Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/NcXMvHSxfJvVjX0vPrHi-RaMJxI.roa
File: NcXMvHSxfJvVjX0vPrHi-RaMJxI.roa (raw, json)
Hash identifier: 6EajADAytIeiEHb7xNYIFLfmjU6n/XiQ1cwFvhCEAfk=
Subject key identifier: 35:C5:CC:BC:74:B1:7C:9B:D5:8D:7D:2F:3E:B1:E2:F9:16:8C:27:12
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 018CC500E1601DEE0B584D761B2AFD43E3EF
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/NcXMvHSxfJvVjX0vPrHi-RaMJxI.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43758
IP address blocks: 91.225.28.0/22 maxlen: 24
91.198.146.0/24 maxlen: 24
91.213.206.0/24 maxlen: 24
91.224.38.0/23 maxlen: 24
185.180.208.0/22 maxlen: 24
2001:67c:2e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e1:60:1d:ee:0b:58:4d:76:1b:2a:fd:43:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35c5ccbc74b17c9bd58d7d2f3eb1e2f9168c2712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:b1:22:97:08:d3:c1:da:88:d8:e0:9f:4c:
b2:b0:97:40:6c:5c:9e:c1:be:3c:e6:2e:fb:7c:b0:
5a:80:64:48:c6:ea:31:8b:63:90:8b:c9:6c:dc:8e:
03:a1:cf:6a:cc:4c:ea:bc:39:14:31:e0:d8:e2:3d:
1b:d1:c6:d0:7b:fd:60:e4:1a:79:4b:62:dd:1a:33:
a8:2b:86:18:87:e0:a3:02:f9:6e:d4:a9:1c:9f:d9:
70:ea:4a:fc:bd:02:21:a3:18:c9:a8:02:91:0e:e5:
dc:f1:97:d8:ce:1c:a1:86:20:f5:b6:ee:5d:57:e7:
32:57:0d:bc:0b:29:8b:8d:98:c3:08:1b:56:0d:e2:
05:77:f6:54:7b:56:20:1c:d0:58:bb:b8:bf:9a:ff:
ad:c1:34:4a:82:cd:ec:76:6b:90:5f:e3:ac:df:1c:
ff:55:92:ab:57:2a:6b:73:31:87:73:21:0a:3d:a1:
fe:67:4a:c1:f6:fa:af:84:e5:3e:85:28:0a:d1:7c:
ce:98:45:df:39:48:2b:5f:0c:61:ff:1e:4e:53:c4:
80:26:a7:ca:ed:a1:7d:f6:76:ff:57:61:48:c8:3d:
00:ee:97:c1:8f:e2:02:4f:00:48:b8:da:3f:7c:85:
a5:b4:d0:79:ff:e3:6c:5c:18:ca:40:7a:30:a2:32:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C5:CC:BC:74:B1:7C:9B:D5:8D:7D:2F:3E:B1:E2:F9:16:8C:27:12
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/NcXMvHSxfJvVjX0vPrHi-RaMJxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.146.0/24
91.213.206.0/24
91.224.38.0/23
91.225.28.0/22
185.180.208.0/22
IPv6:
2001:67c:2e0::/48
Signature Algorithm: sha256WithRSAEncryption
61:0c:95:67:ce:81:64:15:3f:c3:9d:d8:f2:80:ac:70:b2:c9:
e0:66:31:a3:fd:76:bf:d1:33:c6:3b:95:b3:e3:3a:73:3a:da:
43:d4:0f:52:ad:e9:41:dc:bf:5c:dc:1a:22:cf:53:0d:0d:f1:
52:22:11:90:9f:a0:77:20:b7:01:b9:44:50:94:dc:7f:3d:d8:
66:a3:88:d2:28:0f:54:37:fb:4c:d3:f0:bb:94:55:f9:56:9b:
2b:f9:72:77:fc:14:7f:c5:ee:5e:01:a9:0c:dd:b3:24:00:b5:
d8:8c:e3:dd:4c:94:80:fd:ee:21:34:5f:30:ef:17:26:01:6a:
a2:ef:4c:0e:a6:3e:7e:06:8c:5c:b4:d4:ad:62:cc:61:c1:37:
2a:48:e8:2f:a3:31:44:62:11:e5:e1:a4:43:a3:33:68:92:a4:
53:9b:1a:8f:da:c0:0b:f8:f2:6e:5c:28:83:9f:69:b7:02:d5:
bd:e2:f4:8d:aa:dc:f9:ae:5e:06:a7:3f:71:af:88:67:be:e4:
f1:40:83:d1:d6:86:61:02:5c:29:1d:a1:e5:15:64:ac:83:bb:
05:5c:13:6f:81:82:c8:95:54:7b:82:b8:6e:d1:9c:e9:90:e4:
51:05:d7:6a:ab:58:3a:8e:cd:db:a0:14:0e:1a:3f:72:b8:53:
d5:7e:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:48 2024 by rpki-client on console.sobornost.net