Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/_b5XJSiGRz0454p5cPXfv5Ogkms.roa
File: _b5XJSiGRz0454p5cPXfv5Ogkms.roa (raw, json)
Hash identifier: Eo16R/GJtqjmfkSNlywNGTyLewXxxYbRKVWJnT4PpD0=
Subject key identifier: FD:BE:57:25:28:86:47:3D:38:E7:8A:79:70:F5:DF:BF:93:A0:92:6B
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 018CC6B7EC35BB6DA3E984BFE84F01162C3B
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/_b5XJSiGRz0454p5cPXfv5Ogkms.roa
Signing time: Mon 01 Jan 2024 20:29:51 +0000
ROA not before: Mon 01 Jan 2024 20:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197635
IP address blocks: 91.223.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ec:35:bb:6d:a3:e9:84:bf:e8:4f:01:16:2c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Jan 1 20:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdbe57252886473d38e78a7970f5dfbf93a0926b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:65:cd:8e:c1:24:6f:8a:9a:dc:67:20:58:
c0:af:b9:30:8b:20:50:e1:ee:9f:79:87:98:90:ae:
c5:bf:aa:f1:d7:b2:b6:ff:46:3c:a5:2e:7f:08:e5:
eb:76:ba:42:b4:9f:f5:c0:31:91:74:07:ab:02:92:
cc:88:5f:cc:0d:60:02:d0:7a:e3:5a:0d:27:54:82:
4f:d6:80:1b:0a:4b:8d:f0:c3:d1:ee:53:f9:1e:6d:
87:9a:c6:89:34:ac:8d:8a:5f:db:24:8a:4f:61:3d:
b1:92:e5:42:95:49:aa:e9:ef:ce:30:b5:df:96:fc:
c5:d5:ca:38:83:48:23:65:f8:5e:cc:ed:82:df:1c:
af:10:d7:48:b3:c3:35:92:54:7f:bf:08:ca:06:0a:
18:59:0f:5c:60:86:43:73:39:7c:3e:7c:8c:34:8c:
e2:1d:40:45:91:60:de:ff:1d:23:15:b4:91:3b:6c:
5e:23:08:19:74:d1:7a:01:4c:da:4a:29:a3:e2:2e:
b4:a6:5d:e1:64:b9:72:26:53:63:5e:83:d0:e1:77:
39:ff:b4:b0:37:86:6f:53:99:b4:cd:58:ee:00:ac:
d2:0c:f9:74:fe:7e:5f:f2:27:a4:41:7b:33:c2:e2:
2b:08:93:fd:c7:69:09:02:f8:87:db:a5:a3:d9:d8:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BE:57:25:28:86:47:3D:38:E7:8A:79:70:F5:DF:BF:93:A0:92:6B
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/_b5XJSiGRz0454p5cPXfv5Ogkms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:45:82:80:93:05:07:b4:b8:01:fc:f9:3c:34:b6:85:9c:38:
e6:23:aa:82:75:31:4a:7a:d2:9f:7a:c0:0d:71:e6:52:9d:02:
33:ba:32:50:43:22:30:34:df:32:a6:f0:a2:03:ae:24:b7:10:
52:8c:53:5a:4c:de:f6:ef:be:f2:f5:69:ee:93:49:36:fc:27:
11:a4:12:1f:ce:6d:a9:22:0b:4f:f0:2b:5d:37:e8:df:4e:22:
01:55:08:81:12:45:a2:c7:9d:89:81:2a:82:c8:0f:e4:ea:1c:
1a:1a:1a:32:68:a2:cd:7f:84:1a:82:fc:f9:3a:25:1d:6d:c4:
95:55:d1:a0:b1:0d:d9:84:7a:e9:09:26:30:3f:64:09:ef:5f:
6f:ca:59:62:d5:4f:86:e3:1e:19:93:1e:80:2d:bb:68:11:6c:
c9:7f:38:1a:a5:c8:b9:86:a4:9e:46:cc:55:8d:86:48:c6:75:
82:da:7a:92:b4:a2:ad:e3:c0:16:0c:e3:c4:a2:81:6b:10:97:
74:09:14:2f:bd:60:f5:21:d5:c2:aa:88:8c:0f:5c:1b:94:89:
01:3c:e1:4f:67:eb:17:63:4b:c9:8d:98:06:a9:5b:6f:fd:15:
c7:95:be:c1:22:8e:68:25:cc:46:f2:69:91:ea:55:4a:be:fb:
2c:dd:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:15 2024 by rpki-client on console.sobornost.net