Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/eWWNk8uIcLy9RY6gUmzaIm7cdh0.roa
File: eWWNk8uIcLy9RY6gUmzaIm7cdh0.roa (raw, json)
Hash identifier: hJYxQH1O9cQLtX77zFRHZ2XCZCvvuctd7Y+v/rZuyP4=
Subject key identifier: 79:65:8D:93:CB:88:70:BC:BD:45:8E:A0:52:6C:DA:22:6E:DC:76:1D
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 0192BE0C67F2C02D759B3808FE93E31CFD64
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/eWWNk8uIcLy9RY6gUmzaIm7cdh0.roa
Signing time: Thu 24 Oct 2024 10:22:16 +0000
ROA not before: Thu 24 Oct 2024 10:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 81.161.62.0/24 maxlen: 24
91.227.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:0c:67:f2:c0:2d:75:9b:38:08:fe:93:e3:1c:fd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Oct 24 10:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79658d93cb8870bcbd458ea0526cda226edc761d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:d4:3c:8a:06:6f:3f:d9:53:a5:ad:a0:a2:
d0:cd:a3:65:28:ea:a7:38:b9:c7:8d:95:b7:0c:d7:
6a:a9:66:a2:47:46:66:0b:c2:8e:19:f6:aa:35:dd:
b4:90:5f:19:b0:15:34:e2:3c:d8:30:bf:8d:be:14:
f2:77:9b:d8:2b:70:27:43:86:a2:00:12:57:69:2d:
42:c2:bc:09:0e:d3:2a:61:dc:59:eb:72:f9:93:5f:
17:76:c6:3f:57:00:17:8b:21:de:0b:f0:37:16:7c:
e7:63:94:74:48:13:b1:d6:99:00:3f:fd:b8:70:20:
e8:67:bd:2b:f4:06:a4:b3:17:d4:a4:8a:fc:c5:5a:
8e:cb:35:7b:83:c3:3a:3f:b5:97:47:02:13:78:7f:
37:16:d7:26:07:60:4f:28:af:9f:65:b5:67:ef:7a:
54:c3:46:ed:c4:e4:88:89:37:b2:19:84:4d:cb:50:
7e:9c:29:f8:5b:34:ed:ff:3f:98:d7:0c:b9:ab:af:
20:29:05:72:0c:dc:af:0e:18:8e:ea:0e:6b:90:c0:
c2:a8:d3:9b:71:fc:bd:ec:e4:57:67:c2:e0:b0:b3:
6a:7d:8e:e6:eb:06:59:de:42:4f:e8:b4:ec:be:5e:
2e:70:5c:04:04:49:c6:d7:0f:45:71:30:1d:c0:ba:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:8D:93:CB:88:70:BC:BD:45:8E:A0:52:6C:DA:22:6E:DC:76:1D
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/eWWNk8uIcLy9RY6gUmzaIm7cdh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.62.0/24
91.227.193.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8c:51:10:6b:a1:eb:c7:4a:b4:c7:bc:13:c9:9a:fe:64:9c:
1c:f8:c1:2c:4a:c2:32:3f:20:bf:4b:0c:d6:14:05:64:76:ac:
83:5d:29:f5:df:d0:df:83:7a:79:39:4c:87:69:1d:7c:c3:94:
26:34:3c:11:c8:2e:4d:8a:bd:3a:b8:fa:fd:cd:af:be:9c:3f:
69:92:1f:4a:cd:23:6b:0e:fa:70:e5:da:36:4e:ee:c5:b8:64:
ce:70:36:7c:7b:81:13:06:00:dc:e4:e7:5f:89:58:6d:72:74:
90:26:f1:2c:82:2a:24:f6:aa:8e:e6:4a:0e:1e:05:ab:40:e0:
b3:34:6d:7e:26:1c:f1:f7:29:64:7e:b9:82:be:a1:32:c5:dc:
60:80:46:0c:28:b0:93:c1:1a:3f:d7:2d:d4:2f:1a:8e:85:5e:
cb:1c:55:a8:90:d0:fd:52:c0:2f:bf:83:e8:93:8d:ac:ec:a9:
63:0e:0c:ed:6b:10:a9:8d:88:ad:96:f7:39:eb:d3:89:6c:1b:
a7:b6:bc:af:63:d4:0a:14:6c:78:c7:e9:7c:56:cf:c3:30:a1:
95:53:c9:73:3e:2c:35:18:56:e4:fa:bd:f4:f2:b8:ab:a5:d5:
c8:9d:88:9b:e9:2c:4e:7d:2d:78:b1:88:83:dd:6e:71:c9:fd:
3f:39:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net