Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/_hvfpWAKiMV7iL7moW679YoZWTc.roa
File: _hvfpWAKiMV7iL7moW679YoZWTc.roa (raw, json)
Hash identifier: dEpJkKXAhNbNZ6GU8nA3Yvj0GitYUyownr9Gw1MdHS8=
Subject key identifier: FE:1B:DF:A5:60:0A:88:C5:7B:88:BE:E6:A1:6E:BB:F5:8A:19:59:37
Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Certificate serial: 019187D312A784BD540F582E58C5F0F980A2
Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/_hvfpWAKiMV7iL7moW679YoZWTc.roa
Signing time: Sun 25 Aug 2024 04:37:22 +0000
ROA not before: Sun 25 Aug 2024 04:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196658
IP address blocks: 91.213.102.0/24 maxlen: 24
146.0.88.0/21 maxlen: 21
185.195.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:87:d3:12:a7:84:bd:54:0f:58:2e:58:c5:f0:f9:80:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Validity
Not Before: Aug 25 04:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe1bdfa5600a88c57b88bee6a16ebbf58a195937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:22:d9:e8:d0:93:b6:ba:1d:d2:81:a2:0e:
32:50:d4:66:fb:ca:e6:4e:4a:de:36:2a:47:d8:be:
08:56:97:d5:9a:1e:62:73:55:5e:69:4b:12:18:c0:
0f:ae:a7:4c:54:e1:49:42:05:a0:e2:a7:8f:5a:f1:
fc:0b:fb:fb:a5:c0:ff:0d:e8:1c:b6:d9:3e:9b:8a:
bf:c6:c2:87:75:bc:15:07:dd:e4:20:6b:03:29:8f:
07:c2:fa:0b:3e:55:51:85:44:d6:ac:41:d9:6b:fd:
3a:1a:f5:f3:b9:ce:66:21:62:6f:7a:e2:1c:21:48:
c9:00:04:c7:b4:1e:54:46:07:f9:52:b8:f2:99:cf:
58:82:f8:1d:de:d3:9c:d9:91:d3:9e:dd:de:ca:4c:
5a:9b:bb:12:19:c3:61:35:89:41:56:db:35:31:73:
dc:78:84:b9:f7:aa:52:8e:47:6f:72:9d:28:b4:10:
81:6a:fe:29:e5:d7:b6:54:fc:34:1b:50:34:a7:fc:
26:60:6f:07:62:e1:e2:fd:3d:45:87:07:e1:13:f3:
55:a2:f0:06:f2:00:bf:e6:21:c0:c9:2b:3e:30:46:
73:f5:fe:72:24:fb:1d:39:b6:4b:aa:34:94:8e:80:
55:59:da:cb:a5:6d:fd:2d:8c:04:2e:e3:66:cf:4a:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1B:DF:A5:60:0A:88:C5:7B:88:BE:E6:A1:6E:BB:F5:8A:19:59:37
X509v3 Authority Key Identifier:
keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/_hvfpWAKiMV7iL7moW679YoZWTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.102.0/24
146.0.88.0/21
185.195.88.0/22
Signature Algorithm: sha256WithRSAEncryption
88:dd:d3:72:9d:18:d4:7c:53:d5:2f:81:f2:b2:03:ea:52:15:
c6:f1:a1:0c:5e:d0:d2:f3:ba:8f:e4:ae:81:3c:cb:27:b8:da:
74:f7:41:48:80:d0:c0:ce:28:dd:ba:90:49:9c:ba:c1:38:15:
62:3a:7e:22:8a:95:96:3f:02:23:44:a8:0e:ea:6a:0c:2b:b0:
fa:2d:44:0a:1f:12:03:48:d0:1e:b9:e0:94:70:d5:29:93:29:
14:e8:62:05:d6:5d:fe:af:42:89:69:40:4e:ca:43:71:7f:5a:
bf:58:b8:e9:01:ac:f3:f6:6c:05:d0:9c:a1:a5:e8:c7:0c:5e:
8a:c9:19:49:4c:78:be:67:cd:c1:50:f8:05:5f:41:b9:06:bc:
29:e4:93:13:61:3a:8a:5f:9e:e0:cc:72:f6:7b:78:70:ab:01:
93:6a:63:0e:a5:45:ed:91:95:f7:75:57:e1:58:47:db:66:cb:
40:c3:0b:c1:9c:ab:7c:9d:41:74:87:2e:5e:e7:ca:e0:78:a4:
6e:08:dc:14:dc:cf:54:36:1c:6a:42:5d:e1:6f:50:00:dd:8b:
bd:b3:0c:35:30:b7:0e:2d:aa:3b:97:36:0a:83:92:a4:98:77:
26:f2:e7:3d:bd:8f:1d:59:bc:8f:28:e0:55:c3:ff:74:46:de:
40:bc:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 04:11:49 2024 by rpki-client on console.sobornost.net