Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/3nsY-xdU99nx2oymooIvE_BEd_M.roa
File: 3nsY-xdU99nx2oymooIvE_BEd_M.roa (raw, json)
Hash identifier: uytNHr+tb7uQXiGkOg6IuRH6LgjLqPh75iKm3iSLVDI=
Subject key identifier: DE:7B:18:FB:17:54:F7:D9:F1:DA:8C:A6:A2:82:2F:13:F0:44:77:F3
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019376A07F7C2541CE3EF426DCE032DC9667
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/3nsY-xdU99nx2oymooIvE_BEd_M.roa
Signing time: Fri 29 Nov 2024 06:34:10 +0000
ROA not before: Fri 29 Nov 2024 06:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 91.206.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:a0:7f:7c:25:41:ce:3e:f4:26:dc:e0:32:dc:96:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Nov 29 06:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de7b18fb1754f7d9f1da8ca6a2822f13f04477f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:94:c6:e4:3f:22:39:f5:13:7c:f2:e6:88:
70:8e:af:42:51:41:dc:8c:4d:82:a7:e9:bd:41:3b:
46:9d:6d:74:5d:61:ce:cf:44:38:b1:82:73:3b:e7:
18:0d:8f:64:0a:ab:b7:5b:48:42:76:8e:16:7a:9f:
0f:36:ec:1a:be:d8:54:0e:4f:90:b5:b8:c0:74:8e:
f7:50:00:d0:a5:27:f9:bd:ed:47:57:88:c5:b8:be:
33:3e:6b:12:a8:f9:0f:bc:67:d9:bb:ce:43:0d:d2:
c2:e0:78:cb:aa:aa:53:73:26:e8:84:43:25:72:eb:
67:2f:d3:62:04:82:95:f9:1e:d3:91:06:ae:d1:32:
99:cb:c8:b8:f7:00:67:db:12:9f:09:40:35:57:14:
26:2a:a7:b0:71:1c:3b:0d:38:a7:87:f0:1e:08:e5:
d6:bf:da:c7:ba:c4:72:b9:39:1e:bf:e8:6a:62:c5:
88:41:70:c7:93:57:6c:8e:b5:8b:6e:78:85:31:d9:
c3:8b:ea:97:9f:ae:c6:ed:c4:64:e2:58:bc:e6:19:
27:84:30:7a:09:27:04:24:3e:59:90:78:50:a5:ba:
11:e6:8d:76:ea:fc:4d:53:e6:03:f5:2d:e0:16:c3:
51:86:fc:37:26:64:2a:b0:ab:99:bc:3d:b9:89:d3:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:18:FB:17:54:F7:D9:F1:DA:8C:A6:A2:82:2F:13:F0:44:77:F3
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/3nsY-xdU99nx2oymooIvE_BEd_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.254.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0c:d1:6e:06:86:92:b5:7f:3c:5c:ba:ca:7d:61:77:31:da:
a0:4c:6d:72:15:39:9b:d5:14:cf:da:71:20:c5:1b:c6:57:7e:
8b:b9:a1:f6:5e:91:c3:2b:fa:d4:7d:f0:59:10:20:d5:50:ac:
3f:2b:25:f1:73:e7:b0:ce:e0:b5:64:63:3c:3b:ed:5d:13:4f:
f4:a6:99:20:ad:7c:23:94:34:68:a4:4a:37:29:7b:e4:fa:c6:
0f:61:66:fa:bf:49:95:c0:0e:72:19:12:2b:65:b0:18:f8:3a:
58:e3:e7:b2:e8:dd:9f:7c:08:eb:83:e9:e1:89:0d:3c:e6:7b:
c6:53:b4:39:cb:00:30:e8:df:f4:14:81:5b:5b:7d:6f:5d:f3:
d7:2f:67:01:93:09:a8:3c:02:e3:f9:17:ca:6a:0f:73:56:85:
56:62:cb:50:b5:b6:c1:b5:05:0e:f7:57:61:50:b1:7e:62:fd:
0f:01:97:58:89:67:ab:26:40:5d:29:68:e5:54:c1:5c:21:5f:
70:fc:69:6d:00:2f:bc:bb:37:bb:29:bd:fb:9c:2e:5b:d7:5b:
55:58:b8:38:c0:b0:16:d8:d6:86:9d:97:42:46:f0:db:30:fc:
98:b6:4e:d0:29:21:16:ae:6d:4f:12:d5:28:64:90:f1:e9:64:
25:48:e7:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN2oH98JUHOPvQm3OAy3JZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDYyNzdlOWQ1ZTVmMGE3M2RhMzcxZjMwYjVhYzc5OTky
NzkyM2EwHhcNMjQxMTI5MDYzNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTdiMThmYjE3NTRmN2Q5ZjFkYThjYTZhMjgyMmYxM2YwNDQ3N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI+UxuQ/Ijn1E3zy5ohwjq9CUUHc
jE2Cp+m9QTtGnW10XWHOz0Q4sYJzO+cYDY9kCqu3W0hCdo4Wep8PNuwavthUDk+Q
tbjAdI73UADQpSf5ve1HV4jFuL4zPmsSqPkPvGfZu85DDdLC4HjLqqpTcybohEMl
cutnL9NiBIKV+R7TkQau0TKZy8i49wBn2xKfCUA1VxQmKqewcRw7DTinh/AeCOXW
v9rHusRyuTkev+hqYsWIQXDHk1dsjrWLbniFMdnDi+qXn67G7cRk4li85hknhDB6
CScEJD5ZkHhQpboR5o126vxNU+YD9S3gFsNRhvw3JmQqsKuZvD25idMsfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN57GPsXVPfZ8dqMpqKCLxPwRHfzMB8GA1UdIwQY
MBaAFCXWJ36dXl8Kc9o3HzC1rHmZJ5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUt
NDcxOTI3YTgzY2UzLzEvM25zWS14ZFU5OW54Mm95bW9vSXZFX0JFZF9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUtNDcxOTI3YTgzY2Uz
LzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW87+MA0G
CSqGSIb3DQEBCwUAA4IBAQBZDNFuBoaStX88XLrKfWF3MdqgTG1yFTmb1RTP2nEg
xRvGV36LuaH2XpHDK/rUffBZECDVUKw/KyXxc+ewzuC1ZGM8O+1dE0/0ppkgrXwj
lDRopEo3KXvk+sYPYWb6v0mVwA5yGRIrZbAY+DpY4+ey6N2ffAjrg+nhiQ085nvG
U7Q5ywAw6N/0FIFbW31vXfPXL2cBkwmoPALj+RfKag9zVoVWYstQtbbBtQUO91dh
ULF+Yv0PAZdYiWerJkBdKWjlVMFcIV9w/GltAC+8uze7Kb37nC5b11tVWLg4wLAW
2NaGnZdCRvDbMPyYtk7QKSEWrm1PEtUoZJDx6WQlSOfJ
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net