Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b40d0-c637-42c1-9ba8-41b22a957ec0/1/yiwd9OxkUA24HOm00F9DQGHQExI.roa
File: yiwd9OxkUA24HOm00F9DQGHQExI.roa (raw, json)
Hash identifier: O6QOH+mCYfJfyt0rdQq1H8mC9yWYcbnrqvM7+ZuQZck=
Subject key identifier: CA:2C:1D:F4:EC:64:50:0D:B8:1C:E9:B4:D0:5F:43:40:61:D0:13:12
Certificate issuer: /CN=3f5969ad74a1e033da9769db80c15288e6173644
Certificate serial: 018CC794525813BA24FD040B2338F8188216
Authority key identifier: 3F:59:69:AD:74:A1:E0:33:DA:97:69:DB:80:C1:52:88:E6:17:36:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1lprXSh4DPal2nbgMFSiOYXNkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b40d0-c637-42c1-9ba8-41b22a957ec0/1/yiwd9OxkUA24HOm00F9DQGHQExI.roa
Signing time: Tue 02 Jan 2024 00:30:35 +0000
ROA not before: Tue 02 Jan 2024 00:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 91.209.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:52:58:13:ba:24:fd:04:0b:23:38:f8:18:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5969ad74a1e033da9769db80c15288e6173644
Validity
Not Before: Jan 2 00:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca2c1df4ec64500db81ce9b4d05f434061d01312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:b5:60:9d:93:e4:de:df:43:11:68:c7:51:
0a:0f:51:2a:7f:5e:1a:f2:ef:61:b9:b2:25:31:9b:
a6:0b:a0:a5:e7:22:d8:ae:84:a2:b8:90:03:cb:ae:
34:c7:ad:a4:e0:77:b8:41:34:58:53:75:51:a6:f5:
cc:d6:49:49:fb:60:9c:64:f4:e8:8f:aa:41:0d:5e:
63:e6:c2:cb:03:54:d3:35:5e:1a:f6:db:78:4f:32:
9e:12:92:c1:f4:7f:45:b1:68:12:cf:48:7b:9c:a8:
20:c2:1a:e9:3b:3d:61:4e:b2:1d:c0:6a:3e:94:7a:
6b:fe:ae:09:02:86:6d:cd:20:ce:b0:0e:9d:62:07:
03:39:b6:8b:d5:0b:dc:4b:f3:18:e1:f4:3e:e1:75:
b7:22:3d:3e:a0:b6:00:97:f1:10:0c:8e:7e:76:0b:
39:6d:61:7a:96:29:81:e7:c7:42:9d:97:a8:fa:a3:
1b:a7:be:29:56:35:a2:86:0f:b5:da:f4:db:00:56:
47:ee:7a:aa:93:e7:1f:ea:6a:75:e7:e1:a4:2d:2c:
51:57:01:cd:3e:71:69:09:e7:56:a9:ce:1f:19:1c:
ab:77:ba:4b:c0:f6:52:fc:3e:22:14:fc:55:ad:0c:
07:11:25:38:92:50:11:3b:d9:9a:0c:e5:51:4f:ec:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:1D:F4:EC:64:50:0D:B8:1C:E9:B4:D0:5F:43:40:61:D0:13:12
X509v3 Authority Key Identifier:
keyid:3F:59:69:AD:74:A1:E0:33:DA:97:69:DB:80:C1:52:88:E6:17:36:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1lprXSh4DPal2nbgMFSiOYXNkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b40d0-c637-42c1-9ba8-41b22a957ec0/1/yiwd9OxkUA24HOm00F9DQGHQExI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b40d0-c637-42c1-9ba8-41b22a957ec0/1/P1lprXSh4DPal2nbgMFSiOYXNkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.31.0/24
Signature Algorithm: sha256WithRSAEncryption
60:cc:41:4f:92:2c:66:0e:79:be:81:87:9f:ac:15:a9:15:fc:
21:21:d2:3a:26:26:75:80:89:ed:f8:e5:5a:8a:d8:08:3f:c1:
5f:8d:67:07:a6:90:03:87:33:1e:d2:e0:15:7e:81:25:de:98:
8b:e7:95:30:98:bd:56:12:91:46:1d:3c:72:c1:2b:ad:3c:0f:
00:62:d9:70:59:e3:e3:40:47:00:ef:39:f7:d9:eb:c5:7c:4e:
90:66:d3:39:9f:11:a0:17:0a:24:cc:d3:d4:a1:cd:d7:06:fe:
8e:b5:52:00:4b:7b:d3:4e:77:5f:f3:7a:a0:e3:f3:21:ce:97:
b3:34:54:87:45:48:56:24:c3:92:2e:be:bc:fb:ee:8f:73:6a:
55:a7:05:bc:90:9e:f9:b8:d4:b2:da:3e:44:c0:2d:bd:91:18:
03:1f:37:1e:9a:47:70:c2:78:bd:4d:c7:51:4a:41:a7:df:45:
7c:74:29:a0:ea:e2:eb:09:1e:8f:ab:c6:bd:6d:7f:f8:f6:2e:
af:89:62:a2:a7:8a:06:de:f9:cb:f1:b8:68:57:67:77:18:ac:
a3:c7:13:d6:64:12:56:49:9a:70:df:98:53:25:ba:9e:8e:c1:
85:86:3a:8f:08:8c:90:b9:60:e0:aa:bb:33:05:ee:a9:4d:69:
ef:63:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 17:36:29 2024 by rpki-client on console.sobornost.net