Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/xpjh6JJYonH7JckhrdJr5hqzVgo.roa
File: xpjh6JJYonH7JckhrdJr5hqzVgo.roa (raw, json)
Hash identifier: jPkAvOZY1VX75M3ZHBAWVry9p+C7NClNIRfv8lZXIa4=
Subject key identifier: C6:98:E1:E8:92:58:A2:71:FB:25:C9:21:AD:D2:6B:E6:1A:B3:56:0A
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 0193AAE177247A3A0D96DA711786577B32ED
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/xpjh6JJYonH7JckhrdJr5hqzVgo.roa
Signing time: Mon 09 Dec 2024 10:05:23 +0000
ROA not before: Mon 09 Dec 2024 10:05:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213837
IP address blocks: 91.203.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:e1:77:24:7a:3a:0d:96:da:71:17:86:57:7b:32:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Dec 9 10:05:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c698e1e89258a271fb25c921add26be61ab3560a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:29:bb:96:43:60:f0:b1:06:77:28:1b:1f:
f1:3c:72:d2:db:11:e6:8b:db:e2:2f:15:e4:3e:c9:
ba:64:3f:a5:92:6f:35:34:dc:3f:02:ef:bb:07:32:
e7:85:b6:90:9f:31:31:fc:73:13:40:7c:69:2d:17:
9c:df:af:8e:c7:d0:e9:00:91:0a:4a:02:c3:17:1d:
33:54:cc:02:5a:e8:ae:31:eb:69:f9:69:83:7b:82:
2f:6c:d3:98:dd:68:ad:a9:06:57:e9:4e:3a:b6:5f:
3c:1b:6c:59:6b:6c:e6:92:fb:63:63:9c:16:9c:4a:
14:66:3a:c0:bf:51:10:a5:d3:4b:c2:58:56:54:8f:
03:93:1e:d2:7d:8c:02:7f:0d:20:56:cf:81:bb:72:
e4:1e:37:c4:54:80:6f:82:87:2c:bb:9b:fd:a6:46:
e6:cf:15:00:ac:08:98:0c:b1:39:bd:7d:43:65:b8:
6e:6f:0a:b9:6f:0d:04:9f:64:4f:e4:89:71:a1:5e:
af:6c:95:f3:b4:4e:a8:00:ec:55:02:93:91:87:98:
6c:5c:d9:a0:1e:96:26:a9:02:32:47:cd:52:87:cd:
08:1a:8d:39:18:ce:ca:7d:5b:cc:97:2c:5c:59:2d:
13:9c:cc:ad:ac:18:91:b4:a2:9c:f9:95:97:b3:f7:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:98:E1:E8:92:58:A2:71:FB:25:C9:21:AD:D2:6B:E6:1A:B3:56:0A
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/xpjh6JJYonH7JckhrdJr5hqzVgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4d:03:24:e5:3c:39:4b:33:74:11:70:db:60:08:7e:88:7f:
ef:07:b5:75:5e:7c:3b:a8:70:f0:80:2d:00:2d:18:61:5e:05:
74:d9:3f:e4:12:2c:12:45:1f:87:6a:cf:28:6a:13:a4:c5:14:
c9:74:ad:af:3e:d1:d0:24:e9:2b:95:7f:11:d6:e7:29:45:56:
d4:66:5f:a8:48:c6:23:00:de:41:45:45:90:09:2a:08:4c:a4:
f5:08:2a:29:00:ee:28:75:c4:f7:6c:34:46:e8:2a:0f:3a:87:
c2:d1:0e:f6:f1:90:47:ef:c2:44:bb:4a:0e:8f:c4:fd:63:d7:
ab:08:02:cb:32:11:6c:94:83:81:e2:bc:45:e6:69:a8:32:d7:
29:6d:31:01:1f:c3:84:47:58:34:df:17:83:5f:ed:49:80:4c:
f0:52:86:fa:12:3f:2e:2d:88:30:40:62:f5:1f:cf:4c:cf:77:
0e:82:36:ad:d6:03:19:df:35:8c:33:60:7f:58:89:b5:c4:89:
08:d3:1c:a9:a4:65:73:58:0c:b3:de:59:24:ae:38:77:6a:5c:
20:1c:9a:9d:7a:7d:17:2c:d2:eb:3d:4b:67:c6:29:78:c0:f3:
ad:2d:f9:bf:ec:5c:53:2d:22:83:02:ff:8b:5f:98:cf:e9:ee:
c5:dd:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:06 2024 by rpki-client on console.sobornost.net