Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/v09rGvChiGjzpaqrtAURjL0-5QY.roa
File: v09rGvChiGjzpaqrtAURjL0-5QY.roa (raw, json)
Hash identifier: vwm2Fmt3aHG05VuPcruKsgLMk8G4VjRgdth8hyFm33A=
Subject key identifier: BF:4F:6B:1A:F0:A1:88:68:F3:A5:AA:AB:B4:05:11:8C:BD:3E:E5:06
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 0190B1183E7354DC50D592E290125C4A8862
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/v09rGvChiGjzpaqrtAURjL0-5QY.roa
Signing time: Sun 14 Jul 2024 11:54:34 +0000
ROA not before: Sun 14 Jul 2024 11:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16353
IP address blocks: 83.167.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b1:18:3e:73:54:dc:50:d5:92:e2:90:12:5c:4a:88:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Jul 14 11:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf4f6b1af0a18868f3a5aaabb405118cbd3ee506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:58:7c:8e:71:67:9c:7b:d3:5d:4e:80:2f:
6d:e7:af:2c:9b:4c:59:60:23:0c:a7:87:45:41:6f:
40:bf:ac:59:c0:fa:86:22:09:4b:6c:da:41:10:74:
0f:74:63:51:be:b4:79:92:8e:1c:ea:c6:a1:43:d0:
90:db:f3:aa:13:8c:ed:a8:03:73:9d:9a:4d:2d:0f:
fc:25:a6:e2:cd:23:a5:68:2a:02:8a:79:d3:ab:47:
d3:1d:e9:c9:fb:f9:58:59:57:65:be:41:34:1f:0c:
e9:7e:ba:85:17:a7:76:aa:d2:fb:98:32:7a:8d:66:
e7:49:31:e6:c4:6c:4a:f4:d2:2b:93:0e:20:d2:d4:
9d:70:34:fa:32:9e:a4:f7:53:ff:67:68:7c:fd:fa:
e7:d6:80:52:5e:4c:e2:f8:15:ba:1f:a8:ee:b2:fe:
ba:b8:68:7c:6f:66:b9:81:ba:f4:c8:0d:2e:37:bf:
6c:b6:7a:32:c1:dc:a5:32:47:f9:eb:95:77:68:dd:
9b:bc:a7:8d:8f:71:e3:84:ea:f7:22:7d:62:08:53:
08:ec:91:aa:74:d7:78:38:c6:06:05:22:f7:26:3a:
1a:30:ce:7c:45:26:55:d2:1a:50:ba:ad:19:64:61:
50:17:70:d2:9e:d5:30:cd:c1:f9:4a:d8:a9:e9:2e:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4F:6B:1A:F0:A1:88:68:F3:A5:AA:AB:B4:05:11:8C:BD:3E:E5:06
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/v09rGvChiGjzpaqrtAURjL0-5QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.167.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9c:d5:d3:4d:a4:23:19:91:0f:7e:e0:ef:86:ad:3d:94:d6:
08:8e:ae:00:13:77:20:0d:2c:71:76:d4:1d:71:42:cf:40:2a:
f8:b4:4e:2a:7f:6f:a7:dd:8c:c3:89:23:c5:10:77:b7:c1:de:
78:ba:6b:f5:b3:35:c2:4a:b7:7d:32:4e:06:a8:13:e1:db:6d:
4f:58:20:1c:3c:ff:6b:fb:f3:bc:eb:4f:6a:6e:c3:31:6f:93:
60:5a:47:2d:19:3d:54:b3:55:a5:15:42:3e:5b:b3:09:7a:e0:
09:48:ce:28:8f:b8:7e:db:de:34:52:23:fb:f8:a7:f5:ae:be:
a9:19:c9:fc:4c:fe:ac:07:c1:69:2d:97:f2:5c:98:33:00:b8:
6e:46:1d:66:65:bb:ce:71:8e:04:70:aa:53:a6:48:16:c3:69:
c1:45:79:73:23:1c:22:43:45:85:3d:fe:b4:59:38:e5:25:35:
c5:fe:ca:80:9c:7f:c9:c2:e7:24:b2:61:88:b2:b2:45:79:b0:
e9:84:61:80:ee:5a:57:36:ad:a7:ae:2a:97:46:7c:c8:23:9b:
42:f1:08:5f:9b:3d:bb:bc:be:fb:d8:d6:74:a5:89:44:87:fe:
4c:d0:8a:40:7c:f2:a9:f3:2d:69:2c:82:db:b7:21:a4:4e:2b:
91:39:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:42 2024 by rpki-client on console.sobornost.net