Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/CsTyEISzP4Qil8wU7sjw28yuUiU.roa
File: CsTyEISzP4Qil8wU7sjw28yuUiU.roa (raw, json)
Hash identifier: i83ZID3iMykwYde6/pRa1SlZMdL2L2exqZzU8FsgJWc=
Subject key identifier: 0A:C4:F2:10:84:B3:3F:84:22:97:CC:14:EE:C8:F0:DB:CC:AE:52:25
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 01936D13205309DC6AAE816EAE58E94C0356
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/CsTyEISzP4Qil8wU7sjw28yuUiU.roa
Signing time: Wed 27 Nov 2024 10:03:10 +0000
ROA not before: Wed 27 Nov 2024 10:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50005
IP address blocks: 91.224.84.0/23 maxlen: 23
195.178.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:13:20:53:09:dc:6a:ae:81:6e:ae:58:e9:4c:03:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Nov 27 10:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ac4f21084b33f842297cc14eec8f0dbccae5225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:27:b9:29:f3:b1:cc:d0:b8:4c:64:7c:57:
cb:49:e3:1f:dd:16:1d:4c:9f:f1:cb:3c:15:eb:86:
e6:c6:b9:74:5f:50:bb:23:4d:47:e7:06:61:55:6a:
33:db:f2:03:38:c2:ad:3d:ed:8b:b2:b7:f5:73:ab:
80:36:c9:79:73:6a:3a:f4:b9:3e:d8:3e:82:9d:73:
65:5f:4e:99:13:09:2d:18:39:97:d8:63:a5:ba:d1:
1e:d2:bc:f7:5f:26:60:c5:bd:22:4c:45:34:75:59:
95:3a:36:5b:cf:ab:27:51:53:44:3d:bd:0f:25:88:
f1:4d:51:a6:ef:5e:1a:74:16:17:0b:1f:0b:af:4e:
23:e0:88:7f:71:39:bd:9b:49:86:05:ca:31:6d:cf:
11:87:80:ca:9a:58:98:70:e8:e7:f7:13:55:37:35:
28:a3:9c:9a:d8:e5:e0:4d:eb:0c:12:29:3b:4b:60:
d9:73:5e:60:74:76:c0:7c:d3:9d:43:e2:7e:c6:f5:
f4:6f:28:e6:52:5f:a0:b7:fc:90:9c:61:7f:7d:f2:
4c:9f:89:47:38:0c:b6:4c:78:07:68:59:a1:d3:d4:
f7:69:96:eb:71:15:3a:64:4d:31:db:c4:97:db:3b:
ba:b2:3a:c7:44:57:c6:32:10:5d:06:40:ce:78:56:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:F2:10:84:B3:3F:84:22:97:CC:14:EE:C8:F0:DB:CC:AE:52:25
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/CsTyEISzP4Qil8wU7sjw28yuUiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.84.0/23
195.178.18.0/23
Signature Algorithm: sha256WithRSAEncryption
70:90:bc:04:b7:9d:05:57:8f:67:80:6d:57:96:91:5d:6f:f3:
d1:a3:0e:cb:c8:fa:7b:ab:30:bc:8e:2f:0f:28:04:36:d2:e3:
05:a4:6d:3f:2a:d0:5d:3e:c3:84:14:29:26:1e:b7:d8:fe:10:
c3:1e:81:1f:13:e4:24:28:f3:66:c2:6f:92:9b:35:55:71:28:
6e:f1:44:5b:2f:2f:1c:b8:14:4f:8e:6e:d8:e1:20:b5:25:8c:
9e:d4:e6:ba:81:64:b5:fa:22:e6:73:97:36:46:1c:66:a9:ed:
8d:15:85:ac:57:b9:2c:86:c9:5b:8d:fc:0b:b8:39:00:c7:94:
42:95:ad:71:a0:cf:c6:3b:2b:31:0a:3a:69:cd:a0:5c:6b:6e:
41:a4:7f:f3:7c:70:d1:d6:1e:4b:2a:e5:8b:37:47:76:31:41:
30:12:9e:39:ad:e8:06:49:56:2c:2f:92:bd:e0:0c:ad:4c:d1:
98:7d:f2:f1:d4:11:d3:7b:61:95:98:49:a3:a2:69:ba:7b:cc:
bd:02:e3:1f:05:45:26:16:4e:e3:eb:e3:32:2e:57:70:30:19:
1a:51:cf:f5:e7:ef:b1:af:b3:72:68:3d:06:af:e0:b6:cd:15:
fe:e1:66:8d:4b:42:a4:5b:ac:eb:c6:27:a9:3b:d3:37:c3:df:
e8:73:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:25 2024 by rpki-client on console.sobornost.net