Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/9J-7UsVYsfdkP2E3NOkBKfo27Dk.roa
File: 9J-7UsVYsfdkP2E3NOkBKfo27Dk.roa (raw, json)
Hash identifier: SNkjPEe1B/N7nRs7uvizDjy6wV1ZvM+qnHJ198JtUE0=
Subject key identifier: F4:9F:BB:52:C5:58:B1:F7:64:3F:61:37:34:E9:01:29:FA:36:EC:39
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 018CC26CEE29F8B69E937F41B7F405E077EF
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/9J-7UsVYsfdkP2E3NOkBKfo27Dk.roa
Signing time: Mon 01 Jan 2024 00:29:27 +0000
ROA not before: Mon 01 Jan 2024 00:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57361
IP address blocks: 91.231.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ee:29:f8:b6:9e:93:7f:41:b7:f4:05:e0:77:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Jan 1 00:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f49fbb52c558b1f7643f613734e90129fa36ec39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:00:42:9c:19:96:1a:a5:55:7f:dd:75:ac:35:
b6:16:e3:3a:af:1c:cf:86:8e:eb:74:11:b4:00:62:
ee:c6:95:45:74:f5:4a:76:88:a9:eb:c1:39:e1:e5:
57:d3:6c:da:13:dc:e5:9e:ab:51:65:c8:e8:df:32:
03:58:2c:a3:e4:50:23:f5:a5:97:91:bc:c4:e7:2b:
b9:4f:87:08:95:f3:d8:6f:c1:dc:72:10:52:2d:73:
f3:62:da:22:7f:48:ad:ae:8c:d4:95:c9:a5:a3:ed:
10:e7:6d:6f:8c:f7:e2:eb:3a:a0:df:84:70:03:ab:
3f:42:7d:cc:53:70:c1:dc:ce:db:ed:51:1d:ee:73:
b4:4e:f2:7f:6c:a5:9d:25:d6:36:43:c1:43:72:91:
e2:94:61:e8:06:d2:7b:b0:23:fa:c2:2a:1f:83:d6:
2d:55:f9:60:28:32:9b:cb:20:db:1c:64:43:39:4d:
74:f9:0e:8c:fc:d3:2d:49:10:c3:27:45:3a:56:45:
f5:5b:6b:82:ca:7b:4a:1e:92:0c:a7:10:52:e0:eb:
c1:ba:10:cb:b9:14:9d:96:96:5e:04:d8:19:ab:4b:
23:e1:00:f6:d0:c1:71:37:e9:ce:f1:3a:2b:08:f1:
ae:c8:fd:e6:9c:3b:c9:dd:bd:a5:b2:f3:48:21:84:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9F:BB:52:C5:58:B1:F7:64:3F:61:37:34:E9:01:29:FA:36:EC:39
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/9J-7UsVYsfdkP2E3NOkBKfo27Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d9:de:0b:4a:d6:c1:8e:a8:0c:7b:fa:75:1e:eb:72:88:fb:
a1:07:6d:2e:53:21:c7:86:b6:ee:0d:95:9e:89:15:f1:a0:06:
32:44:82:55:5c:96:65:c3:b7:b6:49:81:2b:84:9b:cb:89:07:
96:79:8a:55:25:2b:48:f0:cd:b1:6f:15:5f:b2:f6:39:12:80:
1e:bf:71:82:27:bd:8b:a2:26:74:04:4c:6d:b9:c8:14:f6:93:
00:f3:9f:16:bb:44:08:4b:0e:1e:94:18:d2:13:cb:7e:66:50:
2c:a2:a7:ab:87:4d:df:ee:ea:cf:e0:92:24:ab:21:f2:31:a1:
6d:ab:ba:68:db:07:ed:19:71:bd:17:4e:bc:0c:01:b8:2c:63:
37:13:5b:a4:e8:13:92:96:e3:af:0f:a9:01:7e:6c:de:fc:52:
4c:8f:ce:33:a3:01:05:1e:35:8a:50:b7:1b:f0:bb:0e:22:bb:
7c:60:f7:90:d6:95:b8:67:d0:d3:a8:50:fb:c9:b3:10:96:c3:
2d:f5:a7:2b:80:a9:b3:9c:09:0c:44:00:53:2d:6c:9f:27:c4:
2e:3e:53:40:b7:36:3e:eb:3a:e7:fc:aa:b6:bf:d7:4e:6a:93:
e9:82:30:3c:ff:14:1c:41:23:bd:29:de:06:c4:c9:fb:ea:80:
36:27:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:07 2024 by rpki-client on console.sobornost.net