Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/dCQcS4qV5QMfu_ZPYteb8lJ5lrU.roa
File: dCQcS4qV5QMfu_ZPYteb8lJ5lrU.roa (raw, json)
Hash identifier: wE4x+b26mqirEsfF7so/yI1j86PsUQGlxdQzr5yTl6o=
Subject key identifier: 74:24:1C:4B:8A:95:E5:03:1F:BB:F6:4F:62:D7:9B:F2:52:79:96:B5
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 018E18098679B5E56E3A0F7B6FD9A5AFEA98
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/dCQcS4qV5QMfu_ZPYteb8lJ5lrU.roa
Signing time: Thu 07 Mar 2024 08:31:01 +0000
ROA not before: Thu 07 Mar 2024 08:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34756
IP address blocks: 91.221.160.0/24 maxlen: 24
195.242.171.0/24 maxlen: 24
2001:67c:6b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:09:86:79:b5:e5:6e:3a:0f:7b:6f:d9:a5:af:ea:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Mar 7 08:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74241c4b8a95e5031fbbf64f62d79bf2527996b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:9d:16:88:d5:57:b6:ce:00:88:70:0d:19:
78:23:7f:57:3d:25:5f:53:f1:89:8c:fd:d4:76:9d:
0b:9c:e7:dc:06:a2:d5:4c:65:24:9f:d0:9a:dc:27:
0b:8c:51:0d:57:10:1e:28:5f:94:20:cb:a5:0b:21:
9b:a4:b4:2f:4a:35:1d:8c:a0:b2:03:9f:03:b6:05:
ec:d9:1b:e7:9b:88:4c:6e:51:af:16:7e:a2:16:8e:
93:82:b8:ff:19:31:70:40:1b:38:e3:23:d7:6d:fd:
a7:80:1f:d0:5f:a0:d5:d6:49:0d:ef:5d:06:68:fc:
8b:82:d1:5f:04:d9:d7:b7:f2:e2:2a:b3:95:fd:f8:
33:4f:6b:d6:d8:73:f6:ba:75:be:aa:23:a4:30:7b:
1f:45:76:49:9b:78:fe:3a:9b:53:6d:b5:f7:ea:09:
4c:1f:38:84:20:33:77:5c:13:76:f0:ff:e6:45:a3:
fc:8e:3f:d9:4c:3a:23:dc:f7:4a:55:1d:f4:9b:56:
55:8f:ce:a2:57:b6:88:af:b3:5c:43:e6:b6:80:23:
3f:47:25:c7:01:67:6a:16:48:e3:16:17:06:a9:37:
ef:83:f5:dc:01:31:8a:8a:74:80:c2:fa:28:e8:0a:
6c:20:b0:08:37:31:0f:e7:56:63:8e:95:7f:73:d3:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:24:1C:4B:8A:95:E5:03:1F:BB:F6:4F:62:D7:9B:F2:52:79:96:B5
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/dCQcS4qV5QMfu_ZPYteb8lJ5lrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.160.0/24
195.242.171.0/24
IPv6:
2001:67c:6b0::/48
Signature Algorithm: sha256WithRSAEncryption
6d:39:f7:d3:1f:bb:57:90:f8:4f:95:27:44:2f:53:ef:a7:ff:
13:1f:dc:0b:fd:32:a2:50:a7:e1:c6:62:64:38:38:aa:b1:1a:
42:5e:09:13:a4:4b:46:21:32:fc:94:72:20:3c:2b:1d:03:da:
4a:aa:14:ff:cc:08:b8:1e:d5:3e:97:0e:ee:1d:bb:f3:d7:ed:
44:57:77:f8:e0:55:79:19:9d:3e:ef:60:42:e1:59:fe:8a:ba:
ef:3d:1e:4c:93:67:a2:fb:36:74:2a:8c:06:d0:88:09:37:14:
57:d4:97:eb:67:1d:32:07:50:d3:b7:0b:36:4d:90:bc:19:6d:
5a:0e:9a:6f:7f:70:bf:a0:fb:55:f9:34:0a:d5:68:b6:e7:57:
07:ef:2e:5f:ee:d6:46:70:d1:7d:93:b0:1c:42:b5:66:d6:08:
f3:8e:73:3c:d5:ad:63:20:78:c4:8e:96:cd:37:a5:3e:f9:ce:
59:05:de:88:8d:3f:1d:d7:27:fe:7f:8d:1a:92:4e:c7:49:b8:
b1:74:e9:af:0f:a8:38:9c:d9:d0:8f:32:c4:9c:cf:cb:4d:c7:
63:15:da:d2:e1:b6:45:92:32:f0:84:39:bb:a3:1b:cd:f3:2e:
33:da:12:ab:58:64:d3:fe:39:b1:44:b8:14:62:6c:dc:ca:1c:
56:65:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:41 2024 by rpki-client on console.sobornost.net