Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/v2EiNjeefV4q_s9lmQ4GiMJEzSU.roa
File: v2EiNjeefV4q_s9lmQ4GiMJEzSU.roa (raw, json)
Hash identifier: eZ8daxAFtMAQoe2AzEd/0QDgxg610KGChxGnFyQmAiE=
Subject key identifier: BF:61:22:36:37:9E:7D:5E:2A:FE:CF:65:99:0E:06:88:C2:44:CD:25
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 01936DA85B584D9270BA872E9C812F742F8F
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/v2EiNjeefV4q_s9lmQ4GiMJEzSU.roa
Signing time: Wed 27 Nov 2024 12:46:10 +0000
ROA not before: Wed 27 Nov 2024 12:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197042
IP address blocks: 91.216.148.0/24 maxlen: 24
194.164.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:a8:5b:58:4d:92:70:ba:87:2e:9c:81:2f:74:2f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Nov 27 12:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf612236379e7d5e2afecf65990e0688c244cd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:d8:80:41:8e:54:b3:87:7b:52:6d:97:8c:
2a:6d:3b:2c:05:16:d1:88:96:b5:e1:5c:d1:86:ff:
33:77:e8:22:c0:bb:3f:e8:21:99:4e:30:2b:41:ee:
cd:04:b8:ae:0d:78:bd:a4:9e:38:a9:c7:38:a5:08:
a5:f7:ed:91:05:90:9b:db:65:10:3f:d6:01:91:17:
ea:d6:f4:e7:49:ee:40:de:f5:52:d8:0c:30:d5:18:
20:c4:97:41:3b:44:f9:32:94:8b:3c:5d:53:06:03:
8f:31:db:90:3d:8a:ce:e3:51:22:0b:8f:d6:b8:1f:
b7:72:e5:c2:a0:c5:01:5e:1d:c7:35:53:da:56:9b:
f7:66:8e:9c:76:d2:4a:5d:f1:a9:9d:71:20:b5:b8:
cd:e4:fc:d7:6d:ad:c5:97:bf:66:73:eb:48:12:9d:
d3:f1:75:b3:d7:70:a1:d1:50:03:57:17:7d:dd:19:
fe:da:9b:7d:f9:a5:07:2e:7e:05:f7:b8:ad:0a:5f:
86:c5:62:58:63:84:bd:e0:f4:ce:34:a5:c8:ee:2e:
a3:b3:29:94:3a:1b:e9:dc:74:ff:0c:9b:06:fd:26:
00:5e:c1:4a:34:d0:7d:cc:de:b3:52:cd:24:d3:5c:
da:41:9b:1d:3f:c7:85:bc:73:19:20:65:40:20:5c:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:61:22:36:37:9E:7D:5E:2A:FE:CF:65:99:0E:06:88:C2:44:CD:25
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/v2EiNjeefV4q_s9lmQ4GiMJEzSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.148.0/24
194.164.219.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9d:19:3c:b7:b5:39:00:9f:ec:ea:f4:fd:b4:fa:78:03:18:
b4:d1:b4:92:8c:a7:63:d0:fd:fb:6f:ca:c3:27:3a:96:fc:65:
db:7a:4f:f1:1f:89:cb:fc:ee:4e:f2:86:ed:dc:12:4c:dc:81:
6f:17:db:e2:28:17:a9:7f:93:56:a3:30:8f:9f:61:16:08:19:
ab:e1:41:b2:a0:4a:50:b0:46:45:bd:91:68:12:b0:b9:9d:42:
58:4d:53:ec:fb:8f:4b:56:af:82:0f:16:a7:2c:1b:dd:48:e1:
71:ca:9d:11:29:3f:6b:83:a0:e9:f4:ed:e1:e7:63:02:06:ad:
a2:2a:8a:df:9f:d0:15:e0:23:ec:85:59:ce:34:c9:9c:d1:f2:
7e:c5:4f:46:3f:91:60:2e:6d:b7:7e:8e:28:70:fa:bf:e0:b2:
2b:f1:c2:dc:e2:8a:35:23:dd:b0:1e:54:69:31:1e:d4:9d:35:
38:2a:50:ee:1b:2a:a4:e1:d9:b7:5e:ad:ac:77:ab:c7:fb:30:
25:c0:e2:2a:d0:5d:59:df:33:a4:43:58:a0:0d:86:90:ce:2a:
63:c4:72:5c:2f:20:62:12:1a:d3:13:3e:08:51:25:0f:9b:89:
4a:f6:0b:e4:62:04:14:f8:16:26:54:00:ec:e7:bf:e9:70:b6:
ab:f9:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:40 2024 by rpki-client on console.sobornost.net