Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/hpKz38JVgb6AcgMKLnGB0nhZD4c.roa
File: hpKz38JVgb6AcgMKLnGB0nhZD4c.roa (raw, json)
Hash identifier: a6xdnWuxsvp/h2rbYtXFfGghTIQWRpVcU0N22zYgPBo=
Subject key identifier: 86:92:B3:DF:C2:55:81:BE:80:72:03:0A:2E:71:81:D2:78:59:0F:87
Certificate issuer: /CN=7df8282089e28766512133d4236af415a37bd3d2
Certificate serial: 0192048F3BC3B9BF97E4F8115FB334FAECE6
Authority key identifier: 7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/hpKz38JVgb6AcgMKLnGB0nhZD4c.roa
Signing time: Wed 18 Sep 2024 09:55:48 +0000
ROA not before: Wed 18 Sep 2024 09:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49370
IP address blocks: 91.212.223.0/24 maxlen: 24
194.1.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:8f:3b:c3:b9:bf:97:e4:f8:11:5f:b3:34:fa:ec:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df8282089e28766512133d4236af415a37bd3d2
Validity
Not Before: Sep 18 09:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8692b3dfc25581be8072030a2e7181d278590f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:f4:78:4d:f5:21:56:04:bd:1a:4e:8d:bb:
f1:1c:2e:b2:16:5e:af:25:7d:43:49:d5:2a:29:8d:
0a:bf:15:47:b8:7d:aa:44:b5:5e:ea:83:e9:1a:2c:
5b:7b:3e:4f:3b:61:64:00:ec:3d:d1:f2:78:83:7d:
24:22:c4:d6:94:ab:64:7c:28:be:4d:91:49:d2:12:
a2:d1:fb:80:77:f0:16:1a:f9:b8:1c:30:a4:95:1e:
20:c7:a6:93:b6:c3:a7:d8:6d:b1:d9:f6:22:14:1c:
d1:52:31:61:5a:b8:3f:89:6f:a0:7a:cf:b4:88:78:
e0:2f:c4:7a:57:48:b1:2c:3f:e4:c3:8b:ce:74:6e:
7e:ec:d7:64:ae:19:5e:29:69:f6:80:1f:7e:c9:b9:
dc:46:f8:d3:e5:aa:db:5d:c9:61:ea:60:b1:5b:70:
fb:4c:21:68:c8:1d:32:3e:5f:ec:b4:a2:2f:ee:fe:
09:6d:6a:a2:e2:3a:5a:70:ff:76:b6:ca:fe:c2:9e:
15:7f:ed:a6:07:4e:3b:56:04:ff:38:8d:c7:b9:d0:
5b:14:35:a3:bc:05:bc:13:81:5c:d2:fc:4a:67:8f:
c5:16:cc:d9:f5:5b:7e:9b:2a:51:7e:f3:75:42:7e:
fe:f7:e4:b5:c7:95:26:75:53:66:73:21:cf:c6:42:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:92:B3:DF:C2:55:81:BE:80:72:03:0A:2E:71:81:D2:78:59:0F:87
X509v3 Authority Key Identifier:
keyid:7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/hpKz38JVgb6AcgMKLnGB0nhZD4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.223.0/24
194.1.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a5:f3:95:4c:a3:c8:94:71:b5:31:a1:62:98:1c:b0:74:2a:
d1:b1:60:61:53:0d:64:05:8c:50:98:41:33:5e:1d:12:20:cc:
99:6e:f0:1a:63:ad:c7:d3:15:ea:e6:62:b1:de:54:91:4c:d7:
09:78:aa:7b:fb:6c:f5:d5:02:9b:08:f3:17:c3:e9:74:0c:75:
66:53:a6:64:f4:fa:bc:22:60:71:34:54:cb:07:27:e1:cc:97:
7c:30:2e:3b:49:d6:56:19:a7:d2:67:e5:45:8d:4c:25:2b:3d:
57:0f:88:49:ce:8f:11:0c:02:7e:e3:cd:a5:05:e6:d1:ae:2d:
d9:61:03:d0:96:db:0f:2c:f0:bd:d7:6f:73:32:90:9a:14:b1:
27:77:ae:a4:d1:aa:06:b3:6f:28:ea:8a:58:d2:f9:ef:1b:50:
fb:cd:df:9b:ff:64:a0:8e:0e:44:86:15:1d:65:55:a3:42:0c:
1a:65:df:e6:f5:72:d1:8e:23:2e:a8:ed:16:ad:9e:8e:2e:da:
69:aa:2c:d9:b5:2e:7c:63:a0:98:7c:2d:a1:1b:67:19:e1:d8:
5e:70:9b:7f:e0:83:36:0a:ac:e2:42:f2:fb:bd:fe:65:38:64:
ac:df:00:fb:06:19:e6:a7:5a:97:0e:a1:67:20:cc:f6:cc:a3:
85:e4:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:03 2024 by rpki-client on console.sobornost.net