Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/hoo0oBS41aVx7vh0YkzQ8Cd34VM.roa
File: hoo0oBS41aVx7vh0YkzQ8Cd34VM.roa (raw, json)
Hash identifier: JoT68hhMVBtmnf9yNE2vHfbWTba/Ssrkxc7NI+gSVps=
Subject key identifier: 86:8A:34:A0:14:B8:D5:A5:71:EE:F8:74:62:4C:D0:F0:27:77:E1:53
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 01938B72B22898417D2785269C4814064331
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/hoo0oBS41aVx7vh0YkzQ8Cd34VM.roa
Signing time: Tue 03 Dec 2024 07:36:09 +0000
ROA not before: Tue 03 Dec 2024 07:36:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59437
IP address blocks: 91.194.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:72:b2:28:98:41:7d:27:85:26:9c:48:14:06:43:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Dec 3 07:36:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=868a34a014b8d5a571eef874624cd0f02777e153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:8f:0d:08:32:46:35:7b:a9:7f:19:94:c2:
07:8d:0a:1b:ec:6a:8b:94:c9:3c:74:5f:bd:44:55:
95:66:e2:1f:a4:ee:4f:71:6f:7c:c6:f7:90:7c:94:
15:60:f9:13:fc:5f:64:c8:25:06:98:d6:b7:9e:c2:
70:10:95:02:d2:18:37:7b:b6:14:5d:b7:23:79:63:
93:9c:d1:f5:15:d7:1f:b1:d6:da:96:a4:0c:15:18:
2d:5a:92:44:81:e4:6b:e2:60:89:ce:e4:c5:96:27:
84:34:a3:ea:9f:7b:f9:6e:09:a2:59:0c:94:fc:ac:
07:cd:74:67:5a:66:cc:31:a7:60:53:ed:63:61:6e:
44:77:1d:23:c0:c7:c3:e9:48:f4:4a:1e:39:8f:be:
86:33:77:0e:c9:88:fb:46:e1:8b:48:0b:85:cd:3f:
7e:65:40:e1:cc:26:f8:44:d7:9c:be:7e:1b:d7:9c:
1d:72:0c:2b:b7:f2:7a:ab:31:bc:09:6e:5f:ed:13:
45:6f:5d:03:ea:8b:85:87:37:a0:d5:10:a7:d1:97:
86:55:c3:76:16:6d:f4:0e:b9:37:9b:d8:d6:43:73:
90:70:8d:a7:b9:5a:0f:45:ff:9e:1e:da:63:f1:f6:
78:4b:e2:ca:19:ae:86:76:e8:97:b0:67:79:3b:98:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8A:34:A0:14:B8:D5:A5:71:EE:F8:74:62:4C:D0:F0:27:77:E1:53
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/hoo0oBS41aVx7vh0YkzQ8Cd34VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d4:e8:b7:29:a0:18:99:02:55:6e:10:99:24:6f:8c:bd:71:
6e:1b:e4:3f:f2:4a:ea:e0:42:fc:60:f6:d6:66:23:a2:25:44:
ad:73:b7:6a:9e:c6:95:57:b4:49:1c:04:b5:93:cc:83:a1:a8:
2e:59:48:4b:44:88:a8:e8:90:95:5d:46:f4:d2:42:5d:ba:06:
d6:69:a5:40:bb:16:fd:62:5c:02:5a:f7:8c:cc:9a:53:ea:c3:
24:66:61:df:ef:d1:8a:2a:f0:99:44:8e:5d:89:9f:b1:d9:a0:
7c:e0:1c:84:29:b2:ad:3c:25:fd:3c:88:a8:4d:d2:9b:f9:05:
02:8f:d4:2c:3e:97:ad:f1:e1:9e:37:d7:2b:0d:2e:77:ff:f8:
76:0b:88:4d:3f:75:86:ff:31:09:8d:fd:a5:da:04:8e:01:a4:
a5:d5:59:64:3f:de:da:e6:d7:0c:05:a3:e1:69:cd:81:97:7b:
61:e1:51:7e:d2:15:5f:8d:c5:5f:62:93:e6:8d:c5:97:f7:0b:
b0:70:47:94:ca:52:f5:6a:4a:62:6b:57:30:3e:31:f1:42:aa:
d4:2d:f4:4f:10:93:a4:6c:a4:58:13:e3:8f:59:53:b3:30:10:
1c:0a:4c:22:79:e0:a5:56:e3:15:01:fb:44:57:52:27:fc:0f:
09:d7:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:00 2024 by rpki-client on console.sobornost.net