b8:ff:cb:0f:c6:32:06:88:85:
56:a8:b2:3d:1c:e9:9f:ee:78:8a:62:24:cd:98:22:19:b0:df:
14:18:1a:45:49:ac:f0:f3:45:5d:cf:62:72:4a:38:00:a7:50:
ed:cc:68:cc:b7:15:60:fa:35:38:c8:2f:05:5f:3b:83:1b:4f:
a5:9e:c6:2a:fc:2c:f9:bd:36:7f:34:f7:20:bc:25:ce:a1:9a:
4a:d9:b7:b1:98:8c:2a:b3:f5:79:fa:f1:68:35:2c:5b:33:0c:
70:1f:d0:7f:9f:63:a2:61:2a:bb:fb:12:1d:09:5f:00:b5:02:
31:cb:ef:34:7a:16:64:50:25:8e:0a:45:6b:88:0d:31:6c:d0:
85:bb:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:58 2024 by rpki-client on console.sobornost.net