Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SStCVAYWoQjg9oFqj9sfkPWjRMk.roa
File: SStCVAYWoQjg9oFqj9sfkPWjRMk.roa (raw, json)
Hash identifier: 2sWDrFCVoxzNTscJYcywXUJgR4To7pNu7KgE/vPgy20=
Subject key identifier: 49:2B:42:54:06:16:A1:08:E0:F6:81:6A:8F:DB:1F:90:F5:A3:44:C9
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 019320462BDE7D3226CF5D4C25E1E9D92188
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SStCVAYWoQjg9oFqj9sfkPWjRMk.roa
Signing time: Tue 12 Nov 2024 12:08:09 +0000
ROA not before: Tue 12 Nov 2024 12:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47694
IP address blocks: 91.211.16.0/22 maxlen: 24
91.211.19.0/24 maxlen: 24
176.124.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:46:2b:de:7d:32:26:cf:5d:4c:25:e1:e9:d9:21:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Nov 12 12:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=492b42540616a108e0f6816a8fdb1f90f5a344c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:d2:90:59:23:78:c2:82:78:cd:2e:18:e7:
24:08:0c:c5:79:a4:16:9f:4e:c3:80:de:cf:a6:32:
52:36:2f:03:4f:2c:5d:ea:f3:b6:5e:64:1e:94:6f:
28:b6:50:f9:25:ca:d9:f7:37:87:3f:e8:bb:e6:73:
b0:1b:d9:17:06:d5:15:f4:14:d9:0b:5b:7c:17:33:
7d:5c:40:c7:39:3a:94:a4:8c:87:28:53:f9:17:f4:
96:9c:ea:b4:d9:5a:0e:4e:1a:b1:79:b1:94:a0:11:
43:dd:5e:d4:cc:c9:87:d5:ca:0f:f5:aa:bc:0a:15:
c6:db:b1:10:c6:bc:b8:2e:c6:a5:10:12:fa:88:f4:
d2:7b:5d:a4:70:86:45:c0:65:f2:85:38:84:42:4c:
b7:5a:79:26:a1:87:ea:72:66:20:f6:13:ce:e9:5b:
eb:d8:bc:56:c7:99:bb:93:02:47:d1:a5:21:1a:2d:
5a:8c:63:3b:2e:73:28:28:e5:aa:db:80:17:44:8e:
cf:fb:dc:4c:e6:49:90:ff:38:ef:df:83:56:8a:5b:
ad:c4:07:ae:7f:4a:f6:48:8c:4e:7c:61:03:09:d7:
9b:68:76:7b:4a:b3:6d:88:f6:52:e5:0b:f8:64:7d:
e3:7d:13:6c:58:ba:d6:5e:c9:5d:ca:69:d4:68:70:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:42:54:06:16:A1:08:E0:F6:81:6A:8F:DB:1F:90:F5:A3:44:C9
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SStCVAYWoQjg9oFqj9sfkPWjRMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.16.0/22
176.124.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:6a:ff:68:47:f8:fb:cb:43:63:6c:bb:28:22:4f:bb:88:69:
c7:de:6d:c4:ad:e7:87:38:92:73:e8:54:55:02:c2:c4:0d:65:
d5:2e:06:c8:9d:a7:73:eb:91:c6:aa:f8:07:86:3c:1e:1e:91:
22:31:55:34:74:ad:da:a2:5e:cd:b8:0f:dc:fb:fa:da:56:7a:
1f:91:b4:e3:1b:7e:72:26:24:88:24:ca:79:6a:74:3f:b9:ad:
18:58:0c:11:22:80:df:e3:8e:1a:6c:b6:e4:c0:51:2f:fa:26:
f8:82:e8:ce:fb:32:a6:0b:bd:47:06:10:32:ea:5d:f9:7e:95:
26:f9:3b:d0:02:2a:88:c8:c4:e3:12:56:51:1f:96:d9:c5:d0:
b2:20:9f:a6:b7:50:de:2c:d8:51:1c:0e:97:c3:cb:84:56:75:
65:17:26:ff:e3:73:43:3f:1e:e7:3e:15:ca:d9:08:27:0c:a4:
2e:e3:00:81:6d:3d:88:40:89:7d:a2:73:6f:8d:73:6f:ae:d7:
b7:45:e0:9a:b3:63:0d:7d:fc:a5:e5:b5:f9:ab:2f:5c:77:16:
76:b3:95:6f:27:a1:ca:c4:1d:44:8a:78:1f:9e:4a:df:2b:0b:
49:fe:ca:59:ec:6c:a9:ef:95:ca:ac:94:ed:0b:60:46:87:af:
4c:3b:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:54 2024 by rpki-client on console.sobornost.net