Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/DjtzpheTqpKVvYbv5EyswXQUpTA.roa
File: DjtzpheTqpKVvYbv5EyswXQUpTA.roa (raw, json)
Hash identifier: K+4HsS0Udmktdh3OoZVuioRKK5BdVGMDWVrPHlizZ3g=
Subject key identifier: 0E:3B:73:A6:17:93:AA:92:95:BD:86:EF:E4:4C:AC:C1:74:14:A5:30
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 0193E49AF20AC4C100B27108774E6F00606D
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/DjtzpheTqpKVvYbv5EyswXQUpTA.roa
Signing time: Fri 20 Dec 2024 15:06:19 +0000
ROA not before: Fri 20 Dec 2024 15:06:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213683
IP address blocks: 91.239.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:9a:f2:0a:c4:c1:00:b2:71:08:77:4e:6f:00:60:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Dec 20 15:06:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e3b73a61793aa9295bd86efe44cacc17414a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:f8:79:05:d9:15:81:48:02:46:46:c6:62:
15:ea:2b:5b:3e:b2:71:b9:d4:f6:47:45:09:2c:93:
36:cc:0f:42:68:71:f3:e1:bd:91:02:db:ca:ca:a0:
71:d3:33:85:72:47:50:59:0a:2d:76:9e:98:1a:ac:
b4:98:b5:6e:40:a4:9c:89:3e:f0:ec:53:6d:f6:bc:
3a:e5:15:c9:54:5f:c3:d0:ff:09:77:12:24:73:2b:
49:cd:ea:44:4b:11:72:88:a5:0a:64:d9:66:b7:ae:
c2:2c:49:f5:16:1c:02:73:4d:6d:0f:f0:9a:36:93:
21:80:4a:e2:c9:8e:f5:d7:d7:d9:1f:a5:4d:63:86:
9d:ce:03:23:a8:ee:df:62:81:c1:c3:83:09:7b:48:
9e:00:9a:21:8a:b4:43:4c:f1:9d:66:0c:83:19:88:
89:41:4b:4c:80:fa:1b:ec:b8:9e:69:1b:d3:80:e1:
c5:f1:a0:a1:c0:01:93:cc:f3:99:ad:27:50:a1:cd:
04:70:0c:23:f1:a6:83:72:45:14:fb:e5:cf:be:97:
13:d2:da:8f:3e:92:1d:75:c4:06:c4:af:6a:0b:66:
96:db:a5:cd:04:82:de:6e:6f:cd:45:92:1d:c0:66:
4f:e2:ad:f3:ef:a5:e9:01:38:b2:84:55:f5:cd:c0:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3B:73:A6:17:93:AA:92:95:BD:86:EF:E4:4C:AC:C1:74:14:A5:30
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/DjtzpheTqpKVvYbv5EyswXQUpTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.7.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ed:b7:6c:d8:7b:5b:08:9d:69:48:94:50:fb:7f:c0:be:31:
54:84:e8:a1:26:d5:87:75:e9:c5:61:a0:06:0d:9e:01:af:d5:
65:d0:88:ca:44:ab:aa:91:1c:b3:af:98:ba:07:b8:63:65:eb:
7e:16:d0:9d:d6:2a:1d:95:e8:d8:3f:0f:3f:85:c0:b7:5c:1c:
ad:ab:c8:c5:76:ce:b8:6d:fc:be:af:88:97:3e:3e:e9:3b:dd:
7f:72:b4:36:ca:b7:8d:18:26:40:ef:30:e0:59:11:53:74:97:
73:9d:c7:fd:f7:3a:6d:8c:87:d5:43:76:72:2f:c5:6d:e7:ae:
3e:a1:eb:5a:d8:18:e4:5e:43:e3:a8:8c:7e:ce:b2:17:6b:21:
18:46:3d:0b:f7:96:c6:99:13:9b:6a:19:e0:6c:89:04:60:8a:
d9:28:ae:f4:8d:57:a8:30:b3:75:69:66:36:62:ce:3a:f2:4f:
e0:18:2b:30:31:63:3e:45:9a:20:e4:2e:a5:39:0d:6c:ff:de:
9c:b2:ce:1f:2a:2b:a8:88:c9:31:93:1f:ec:e1:2f:35:07:a8:
32:75:68:ff:2d:f3:b7:fb:0c:d4:ca:d1:64:12:7c:b4:90:b6:
fc:2a:06:28:2e:3b:4a:91:1b:0b:d9:8e:21:f0:2e:d1:a1:e1:
fd:40:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:25:09 2024 by rpki-client on console.sobornost.net