Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/sWE6kX2Heudi8pOiSpRbJnIU4qM.roa
File: sWE6kX2Heudi8pOiSpRbJnIU4qM.roa (raw, json)
Hash identifier: KMA5QFWMjHpnld2CB3rBDrAR3z0gLV8fEm7bHdK8XOY=
Subject key identifier: B1:61:3A:91:7D:87:7A:E7:62:F2:93:A2:4A:94:5B:26:72:14:E2:A3
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 0191A51F128B7B8EFE9909B3C0B8B279C2A6
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/sWE6kX2Heudi8pOiSpRbJnIU4qM.roa
Signing time: Fri 30 Aug 2024 21:09:22 +0000
ROA not before: Fri 30 Aug 2024 21:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30931
IP address blocks: 91.223.203.0/24 maxlen: 24
91.223.218.0/24 maxlen: 24
193.30.41.0/24 maxlen: 24
194.107.118.0/24 maxlen: 24
195.234.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a5:1f:12:8b:7b:8e:fe:99:09:b3:c0:b8:b2:79:c2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Aug 30 21:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1613a917d877ae762f293a24a945b267214e2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:e0:15:33:ba:4a:3d:03:cd:b9:b1:f4:65:
62:3a:46:c1:71:bf:94:55:80:fd:99:9b:e3:f2:1d:
9b:4f:5a:d6:fb:81:a1:ec:04:c9:10:f2:b7:a8:77:
d7:e8:14:e9:bd:5a:b7:03:8e:55:e1:ff:63:41:0e:
b5:2d:7a:98:c1:bc:39:20:a5:0c:84:26:45:eb:fe:
20:a5:51:73:15:05:1f:86:25:2a:3b:94:f8:42:c6:
50:c4:db:cb:64:58:b5:27:14:1c:fe:e8:d9:d6:b7:
17:b5:0b:e9:8c:82:eb:9a:36:e0:10:8a:4e:00:fd:
c7:af:9e:dd:3b:93:dd:b2:ff:77:3b:80:32:a6:75:
a9:12:47:f7:71:f6:ee:77:f7:08:38:09:e8:9a:77:
cd:ed:d8:d4:99:50:86:c1:ff:43:d9:67:27:d8:ab:
34:82:a9:69:48:6e:2e:ae:ea:97:70:01:e8:e4:cf:
cc:50:14:cb:55:28:f1:c7:bc:7e:26:b6:6e:4d:f1:
28:c3:6f:ba:8a:ab:00:66:19:6f:bb:f9:06:0e:e0:
5c:bc:76:c0:29:83:11:3b:46:55:5f:2b:bf:bb:ba:
cd:34:d4:97:d7:a5:30:46:f0:ed:c5:3f:c9:ea:be:
bb:a3:15:2d:ef:d3:c4:28:6d:85:8e:d5:7f:00:f3:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:3A:91:7D:87:7A:E7:62:F2:93:A2:4A:94:5B:26:72:14:E2:A3
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/sWE6kX2Heudi8pOiSpRbJnIU4qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.203.0/24
91.223.218.0/24
193.30.41.0/24
194.107.118.0/24
195.234.39.0/24
Signature Algorithm: sha256WithRSAEncryption
88:92:8f:0c:46:b2:98:f9:d5:0b:60:39:3a:36:2e:31:56:5b:
c6:da:6d:f9:81:f8:b5:c9:bf:8a:b7:93:48:65:c1:5b:9b:c3:
f4:f4:2a:41:2d:fb:4c:eb:85:83:73:53:75:68:81:8c:b7:25:
c0:b4:5f:a6:62:b1:ff:f7:18:7b:b2:24:11:b9:d4:1e:1b:4f:
50:cb:56:c9:86:26:72:6d:b9:13:8e:c8:88:fa:9b:df:50:87:
27:13:3c:c9:83:84:62:74:57:91:17:4f:bd:3b:f6:d2:8e:d3:
67:e3:4e:50:4c:32:3d:47:39:d4:a1:36:e9:fd:aa:ec:8b:3a:
7c:0e:f6:af:e0:50:f3:8d:f1:6a:eb:b1:c0:f7:8d:9f:2d:48:
35:63:c2:87:b5:c6:b6:9f:45:af:7e:60:28:fb:af:1b:09:97:
45:0b:35:4e:8c:50:fe:03:38:25:d5:50:62:f1:dc:65:85:e5:
23:5e:c3:34:7a:1b:d3:4a:34:f1:8e:77:57:30:c8:ba:a6:2a:
5a:a8:48:73:16:fe:a7:47:88:aa:0c:2c:49:0d:e7:fd:80:9b:
14:ea:d7:6e:82:47:f9:cf:67:ab:32:bc:90:07:4f:c0:03:6a:
b9:a8:47:69:6b:e7:b3:23:1e:1c:ab:ad:8e:ca:e3:bb:b2:20:
ef:5a:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net