Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/Va6_AddlaXvjH65nxUCPRNYUle8.roa
File: Va6_AddlaXvjH65nxUCPRNYUle8.roa (raw, json)
Hash identifier: +Io2GeNrYMxTswvL9+qiPba32rB1M4CU49vLA1kjFlc=
Subject key identifier: 55:AE:BF:01:D7:65:69:7B:E3:1F:AE:67:C5:40:8F:44:D6:14:95:EF
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 0191D6EE04C0F2F9798781303493DB2A5DD3
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/Va6_AddlaXvjH65nxUCPRNYUle8.roa
Signing time: Mon 09 Sep 2024 13:16:48 +0000
ROA not before: Mon 09 Sep 2024 13:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198032
IP address blocks: 91.240.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:ee:04:c0:f2:f9:79:87:81:30:34:93:db:2a:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Sep 9 13:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55aebf01d765697be31fae67c5408f44d61495ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:8b:fa:8d:a0:95:5a:e4:02:55:7e:a3:c7:
f4:7d:28:f7:49:ee:46:eb:46:69:17:bd:8f:90:ea:
97:21:5d:6f:c2:4c:67:58:8f:77:48:09:f1:80:fd:
d8:54:1b:8e:af:3f:c9:12:08:7c:92:c8:a0:3f:60:
54:38:ba:c1:4b:d7:16:04:4d:3f:1b:71:ad:de:f3:
1b:4f:77:b4:70:15:cf:8f:97:9e:97:92:ab:69:79:
94:49:ae:33:ff:d9:f0:c2:48:c5:ec:5f:87:71:78:
57:f2:d2:30:f2:d4:9c:04:3e:e7:97:b9:ff:9f:f4:
b5:49:a4:1e:f3:8e:69:e3:88:19:94:41:a8:51:91:
3e:e5:c5:6f:f1:d4:5d:aa:42:eb:1e:12:26:58:5e:
4f:3c:c9:d3:52:e6:d5:b5:dc:8a:50:39:3c:03:e5:
90:f2:15:01:49:0f:ee:86:06:a1:54:fd:70:df:43:
fe:d8:ed:fe:07:b8:95:9f:15:73:0f:13:21:76:35:
42:e6:eb:f5:df:15:5c:f4:c4:f7:7c:fc:c5:06:7d:
d8:47:02:d1:bc:85:de:ab:fe:eb:41:42:dc:de:23:
58:4a:55:19:aa:a9:d7:9e:ee:67:61:9b:a7:75:ef:
2e:b0:1e:b3:10:99:38:eb:c1:76:50:de:66:00:0e:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AE:BF:01:D7:65:69:7B:E3:1F:AE:67:C5:40:8F:44:D6:14:95:EF
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/Va6_AddlaXvjH65nxUCPRNYUle8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.2.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a8:02:71:de:2d:a3:e0:35:72:23:e2:ff:08:72:1d:9d:cb:
98:8e:d5:cc:fc:d6:f1:b6:2f:13:56:58:31:73:05:b4:cc:f7:
9d:4c:6f:96:9d:0f:d9:6a:23:68:c2:55:ce:3f:2f:89:cd:e9:
b8:9d:aa:ee:d1:1f:e9:fa:17:6f:e5:77:e4:20:28:7a:a1:71:
76:d5:08:1c:53:98:1b:22:bb:e7:4b:07:70:6a:87:36:8f:25:
f2:68:8b:7b:72:34:9c:e9:53:20:e9:a9:7c:44:1f:3e:61:83:
87:2e:35:53:39:b2:cb:ae:32:27:58:bf:74:7a:42:50:51:19:
55:3b:e1:cf:74:0e:d4:7b:c3:80:e1:48:c7:90:c2:65:23:7c:
15:cf:ae:b7:64:17:29:1a:54:13:f5:d1:63:9a:20:f2:27:bc:
f3:73:87:7f:7a:25:c6:a8:1e:ea:22:b3:48:26:16:b2:76:d7:
d1:d4:84:05:2a:49:43:e4:46:cd:7d:02:6e:11:02:db:38:40:
e4:70:b6:a8:d8:d0:84:33:d9:19:36:ea:e3:64:d8:aa:3f:12:
e5:44:e6:d5:bc:07:69:73:2b:62:6e:74:20:fa:76:f5:fe:7e:
63:4a:80:7d:23:5e:f0:b7:14:9f:03:ff:d0:d3:7f:d9:47:1d:
15:75:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:14 2024 by rpki-client on console.sobornost.net