Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/3WRE7R811EtQqcGQG0MLdu4PZQA.roa
File: 3WRE7R811EtQqcGQG0MLdu4PZQA.roa (raw, json)
Hash identifier: S/XK83rlBJMRCHjXE1hlOCOR2OhgBrSKVi95B80jafo=
Subject key identifier: DD:64:44:ED:1F:35:D4:4B:50:A9:C1:90:1B:43:0B:76:EE:0F:65:00
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 0182EAE66E8EBE9181CAB8048D249D58E9B7
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/3WRE7R811EtQqcGQG0MLdu4PZQA.roa
Signing time: Mon 29 Aug 2022 18:39:06 +0000
ROA not before: Mon 29 Aug 2022 18:39:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 91.193.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:e6:6e:8e:be:91:81:ca:b8:04:8d:24:9d:58:e9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Aug 29 18:39:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd6444ed1f35d44b50a9c1901b430b76ee0f6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:ae:ab:51:8f:e5:5a:76:e3:d6:8e:06:02:
8d:a0:26:74:69:67:d7:38:bc:4e:a4:84:f9:e2:ed:
32:54:f2:ea:36:36:a3:3e:4c:29:6b:cb:94:21:31:
c8:54:06:c2:de:8a:f3:25:56:4e:e2:8d:39:64:49:
e9:3c:bb:51:fb:f8:4d:78:be:bb:53:f5:46:64:38:
10:94:81:77:5e:ce:64:cf:ad:cb:a1:15:e4:6c:5d:
25:f3:37:46:88:e0:50:75:10:13:ac:a9:9e:1d:ba:
4c:c3:82:c7:c4:8d:dd:34:86:5d:10:ae:83:b2:1a:
b4:6f:2c:2b:15:67:6f:83:aa:37:16:98:b2:a9:dc:
31:44:e5:25:25:98:b4:1b:82:d1:d4:b5:cd:33:9b:
4b:f3:36:14:9f:14:0e:19:42:d7:31:b0:98:f4:5f:
f2:41:c3:7f:bb:e1:55:a0:40:b9:36:39:4a:5c:ea:
e2:9c:f7:b4:94:2a:8c:4b:5c:c9:c5:52:66:5e:e2:
8f:0c:70:21:c6:83:2a:06:a9:fb:76:ed:86:f2:87:
a0:d0:13:fc:63:3f:46:1b:fb:07:48:95:8b:6c:df:
51:28:1f:27:1f:8b:96:dc:8b:5d:46:43:fd:3e:57:
eb:05:d8:27:83:73:de:0a:49:ec:02:02:8a:4d:fd:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:44:ED:1F:35:D4:4B:50:A9:C1:90:1B:43:0B:76:EE:0F:65:00
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/3WRE7R811EtQqcGQG0MLdu4PZQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.235.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b8:94:44:de:2c:8e:53:ec:8c:5e:62:9c:a2:a4:c0:75:f2:
88:cf:7b:c6:61:30:d9:b1:fb:60:0e:6d:98:28:e6:21:ef:07:
cc:45:67:e1:e0:3e:67:11:9f:dd:cc:d0:ad:95:74:fe:6f:cf:
59:f2:91:3b:6d:c4:a3:bd:78:67:5b:08:3f:20:75:92:82:20:
39:16:22:a0:20:57:cc:12:29:bc:35:b2:80:0e:6d:7a:38:4b:
cb:3d:73:39:3e:ef:6a:2b:b2:71:ba:fc:bb:58:35:13:2b:4a:
43:05:8a:5b:df:da:71:db:8e:01:6d:ec:7e:00:66:d7:96:ef:
0c:69:c0:d8:40:b8:10:8a:14:7c:36:51:91:bc:ba:36:f1:54:
34:2d:bc:c3:2b:b2:5f:6c:7d:45:af:58:34:1d:bb:d2:d8:8e:
1d:04:e2:03:78:96:4a:fb:87:73:40:d2:55:1d:d8:67:03:91:
ab:ec:b3:ac:74:ee:76:e9:d4:8d:3e:b1:b5:a0:55:4a:79:ae:
72:3c:d9:5b:7e:e9:4d:66:5f:b5:f6:0b:17:04:17:06:a8:ab:
5a:b7:2a:9a:ec:da:fb:dc:b0:d8:d3:6b:02:e5:72:96:6d:e9:
4d:16:e4:5b:9c:c5:f0:51:3d:7b:df:05:b1:82:ce:d3:c1:f0:
fe:3a:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net