Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/mcm7P0ReJLjxZHXaFDKDRJeysZg.roa
File: mcm7P0ReJLjxZHXaFDKDRJeysZg.roa (raw, json)
Hash identifier: h9ARp9js2FNgiBl9q/5A3L0eI4JJsRRVdMScLpVtyNE=
Subject key identifier: 99:C9:BB:3F:44:5E:24:B8:F1:64:75:DA:14:32:83:44:97:B2:B1:98
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 0193F00ACE12AC9B7CC0BD582777ED8B5499
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/mcm7P0ReJLjxZHXaFDKDRJeysZg.roa
Signing time: Sun 22 Dec 2024 20:24:20 +0000
ROA not before: Sun 22 Dec 2024 20:24:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43674
IP address blocks: 91.239.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:0a:ce:12:ac:9b:7c:c0:bd:58:27:77:ed:8b:54:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Dec 22 20:24:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99c9bb3f445e24b8f16475da1432834497b2b198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:c8:e2:4f:1e:17:82:9f:bf:42:da:5a:2f:
9b:af:09:55:6a:4a:0c:00:d3:92:fd:85:b7:e8:91:
12:3c:ec:71:3b:ce:87:3a:12:95:cc:c7:bd:4b:d2:
96:0c:92:3e:5d:d8:b4:4d:d2:24:2c:f0:cf:84:22:
b6:6a:87:f7:37:08:5f:c9:a9:8b:f3:66:a9:7b:d3:
de:c3:57:56:23:55:2a:2b:db:93:4a:5d:27:88:c5:
72:7c:09:97:3c:e5:ae:11:ef:f8:de:e1:53:75:dd:
06:d7:a3:54:c0:86:c4:c5:97:7d:9b:58:b3:81:d3:
d2:26:6f:5a:5f:0d:32:0a:46:90:96:61:ab:0c:45:
3f:f9:fd:37:91:df:f4:20:ed:a5:40:55:79:88:41:
0e:5e:24:61:b3:35:97:c7:34:df:5f:27:76:59:f7:
5c:76:a0:dc:c7:09:d2:b2:9c:b0:d5:85:9a:38:a3:
50:18:61:d8:07:d2:df:20:62:9a:5d:b3:b9:bb:cb:
da:40:15:81:8a:cb:de:0e:6e:28:af:3c:b3:3c:9f:
72:61:67:14:d3:72:8c:b2:b0:3a:c1:d0:85:8c:0b:
04:4d:2f:3c:b1:89:0a:05:68:8c:87:bf:fa:e9:c7:
70:58:fb:2a:c0:3b:e6:3e:79:53:be:75:db:a9:8b:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C9:BB:3F:44:5E:24:B8:F1:64:75:DA:14:32:83:44:97:B2:B1:98
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/mcm7P0ReJLjxZHXaFDKDRJeysZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.168.0/22
Signature Algorithm: sha256WithRSAEncryption
63:80:10:fb:97:94:b5:f5:25:40:cd:f7:fc:dc:2a:40:d8:56:
fd:bf:c6:36:f9:ca:7b:23:f6:33:5f:1e:c6:e8:e5:97:c6:ab:
dd:0c:36:96:dc:2c:57:a8:4d:75:27:6f:3c:9d:cb:02:a1:70:
38:60:c6:89:9b:ea:0e:b9:bf:9c:d0:7a:65:81:32:d6:58:df:
c8:84:61:cd:de:02:81:29:10:78:82:38:4e:4f:c4:71:8c:ad:
70:80:ef:c8:69:b3:2e:9c:c6:4e:24:33:f0:ad:d3:dc:e9:0b:
42:bb:8b:b5:93:e7:2e:ef:1b:95:41:0f:ac:0a:86:b8:5c:9f:
99:d0:89:25:27:dd:e4:26:c3:ef:d4:fd:de:8f:08:48:30:30:
ee:59:93:90:7a:a1:0b:e4:a9:ef:6b:3e:29:f9:0f:49:c0:b9:
63:1c:36:c0:e2:c0:0e:8f:b7:76:69:a6:29:f5:00:b3:9f:15:
ac:13:71:4e:77:67:ad:ca:15:3a:3f:07:17:b6:56:92:db:11:
a7:f8:a2:0b:7a:82:7e:6d:cc:13:2d:1f:f7:d5:9f:66:d2:47:
aa:1f:e7:8e:ab:5d:de:0b:72:13:07:f0:73:5e:d3:9b:9d:07:
f4:be:db:c1:69:6e:00:26:86:5e:3c:26:4f:ea:2b:2a:35:06:
2d:e5:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:03 2024 by rpki-client on console.sobornost.net