Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/BEL5tQFzlfcmdoB4Lv7KN1XrNDc.roa
File: BEL5tQFzlfcmdoB4Lv7KN1XrNDc.roa (raw, json)
Hash identifier: +370y8LX0fyerqC3Uzsz7vRAcnjIuZF+5Ln0L3znPCo=
Subject key identifier: 04:42:F9:B5:01:73:95:F7:26:76:80:78:2E:FE:CA:37:55:EB:34:37
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 0193A299678F98B52D4658B8F09B8328C0EF
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/BEL5tQFzlfcmdoB4Lv7KN1XrNDc.roa
Signing time: Sat 07 Dec 2024 19:29:42 +0000
ROA not before: Sat 07 Dec 2024 19:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.239.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a2:99:67:8f:98:b5:2d:46:58:b8:f0:9b:83:28:c0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Dec 7 19:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0442f9b5017395f7267680782efeca3755eb3437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:0d:ec:ea:9d:90:4b:b2:04:0f:5f:0d:74:
41:04:cf:97:02:9a:56:6a:b3:6e:5d:4f:c9:fc:9a:
23:3d:b7:17:13:5a:2e:3e:90:90:25:53:13:75:b9:
7f:2d:51:f5:f4:21:e3:19:f3:b1:c4:80:e1:07:f7:
e4:5c:cf:27:76:2b:8f:ef:b0:ad:b3:14:25:72:f7:
fe:c7:b8:17:f7:14:f4:b5:17:ec:aa:74:8d:88:47:
68:0a:68:79:aa:69:dd:65:23:d2:4c:01:c4:93:2b:
b6:e1:ae:d3:84:18:da:72:e3:41:3f:56:59:be:50:
fa:3e:78:31:de:99:df:e9:ea:04:17:c1:8c:c2:49:
30:fb:1a:fe:74:11:b8:a8:b0:1e:da:87:21:41:28:
c6:f8:05:fc:92:5f:3d:8b:4d:1c:23:f6:d8:fa:07:
74:53:eb:26:48:72:aa:af:74:f7:50:3f:d7:e5:be:
05:84:2b:f8:04:7e:8a:27:5b:99:5f:55:b0:9d:f5:
b7:2c:21:9f:2f:9a:52:36:3e:a3:ee:97:f8:88:f5:
72:5b:c7:de:e8:8e:72:79:7a:45:3b:e7:c0:a0:d4:
5a:73:be:fd:56:7d:f6:de:d3:ba:9d:57:27:28:26:
9a:7b:b4:23:45:89:a2:73:54:01:a0:9c:f8:ed:70:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:F9:B5:01:73:95:F7:26:76:80:78:2E:FE:CA:37:55:EB:34:37
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/BEL5tQFzlfcmdoB4Lv7KN1XrNDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:83:90:d7:77:6e:e7:31:e7:3b:d4:da:5d:b1:ed:fa:f8:a7:
21:d4:6c:48:2a:40:72:d2:8e:e2:57:39:e5:3e:ad:15:ff:62:
d9:4f:29:07:bc:42:e9:03:69:9a:53:12:ad:9e:84:b0:49:b5:
b9:46:36:1e:82:4d:6d:a7:75:68:a7:c7:16:6b:6a:dc:30:1b:
fc:4b:dc:4e:0e:d4:b7:c4:68:5f:66:79:81:05:e6:79:ce:b8:
58:50:b0:23:da:13:be:a7:94:cf:86:ee:37:08:da:86:01:44:
cd:fa:8c:64:8f:ec:44:93:76:73:e9:9d:73:f2:dc:d6:d0:d4:
8f:0f:a1:73:75:45:e7:25:ce:ca:eb:30:f5:b0:0c:70:62:5b:
f3:a4:d1:17:c6:63:aa:42:b8:a1:16:20:29:df:a2:4b:65:c4:
86:b2:55:dd:68:51:59:75:28:e5:f8:98:17:b0:89:28:9e:51:
fa:3c:a9:1c:72:ff:aa:d9:18:01:9f:cc:82:e3:20:93:05:97:
cb:b1:49:9b:70:a8:4e:a9:5a:0c:79:e3:43:d6:97:1a:db:22:
c0:94:23:20:02:cf:07:82:bf:31:cc:00:67:47:70:25:d9:ae:
ff:31:db:63:f0:51:fd:bf:4e:6f:71:d0:cf:f3:19:0a:8a:87:
18:2b:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net