Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/ZwfhE3mEZ4ikjj0d1o0kaQYlFTY.roa
File: ZwfhE3mEZ4ikjj0d1o0kaQYlFTY.roa (raw, json)
Hash identifier: e71s4CCJAl5sJz1GMep8hrrcCP//DFU9Il7pP5cTOus=
Subject key identifier: 67:07:E1:13:79:84:67:88:A4:8E:3D:1D:D6:8D:24:69:06:25:15:36
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 0192CED23A892027B75F6B7696BF06EDE1B1
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/ZwfhE3mEZ4ikjj0d1o0kaQYlFTY.roa
Signing time: Sun 27 Oct 2024 16:32:16 +0000
ROA not before: Sun 27 Oct 2024 16:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51500
IP address blocks: 91.197.240.0/24 maxlen: 24
2a07:f3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ce:d2:3a:89:20:27:b7:5f:6b:76:96:bf:06:ed:e1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Oct 27 16:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6707e11379846788a48e3d1dd68d246906251536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:8a:36:30:e3:f1:28:7c:80:fa:f9:b9:ef:
6d:ba:5f:dc:78:5d:3a:90:db:dd:2e:ca:f9:97:43:
f7:16:d6:1a:92:22:51:62:dd:c3:8a:00:e8:70:e5:
f9:ca:0e:9e:81:8f:f1:bb:55:2b:20:8f:95:4d:8f:
8d:32:6c:04:9b:c9:81:74:09:8b:e8:87:91:af:ab:
63:5a:a6:09:ad:f2:06:00:62:a9:7a:a8:f5:d5:33:
8a:26:90:4e:39:a3:29:13:7c:21:5d:24:eb:f5:b9:
9d:ea:53:74:cf:c4:d0:52:f4:85:eb:49:d4:4a:a2:
c1:3b:6c:92:60:9c:ed:b6:ca:3e:20:dc:cf:53:39:
82:88:fd:0a:f8:3c:29:04:4e:a4:07:5c:0d:0f:0a:
6a:cb:fe:f5:6b:75:85:e1:23:d0:3a:6e:62:45:42:
4f:93:3a:09:1e:53:98:60:b5:29:99:a0:49:f9:5b:
04:47:3b:28:f4:8a:a6:38:c9:39:57:29:82:2a:c8:
19:c7:e4:f2:79:b2:3b:a0:5b:fb:e0:6e:2e:ed:73:
b3:a3:4f:5c:6b:65:9c:f2:e6:da:a2:47:c9:4e:e7:
aa:96:c6:b9:dc:28:db:dd:4e:92:75:2c:e3:d7:20:
ba:83:d3:fb:3d:f2:e1:9d:2c:ae:fd:2c:61:b5:50:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:07:E1:13:79:84:67:88:A4:8E:3D:1D:D6:8D:24:69:06:25:15:36
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/ZwfhE3mEZ4ikjj0d1o0kaQYlFTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.240.0/24
IPv6:
2a07:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:0e:cc:19:a6:45:f1:21:be:8f:0e:b4:22:fc:9c:c3:98:0b:
46:a4:27:86:8f:e8:67:af:e7:0e:a3:11:95:9c:06:23:66:f4:
27:2f:7e:4c:af:e5:cf:cf:cf:b8:d7:76:1e:7a:04:ac:38:ef:
68:4d:26:b9:7e:2a:cc:a0:41:9d:8d:77:b2:c7:1b:66:22:68:
6c:6c:ee:5b:10:97:5b:12:14:0d:a8:6b:ae:1a:f3:93:29:ba:
10:83:8b:8c:66:bb:f2:14:f7:46:e0:56:5e:11:8f:46:53:a3:
7f:f3:67:05:59:e5:19:cf:9d:bb:de:52:3a:fa:73:84:ae:55:
f3:11:f7:0c:4e:76:b1:9f:72:3d:d9:27:8f:d2:18:b4:fd:0d:
3f:ae:92:07:10:8e:9e:cd:c7:3a:70:a7:98:d6:c2:86:63:98:
fe:a5:c0:4c:cf:e0:77:9f:95:bd:43:43:f4:35:2b:d0:0f:7b:
27:70:d6:c4:61:65:95:59:b2:b0:fb:f1:48:79:09:d9:bf:a9:
9b:1e:c0:84:72:d1:2a:1a:a2:f4:13:1b:11:2f:94:e4:10:c7:
2d:ec:1f:c2:70:2f:73:b3:8e:e1:cc:ec:d1:73:d6:dd:5f:fe:
65:c8:75:7a:26:d1:63:2b:7b:92:70:cc:d0:d9:17:4f:74:c1:
38:42:9f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:25 2024 by rpki-client on console.sobornost.net