Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/Djj49smBJRNeau0gS3C5JM0IdLY.roa
File: Djj49smBJRNeau0gS3C5JM0IdLY.roa (raw, json)
Hash identifier: AvokbM//bgD/9PyCnc6E8CnFwvA3JDyhYmO+O2vpobk=
Subject key identifier: 0E:38:F8:F6:C9:81:25:13:5E:6A:ED:20:4B:70:B9:24:CD:08:74:B6
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 018CC64B62E4B55C8141727361CB8F845EDA
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/Djj49smBJRNeau0gS3C5JM0IdLY.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50912
IP address blocks: 91.216.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:62:e4:b5:5c:81:41:72:73:61:cb:8f:84:5e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e38f8f6c98125135e6aed204b70b924cd0874b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:03:80:2b:3c:8b:35:e6:a2:3d:0f:c5:52:
7a:f1:6d:18:0d:ad:fc:67:d8:4e:73:74:df:cd:8f:
ec:37:c6:94:a6:74:7b:32:b6:f7:0c:16:37:b9:e5:
a1:c7:a3:ce:59:51:1f:f0:ec:02:4e:d8:dd:1e:d4:
2f:60:d4:33:95:cd:b5:24:4c:44:82:ee:52:12:14:
ae:bb:6f:b7:f2:48:01:5e:61:70:70:a2:8c:2c:c6:
0c:6f:21:3e:d6:d7:46:c1:28:0a:67:f7:86:6d:71:
8e:0d:dd:ed:dc:09:2e:1e:b5:cd:d4:93:8e:74:20:
61:48:90:3e:1b:46:fd:28:fd:ea:db:f8:1a:1c:6e:
e0:d8:37:5d:fb:db:e4:4a:3e:88:ea:99:8e:fa:bb:
24:55:f3:b9:8b:c3:fd:3c:5f:5c:26:09:ca:17:09:
09:7d:fd:44:51:07:5b:55:80:9e:62:35:7b:91:94:
59:fc:00:db:32:49:af:32:35:d6:3c:15:07:98:a8:
71:d8:d0:74:00:9c:dc:b8:e7:08:cb:f8:f1:c3:da:
90:15:8c:c3:3f:44:4a:f1:52:b1:78:52:03:ce:fc:
d9:b0:09:ed:38:57:b2:84:4d:49:f2:c6:6c:80:f8:
d5:c0:04:d8:14:89:75:fd:d3:e6:9c:68:66:f9:8e:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:F8:F6:C9:81:25:13:5E:6A:ED:20:4B:70:B9:24:CD:08:74:B6
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/Djj49smBJRNeau0gS3C5JM0IdLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e8:9f:4d:f9:f6:c5:42:33:3f:34:21:7f:e7:4a:29:c8:cc:
3a:a7:90:3e:f5:b0:72:5c:5f:38:0d:eb:41:86:ac:65:d2:e1:
e8:fe:ba:f9:40:94:d6:5a:46:09:70:ff:6f:53:b5:73:45:58:
be:e8:af:31:2d:ee:4b:f9:0f:42:7e:16:bb:92:53:9e:19:f1:
a5:08:70:80:f1:d8:b5:c7:4f:28:64:06:bc:4f:22:48:e3:61:
2a:84:d8:be:bd:29:79:d9:22:ed:7f:23:9a:7a:1b:04:11:90:
e8:52:ec:f2:fa:29:4e:77:f1:c3:d1:64:dd:1f:42:1b:b8:dc:
4e:58:d0:6c:c4:8d:bb:50:e4:e7:37:3a:9e:8d:c6:ea:b5:dd:
8e:c4:cf:f2:e2:a6:d3:40:ee:96:a0:b0:1d:48:66:09:74:43:
a4:33:f0:ac:df:bd:48:57:23:ef:ae:df:7f:1c:2a:d8:46:06:
e5:ba:02:08:a7:4e:17:20:0a:74:5d:ed:92:f6:5b:dd:c3:70:
83:56:68:c7:56:a9:f0:15:95:cb:a6:29:a9:5b:1c:24:75:85:
da:99:48:46:07:37:6d:6e:9a:b3:ed:1e:ff:29:33:08:63:12:
7d:59:e3:b8:8d:07:9c:4e:7d:3e:21:17:c2:62:cd:e6:bd:96:
ff:a9:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:53 2024 by rpki-client on console.sobornost.net