Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/n7TH3-wegmXFmfA1ziv1bWfcbhM.roa
File: n7TH3-wegmXFmfA1ziv1bWfcbhM.roa (raw, json)
Hash identifier: QpX5Q96wvYMSLSb6a2zZ3BCjEQs+z0M0DG80LMtVU9M=
Subject key identifier: 9F:B4:C7:DF:EC:1E:82:65:C5:99:F0:35:CE:2B:F5:6D:67:DC:6E:13
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 0191D6ED1AC8E3A05AD29DC6664BDD03DD7F
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/n7TH3-wegmXFmfA1ziv1bWfcbhM.roa
Signing time: Mon 09 Sep 2024 13:15:48 +0000
ROA not before: Mon 09 Sep 2024 13:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198863
IP address blocks: 91.240.2.0/23 maxlen: 23
91.240.2.0/24 maxlen: 24
185.198.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:ed:1a:c8:e3:a0:5a:d2:9d:c6:66:4b:dd:03:dd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Sep 9 13:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fb4c7dfec1e8265c599f035ce2bf56d67dc6e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:8a:15:47:5b:20:32:7d:42:30:81:38:a6:
f1:ca:d3:80:ca:54:73:b8:80:49:a5:7e:ce:09:c8:
35:d3:c1:42:dc:90:44:7b:91:35:4b:3b:73:35:37:
79:79:f8:a1:bb:ee:69:94:73:68:8d:16:1f:14:39:
c7:92:42:23:ae:de:c9:b0:2b:66:50:c0:67:60:ae:
a9:ba:ea:42:a9:a4:13:37:9d:1d:8d:5d:3d:1e:7a:
6e:46:30:3f:76:25:8e:f9:da:8b:30:1d:2e:1d:eb:
0d:ba:cc:ba:8d:e3:47:7a:ed:15:06:85:75:6c:10:
2d:21:82:9c:93:6d:0f:ae:2d:dd:3e:88:c4:ed:d9:
47:f7:30:e2:a6:58:ed:ff:ce:91:10:1e:1c:2b:9a:
e4:a5:e5:aa:38:db:ff:0d:36:71:92:6a:64:fd:46:
2e:ac:c3:fb:84:d6:27:95:5c:93:fc:04:13:f3:8a:
e1:07:4a:95:72:b3:f5:51:08:81:52:fa:6d:9f:e5:
f9:43:51:fa:0d:49:a5:2e:16:39:68:30:10:74:a2:
ec:21:12:6f:d1:bb:a5:06:a3:13:08:40:dd:45:03:
b7:a4:c7:ba:6f:26:13:4f:65:4f:1d:b5:11:c1:0b:
6c:fb:71:c5:bc:db:3b:d2:87:ff:bc:c3:94:02:77:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:C7:DF:EC:1E:82:65:C5:99:F0:35:CE:2B:F5:6D:67:DC:6E:13
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/n7TH3-wegmXFmfA1ziv1bWfcbhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.2.0/23
185.198.132.0/22
Signature Algorithm: sha256WithRSAEncryption
25:31:12:39:ea:06:38:87:0d:e7:03:e2:94:f8:eb:25:46:1b:
a0:0a:db:b5:4a:06:98:b9:0b:fd:6a:7b:c4:c9:e3:76:15:b8:
78:f9:e6:fa:57:81:f4:52:18:dd:1e:49:99:78:ab:5e:dc:ee:
96:0b:5e:06:88:96:76:96:fc:1b:56:19:05:77:f5:c6:d5:f2:
8b:20:3a:c8:dd:a4:cd:28:d8:9e:d5:f7:66:5b:be:e4:3a:bd:
3c:93:3a:d2:e9:2d:35:a9:44:86:99:51:29:52:8c:93:f5:88:
f1:cd:54:bf:ad:9c:c5:c5:11:30:f4:e5:07:4a:5f:24:ce:8a:
c1:c4:b5:08:05:97:73:8b:05:de:ba:71:03:de:0e:49:6d:32:
0b:ed:06:2c:fa:34:ca:23:cd:20:ee:4a:06:cc:30:7e:fe:69:
a6:2c:cc:eb:a1:e4:96:65:61:64:56:4f:10:fb:a6:c3:8e:7e:
8d:77:eb:b0:b9:31:34:bd:2c:ee:6a:11:e3:0a:bd:f3:16:a8:
03:ec:95:71:66:c9:55:41:41:a5:5d:2e:f0:56:26:4d:24:27:
06:b4:a0:db:4a:d3:69:4e:5c:22:f4:8f:62:11:85:b4:da:d8:
b2:f7:bd:8c:11:7c:e5:be:74:b4:bb:ee:4d:c6:df:a9:6f:39:
72:cd:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:22 2024 by rpki-client on console.sobornost.net