Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/xO6RKCqrMHIZ7I6B6mgHCMyA93E.roa
File: xO6RKCqrMHIZ7I6B6mgHCMyA93E.roa (raw, json)
Hash identifier: IHtxzqknSdxKkxe6S2VVYnULP+1N0GgBJs7AvaFHY7c=
Subject key identifier: C4:EE:91:28:2A:AB:30:72:19:EC:8E:81:EA:68:07:08:CC:80:F7:71
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 030CD852
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/xO6RKCqrMHIZ7I6B6mgHCMyA93E.roa
Signing time: Sat 01 Jan 2022 02:53:42 +0000
ROA not before: Sat 01 Jan 2022 02:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.193.232.0/22 maxlen: 24
91.220.249.0/24 maxlen: 24
195.8.200.0/23 maxlen: 24
152.89.192.0/23 maxlen: 24
152.89.194.0/24 maxlen: 24
152.89.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51173458 (0x30cd852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Jan 1 02:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4ee91282aab307219ec8e81ea680708cc80f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:28:62:fc:42:2f:10:d5:40:35:73:b6:0e:
75:39:aa:e5:28:47:e7:10:09:2c:eb:dd:51:f8:af:
dd:e7:8c:33:27:df:8e:25:a7:67:eb:ac:56:f0:12:
eb:1a:38:fc:ea:ce:b3:8d:8a:ac:d2:ca:2e:e6:f5:
5b:ac:39:92:6f:37:68:b3:45:18:52:2b:2c:71:1b:
f1:78:72:73:52:aa:72:d7:eb:84:15:ff:13:15:b8:
04:40:dc:e1:06:bd:9d:4f:30:88:38:c1:89:31:c3:
28:13:29:6b:ce:67:f7:27:8d:54:35:7d:8a:84:30:
fc:93:00:8a:49:36:55:15:97:f1:bb:ef:16:4f:bf:
37:04:fe:82:03:20:17:c2:bf:7b:55:66:09:50:43:
cd:3c:09:2a:81:3d:db:e8:60:7b:5e:01:1c:59:d4:
10:a2:b7:c1:06:60:48:01:1d:49:77:4e:b9:49:15:
bb:de:3c:22:17:50:ac:cc:e5:bc:69:bb:f6:9c:0e:
1f:42:62:80:8a:2d:6d:b7:c8:13:d1:86:09:e2:e3:
f1:c5:c4:a3:2c:6e:d8:71:6c:3e:b7:fa:6a:19:f7:
73:41:01:30:cb:3c:fa:3b:cf:50:b2:eb:d0:c1:dc:
48:d4:4a:89:48:88:3c:85:2a:c1:c5:2e:98:8b:83:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:91:28:2A:AB:30:72:19:EC:8E:81:EA:68:07:08:CC:80:F7:71
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/xO6RKCqrMHIZ7I6B6mgHCMyA93E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/22
91.220.249.0/24
152.89.192.0/22
195.8.200.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:a5:ee:08:b8:00:7a:51:72:f5:ab:da:6d:b0:19:01:99:83:
82:9f:3b:ed:ac:eb:73:5a:2d:0e:3a:57:ff:f0:fe:59:e9:f2:
02:6a:44:34:6b:9b:a4:bf:a0:c3:8d:4d:09:64:f7:6c:7f:f6:
0d:10:7e:ea:22:8f:59:17:d8:52:09:66:2f:14:e9:5a:c7:b2:
61:b6:bd:d7:46:56:b0:7b:91:a3:9f:cf:40:aa:0f:21:d0:28:
5e:4e:90:56:25:9f:2c:46:c8:62:46:dc:7e:78:68:54:25:77:
bc:f6:15:a4:29:61:26:0c:36:8e:e0:88:9b:87:03:1b:87:55:
2b:e0:7f:b1:b0:57:a5:d8:88:7c:c5:4b:e2:b5:31:43:1b:56:
71:3a:9c:e6:0a:c7:31:42:86:f3:02:f2:aa:ff:c3:23:87:dc:
d6:74:7e:84:e2:e2:b0:1d:4b:30:2a:a3:a0:7f:c3:b8:d5:5d:
9e:57:2e:db:31:1f:01:64:3a:0c:d0:47:b1:09:89:1f:28:f8:
bd:98:b3:08:20:ca:67:00:4e:0b:3b:19:49:ae:e1:b4:27:78:
30:df:09:09:5f:47:b8:bf:29:52:4e:40:5d:57:65:ee:5a:96:
46:88:b8:0d:cf:86:df:6a:cf:d3:0b:6b:cd:d9:5a:6c:07:38:
c1:19:88:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net