Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/vV3OnmyMpXDti_Fu4IEmzP333Aw.roa
File: vV3OnmyMpXDti_Fu4IEmzP333Aw.roa (raw, json)
Hash identifier: GKiSinUu+s0RxItbYKiGe4byCmo5huQKktJyBzns3ig=
Subject key identifier: BD:5D:CE:9E:6C:8C:A5:70:ED:8B:F1:6E:E0:81:26:CC:FD:F7:DC:0C
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 0183AD1A1D6FF2EED36BF6B3D55C889A9F42
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/vV3OnmyMpXDti_Fu4IEmzP333Aw.roa
Signing time: Thu 06 Oct 2022 11:41:53 +0000
ROA not before: Thu 06 Oct 2022 11:41:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 91.193.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:1a:1d:6f:f2:ee:d3:6b:f6:b3:d5:5c:88:9a:9f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Oct 6 11:41:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd5dce9e6c8ca570ed8bf16ee08126ccfdf7dc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:8f:13:42:9d:64:b8:b7:d4:40:5c:24:af:
a9:c4:f0:c4:46:30:30:a8:6e:05:df:18:9e:a4:b2:
95:65:60:01:44:9b:46:a4:51:40:99:36:05:63:8d:
fc:4d:d6:5e:61:3f:f4:1a:2b:ee:c5:8d:03:5b:e1:
34:6b:6a:ac:c6:ea:e5:77:26:30:07:f6:0d:e5:45:
00:c9:46:f9:cf:e8:7d:b3:56:4a:20:ea:ba:9a:33:
de:dc:43:4f:d5:6f:4c:ad:5a:fa:0f:1d:18:e7:96:
8a:94:4c:8a:61:03:a9:9b:7e:7a:fd:18:bd:98:0e:
e2:11:0e:0d:0d:18:30:0a:e1:99:00:67:2c:95:de:
18:d8:ab:54:8f:42:26:e3:ce:dd:39:7f:b8:be:d9:
3d:cd:f0:1e:87:de:c7:cc:8f:10:99:46:95:7e:d1:
95:6d:f6:58:c6:cb:d5:98:31:7d:e8:5c:94:4c:e3:
0e:59:56:3f:a3:cb:e1:9b:9b:cc:6e:b2:1c:6c:fd:
97:eb:1d:11:6b:55:4c:c4:68:5a:7f:27:96:f6:bd:
3c:0b:36:c3:b4:53:af:0c:29:94:d1:11:34:b5:5d:
74:47:4e:b0:ff:4d:9e:59:3a:cf:b1:c8:50:b5:96:
c5:3b:ab:53:8f:74:b4:91:46:05:4b:a7:70:25:7f:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5D:CE:9E:6C:8C:A5:70:ED:8B:F1:6E:E0:81:26:CC:FD:F7:DC:0C
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/vV3OnmyMpXDti_Fu4IEmzP333Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.235.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d3:e7:28:e4:73:26:6e:6a:d9:db:2c:37:61:b8:b0:dd:98:
e8:46:e9:5d:c1:17:3f:07:62:e2:74:86:6b:17:0d:2f:03:88:
89:aa:67:bd:4d:26:85:0b:c5:02:62:3d:22:ec:ee:5c:02:13:
7a:41:f8:16:13:2b:b1:84:22:e7:0d:77:77:04:1f:5b:56:90:
7b:36:ff:2c:63:d5:11:61:cd:99:4e:5c:cc:cd:14:7f:87:18:
d3:e5:a3:9c:68:d1:7e:c1:31:96:0c:02:b8:72:7c:22:2e:9f:
fd:1c:d3:6c:21:7a:e9:73:b9:c9:0b:29:aa:31:42:2f:bb:6d:
57:da:dd:8c:f6:79:21:55:e4:35:8b:e7:0a:ce:f1:10:6c:76:
90:34:3c:9a:52:7f:cd:62:d8:bc:98:c5:04:58:d2:4c:79:0f:
e9:7d:63:d9:4d:ec:cf:3c:88:1b:77:9a:c7:b2:75:5e:04:ea:
5c:1b:0d:cd:5f:1a:44:62:de:50:4c:1d:63:6e:4b:fd:25:11:
2c:d0:00:70:76:f7:e6:b4:d5:71:ab:36:ea:d8:68:36:48:45:
7b:81:e5:10:14:3f:67:54:f2:21:b9:d0:04:b2:9c:90:1b:d8:
8b:b2:d3:82:e8:aa:0a:e2:09:6f:47:07:e8:fd:b1:81:5c:e4:
51:af:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net