Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/1-K1xY81yj6OJt06ThBHBqmmIZVM.roa
File: 1-K1xY81yj6OJt06ThBHBqmmIZVM.roa (raw, json)
Hash identifier: UTDsbJ10Te/u29lW54pivBWraFpl+1iBaOizJvdqcWQ=
Subject key identifier: F8:AD:71:63:CD:72:8F:A3:89:B7:4E:93:84:11:C1:AA:69:88:65:53
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 018CC8DE645AAD0140D7E578BDCFE6B214DE
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/1-K1xY81yj6OJt06ThBHBqmmIZVM.roa
Signing time: Tue 02 Jan 2024 06:31:06 +0000
ROA not before: Tue 02 Jan 2024 06:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59842
IP address blocks: 185.36.12.0/22 maxlen: 22
91.220.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:64:5a:ad:01:40:d7:e5:78:bd:cf:e6:b2:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: Jan 2 06:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8ad7163cd728fa389b74e938411c1aa69886553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:8d:06:f7:0b:97:3f:70:c3:c7:5c:52:da:
98:db:ec:d7:f2:56:41:e6:b6:de:89:37:8c:40:c4:
79:5a:6e:b8:4e:86:08:b5:d6:b4:28:03:d6:b4:a3:
ca:75:df:ef:8c:f7:9a:27:4d:25:ba:f8:7f:c8:3e:
42:cf:2f:1f:79:5e:e3:e9:3c:5a:b2:ba:ab:f1:c1:
7c:60:0d:18:9a:53:2e:9e:83:1b:98:33:85:65:db:
fb:96:e8:8c:0a:62:b2:e8:37:5c:f9:af:38:b3:cb:
94:87:db:d3:b6:a4:3c:9b:ca:1f:5e:da:8f:9b:d5:
4b:b0:a7:9b:3a:1d:81:37:e5:f9:ab:d5:7a:1d:7a:
b3:c3:95:8a:38:9f:6f:96:47:a7:30:c6:48:38:2f:
5c:f1:f0:c1:94:af:72:63:25:49:ac:f6:77:1a:06:
be:52:b8:b5:b1:37:06:fb:90:9a:70:7a:d8:10:21:
77:f3:1c:a2:3b:d3:da:65:e4:f7:9e:1e:af:31:8d:
a1:7c:12:6a:45:fd:d7:5b:ec:46:3a:81:4d:c5:a6:
cb:fd:c9:94:83:d8:8a:3e:e7:99:0f:85:e5:0f:f1:
f1:48:99:ee:82:39:b1:ff:59:5e:72:30:ed:1b:85:
8a:2f:24:c9:92:80:f9:13:ff:0f:0b:da:d9:b0:23:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:71:63:CD:72:8F:A3:89:B7:4E:93:84:11:C1:AA:69:88:65:53
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/1-K1xY81yj6OJt06ThBHBqmmIZVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.245.0/24
185.36.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:e8:62:b2:77:da:4a:5d:de:73:25:50:21:c3:03:cb:ed:66:
3f:97:43:5e:8c:37:ba:bd:81:51:ea:68:3e:53:ed:6a:0b:0a:
26:cb:56:b3:b9:d9:68:87:34:44:5a:31:b8:5e:f7:4f:b2:15:
3c:c9:fc:29:82:5c:67:79:5c:77:eb:59:8e:3a:50:57:b0:ed:
f1:10:56:c4:48:77:90:ab:8c:f5:cc:84:b2:3e:35:1f:89:ec:
69:6f:89:92:a4:51:f3:28:2e:64:76:8e:d2:4b:03:17:4f:6d:
ed:26:28:bd:14:7a:e9:68:03:41:f0:68:b5:c4:95:79:40:ca:
42:f6:b7:d9:5c:3c:92:26:f9:99:81:fa:93:e2:db:27:26:e3:
1a:06:43:b6:7a:29:97:25:69:82:d8:45:c6:f0:1b:1c:24:45:
e9:b3:90:d0:f8:db:e8:a0:88:11:6d:0a:eb:ef:b3:8f:ab:01:
9c:be:cf:2f:fa:97:ac:c8:b6:9d:18:5f:63:0f:6b:6d:eb:68:
e4:6b:52:1f:3c:d3:a4:42:3d:c8:6a:07:ce:69:69:76:a3:02:
98:47:75:32:a7:13:73:22:9d:c4:bb:d1:8a:f5:3c:00:35:52:
8d:51:94:93:97:1c:83:b3:7e:e8:e0:93:18:52:e2:69:93:a3:
f5:b2:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net