Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/fxQmrrltKyGCzstevz113Ay-WcI.roa
File: fxQmrrltKyGCzstevz113Ay-WcI.roa (raw, json)
Hash identifier: fwCJVk4pbbXL3UdUwRZUc87ReDOwX7UOoRAcBHMiFAg=
Subject key identifier: 7F:14:26:AE:B9:6D:2B:21:82:CE:CB:5E:BF:3D:75:DC:0C:BE:59:C2
Certificate issuer: /CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Certificate serial: 018CC8DE0EC420D00C3BC0FF694A79A6160C
Authority key identifier: 0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/fxQmrrltKyGCzstevz113Ay-WcI.roa
Signing time: Tue 02 Jan 2024 06:30:45 +0000
ROA not before: Tue 02 Jan 2024 06:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60543
IP address blocks: 91.238.150.0/23 maxlen: 24
195.78.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:0e:c4:20:d0:0c:3b:c0:ff:69:4a:79:a6:16:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Validity
Not Before: Jan 2 06:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f1426aeb96d2b2182cecb5ebf3d75dc0cbe59c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:92:4f:f9:02:29:cf:86:b1:ac:b3:51:94:
7f:b9:93:0f:d6:99:be:8b:71:92:46:e4:c0:e2:b2:
44:33:99:7d:61:b5:53:c1:7c:ec:3f:08:4f:b3:76:
4f:42:2f:e6:34:78:43:a4:f6:f0:28:d6:1b:2b:5c:
6d:07:22:9c:61:38:e7:de:ce:b1:d4:06:f6:00:a5:
5b:ba:ff:f3:11:9a:1a:ca:23:bf:cd:f9:58:5b:d7:
2b:1c:7a:81:50:50:fd:e1:5b:ee:85:ba:33:27:4a:
29:d3:da:c7:d8:d4:b9:af:59:8a:ec:0e:f6:9c:8c:
4b:0e:04:7d:6e:bc:47:8a:a9:a1:37:0c:c6:76:66:
6f:64:02:22:30:04:06:b0:17:3a:4f:a9:e9:8f:54:
db:c6:91:ff:e7:c1:30:1a:a5:d5:0e:1f:97:47:af:
21:ea:20:b9:30:0b:f0:ad:73:d9:0e:cc:57:ec:2e:
48:4a:1f:ad:24:bc:87:a4:6f:2d:cb:f8:fa:cd:36:
81:bf:4e:a5:e7:3b:a9:f0:22:32:81:85:43:b5:1b:
6d:61:20:71:91:86:aa:71:47:a0:80:dc:08:b4:18:
5b:8a:a9:8b:41:3b:eb:56:0a:87:b8:20:a5:60:2d:
20:00:01:a6:09:15:3f:38:fe:71:4f:95:e4:f0:dc:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:26:AE:B9:6D:2B:21:82:CE:CB:5E:BF:3D:75:DC:0C:BE:59:C2
X509v3 Authority Key Identifier:
keyid:0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/fxQmrrltKyGCzstevz113Ay-WcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.150.0/23
195.78.82.0/24
Signature Algorithm: sha256WithRSAEncryption
87:08:a1:71:5f:5d:77:4e:db:36:8e:cd:e7:85:60:38:d7:42:
50:0a:65:44:78:b3:82:10:31:59:f8:6a:ae:d8:b7:9f:d8:ec:
54:70:c7:a6:3f:a1:ce:8c:e6:7a:f9:90:ff:0d:52:ef:cb:99:
32:b7:3a:4f:36:d7:40:61:cb:24:db:4b:7f:8c:d3:68:87:d9:
b9:58:ba:1a:6c:b2:b8:48:c1:98:c4:96:e5:a4:e7:3e:ea:62:
be:c2:53:73:95:d8:27:98:1f:55:f3:f1:a9:97:e4:21:3f:53:
ea:6e:d5:85:bb:39:c5:f9:44:9d:08:35:dc:fa:48:0a:4c:47:
a3:1c:77:37:c2:90:45:82:26:e6:1f:b8:67:31:c6:8e:ae:f8:
14:02:81:b2:5b:f7:fe:98:68:f0:6c:ba:a2:3c:94:29:4f:03:
5f:47:c5:d3:1e:0b:49:85:8d:c3:46:0e:ed:a0:de:5d:25:de:
01:40:14:24:7d:a2:ce:76:4d:e9:f6:db:a3:3d:9e:e6:ee:50:
e8:6f:eb:1d:dc:f0:c3:32:89:6e:d1:b9:c1:1a:18:78:83:6b:
21:2d:8f:2f:87:12:aa:e7:6b:83:80:19:a6:5f:26:68:c4:75:
c5:4e:db:68:30:df:56:86:ac:5a:0e:fe:a8:70:6d:55:e6:32:
bc:81:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:00 2024 by rpki-client on console.sobornost.net