Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/NoE7W6UWuZhCJ2xdlI82nZnU0zI.roa
File: NoE7W6UWuZhCJ2xdlI82nZnU0zI.roa (raw, json)
Hash identifier: HhcVFZoigBDAMyarjFBjH26bFDCskZieBWIUu1AyRLg=
Subject key identifier: 36:81:3B:5B:A5:16:B9:98:42:27:6C:5D:94:8F:36:9D:99:D4:D3:32
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 0193F841D85EC089E7C5ECA33A1E7D37EF8C
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/NoE7W6UWuZhCJ2xdlI82nZnU0zI.roa
Signing time: Tue 24 Dec 2024 10:41:24 +0000
ROA not before: Tue 24 Dec 2024 10:41:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213683
IP address blocks: 91.239.6.0/24 maxlen: 24
91.239.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:41:d8:5e:c0:89:e7:c5:ec:a3:3a:1e:7d:37:ef:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Dec 24 10:41:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36813b5ba516b99842276c5d948f369d99d4d332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:76:0e:43:3c:7a:38:03:a5:2a:c0:06:ca:
ee:26:1e:06:95:38:06:cc:9c:c7:ce:b7:d5:42:45:
fb:0f:ec:f6:20:2d:88:9f:a9:b5:77:b6:46:c2:2c:
67:ff:a2:24:a0:8d:09:82:bd:33:e9:36:08:39:87:
a3:5a:df:84:a2:30:df:9d:3b:5a:49:cd:32:90:a2:
a8:8a:7c:6a:e3:01:fa:a7:4a:72:b2:0f:b6:3f:4e:
da:fe:6b:72:e2:59:5a:08:a1:7a:db:4c:3c:df:c4:
8e:a0:27:e4:65:25:f2:8d:d9:b1:c0:29:d6:e0:b7:
f7:18:7a:28:d6:5c:5a:07:67:6c:f7:f6:61:d7:33:
b5:a6:60:37:fb:a6:09:15:21:86:3e:ad:a8:5a:d0:
dd:f1:9d:32:dc:99:92:f9:89:db:e7:79:94:aa:5c:
05:9e:6f:69:7a:65:8a:a2:fc:52:69:99:7c:4b:c6:
26:8d:60:42:c2:e9:41:c6:d6:0a:eb:b8:a4:15:db:
1d:2d:b5:d8:3f:42:4e:4a:87:cc:14:e8:8a:ae:e7:
6e:9c:8c:03:bb:07:5e:7c:7d:c1:a2:5e:94:e1:0b:
cb:72:58:5a:65:d3:cd:31:44:e9:bd:3b:e6:00:b4:
53:5a:85:b5:54:9a:cf:68:e1:5d:f7:2f:56:4c:66:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:3B:5B:A5:16:B9:98:42:27:6C:5D:94:8F:36:9D:99:D4:D3:32
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/NoE7W6UWuZhCJ2xdlI82nZnU0zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e0:f6:79:a2:1c:b5:a2:af:3d:fa:8b:3f:09:51:e2:4b:d0:
cf:a8:f7:45:a3:31:49:b4:ce:aa:a9:5d:cf:7f:d3:cd:9c:14:
a0:09:e1:3e:f3:5c:e9:bb:0f:54:d1:bd:1c:41:73:a5:3c:7b:
3b:b7:e5:99:d3:2b:04:39:3b:43:f9:37:f1:bb:2f:4e:e9:1c:
3e:80:f4:e6:49:af:01:14:56:85:7f:61:ec:1c:08:0c:7d:c5:
cb:e0:fd:9c:82:3c:02:a2:c5:ac:93:89:83:a4:19:a5:15:7a:
f7:75:ed:37:8a:1f:bb:5b:e8:78:7d:64:32:f9:6c:17:a4:a7:
20:2f:b5:8b:1b:1c:7b:03:03:3d:53:42:44:8f:cc:d2:56:c8:
a0:90:67:d7:64:c4:4f:58:1d:00:c9:a8:7a:2f:60:c9:32:50:
1a:2d:0c:30:0e:ad:85:0e:7d:de:cd:fe:5e:71:13:99:c6:30:
e9:4a:ff:86:12:94:ab:c4:c5:48:f2:89:7b:2b:8b:c3:fb:1a:
8a:1a:fb:d7:3a:cf:c6:5b:5f:45:86:b5:58:85:54:57:3e:2a:
f2:ae:ca:4c:43:35:4f:7b:7a:a7:3e:1f:53:89:f7:ad:2a:d0:
1c:06:b1:5c:bf:49:46:0f:bf:3c:eb:ce:fb:3e:c2:4f:8d:15:
46:55:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net