Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2v1m9VpY6MWd2JFXJqTmtTZq_SM.roa
File: 2v1m9VpY6MWd2JFXJqTmtTZq_SM.roa (raw, json)
Hash identifier: C3kHTdmnOrPVV74y1hS95ps8JTxlRfXlND7LViHiHyk=
Subject key identifier: DA:FD:66:F5:5A:58:E8:C5:9D:D8:91:57:26:A4:E6:B5:36:6A:FD:23
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521AB5BFBE830E9A908CAD4BDA268EA
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2v1m9VpY6MWd2JFXJqTmtTZq_SM.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47694
IP address blocks: 91.211.16.0/22 maxlen: 24
91.211.19.0/24 maxlen: 24
176.124.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ab:5b:fb:e8:30:e9:a9:08:ca:d4:bd:a2:68:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dafd66f55a58e8c59dd8915726a4e6b5366afd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:dc:ef:e4:1a:2e:4d:99:ef:2c:71:e5:f4:
b7:0c:42:b0:11:40:cf:c3:91:8f:c4:8a:c2:c5:c2:
76:64:fe:62:09:40:5b:79:64:66:22:c2:5c:47:f0:
6b:32:65:c5:4a:fd:9d:3c:e8:12:09:cf:7d:43:91:
6f:3b:59:29:6f:2f:a1:05:62:e7:80:7c:73:d8:e9:
3c:3a:87:70:7d:de:c4:0d:15:b6:36:d5:4c:ce:12:
68:c5:c0:5e:60:43:de:68:14:b8:9f:b8:d3:d6:45:
e7:45:a6:8e:b2:10:2e:cc:15:42:eb:2b:a9:ef:ea:
32:da:19:2f:a3:67:3e:4e:da:8a:cf:e1:3a:6b:95:
0c:cf:98:36:f0:9c:cf:35:98:20:4e:88:ee:0a:5d:
76:96:8d:14:95:32:1e:1d:1d:dd:58:ee:3c:eb:9e:
15:b2:eb:73:2c:c7:fb:31:75:5f:47:b0:bb:87:7c:
43:4e:28:fb:59:44:a9:b0:f0:67:07:ea:e9:1d:af:
a6:68:89:6d:ea:7e:36:32:26:a7:eb:f3:78:c1:d0:
6c:16:72:28:cb:41:ac:37:a6:14:31:32:9a:19:ea:
65:de:b0:e9:22:8b:7f:68:34:fe:1e:d1:18:1c:ab:
f0:2a:ca:73:05:80:2d:09:28:25:a9:59:59:53:7c:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FD:66:F5:5A:58:E8:C5:9D:D8:91:57:26:A4:E6:B5:36:6A:FD:23
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2v1m9VpY6MWd2JFXJqTmtTZq_SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.16.0/22
176.124.0.0/19
Signature Algorithm: sha256WithRSAEncryption
86:29:c8:c9:ca:c3:66:bf:73:f3:7c:1c:b5:ac:dc:8b:03:11:
d2:87:5f:7c:a4:62:46:6e:e7:3e:ea:b0:3a:a8:9b:09:4f:74:
c8:5b:4e:81:ad:be:1a:de:3a:a2:41:b5:45:07:62:d8:5b:74:
1d:e6:9a:bc:cd:9d:60:3e:84:42:8a:0e:01:bc:a1:2a:06:0b:
43:17:47:92:b1:18:41:f1:f5:4c:c8:c5:77:48:3a:f4:03:64:
7a:c3:1a:c8:f0:48:19:10:13:fc:94:d5:52:9c:a8:11:9c:58:
58:ae:05:bc:a2:19:98:79:2f:cf:d2:d4:32:81:9b:f5:22:e4:
be:c0:3e:45:b2:9b:b4:f1:82:96:33:8e:19:aa:84:88:b3:ea:
63:04:e8:49:e6:5c:cb:d1:5c:29:fc:cc:d0:3d:60:be:66:12:
e5:5d:c3:cb:60:e9:c3:75:0d:3c:9e:e8:84:55:4b:de:ec:04:
1c:49:2a:6b:99:23:fd:47:84:07:d2:7b:3b:c1:03:d1:45:33:
94:98:0b:53:77:9f:5a:18:56:b9:a3:fa:07:97:6d:8b:fc:27:
93:85:4a:ad:de:bd:e8:f6:06:75:d4:a7:8f:bd:36:6b:1f:0a:
0d:64:9f:2b:40:85:5e:47:94:3d:fb:f3:b7:23:a6:5d:26:5e:
34:00:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:33 2025 by rpki-client on console.sobornost.net