Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wr98ywqNciobcK2MNtzHhykZO9A.roa
File: wr98ywqNciobcK2MNtzHhykZO9A.roa (raw, json)
Hash identifier: okH6H8Qf8f7+qBxIcXqaFb3xLgNV0IpgVpWBbRDOx6Q=
Subject key identifier: C2:BF:7C:CB:0A:8D:72:2A:1B:70:AD:8C:36:DC:C7:87:29:19:3B:D0
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019170AEB233519630E2484CC2F0D112D31A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wr98ywqNciobcK2MNtzHhykZO9A.roa
Signing time: Tue 20 Aug 2024 16:46:22 +0000
ROA not before: Tue 20 Aug 2024 16:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214330
IP address blocks: 89.42.231.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:ae:b2:33:51:96:30:e2:48:4c:c2:f0:d1:12:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Aug 20 16:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2bf7ccb0a8d722a1b70ad8c36dcc78729193bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:40:c0:b4:d5:bc:83:1c:c9:c5:53:c8:3a:7e:
1a:64:bf:da:aa:05:38:7b:eb:3e:fa:1d:d2:3d:5e:
73:4d:2f:30:99:e5:26:5b:52:11:1c:79:40:0a:47:
47:74:08:c0:92:6b:ee:90:8d:ef:93:df:24:e2:bb:
67:39:03:d8:a1:05:f3:19:c2:c4:4f:0f:c5:de:c1:
d0:34:d7:c0:b6:bf:0d:df:c2:99:97:07:bf:6c:72:
35:e7:92:f5:97:b0:3f:8a:5e:05:ac:ec:dd:35:15:
f3:bf:45:7a:62:6f:32:81:81:20:80:3c:ef:25:db:
46:55:18:a7:9b:54:40:f6:cf:ab:1f:8a:aa:5c:81:
c9:d4:07:3a:a4:78:22:25:5d:da:7c:68:43:e8:4c:
5c:63:18:6d:6c:1e:98:3c:e9:45:b8:73:4c:31:60:
47:bb:cb:15:c3:28:4b:da:e7:24:a4:86:44:4a:9b:
7c:6d:5e:55:8c:4d:99:3a:5f:99:ea:b1:e7:38:72:
12:6a:bb:b7:4b:d1:6a:69:17:7e:df:6c:51:ed:9b:
30:81:61:1a:ab:0d:11:b5:50:e1:2a:80:95:6d:8a:
66:e8:b3:47:17:fd:eb:7e:ac:6f:28:96:7c:4b:73:
44:6a:2d:5d:42:13:40:e4:57:20:53:7b:6f:e7:85:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:7C:CB:0A:8D:72:2A:1B:70:AD:8C:36:DC:C7:87:29:19:3B:D0
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wr98ywqNciobcK2MNtzHhykZO9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.231.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3e:40:c5:90:28:aa:fb:64:ec:b6:68:80:bf:d8:50:59:7c:
f8:3d:ff:93:ef:0e:14:aa:d6:c3:15:a4:dd:3c:2b:d4:d0:4e:
14:6e:bf:6b:b9:43:11:2a:80:dc:98:9b:be:18:2e:c1:c6:9d:
0e:20:f4:dc:f7:48:1d:b4:bf:d6:b0:d1:e5:99:80:49:d1:3b:
31:c5:e2:cf:1d:75:90:0a:ec:78:ae:d6:eb:fd:59:5d:13:89:
07:f7:26:82:3c:f1:41:51:98:de:da:4f:4a:f0:8f:f6:a1:96:
ae:c4:49:bd:36:ef:17:6a:32:46:52:88:bc:8a:3c:ef:ce:91:
45:43:5b:2c:2c:65:3d:61:ef:56:84:f8:b4:be:9f:2d:b9:db:
2d:d0:66:ec:8f:6c:1c:a8:9a:84:7f:1a:45:0b:3b:41:3f:6a:
97:b8:9f:99:c5:b9:b3:b5:49:f4:9d:40:5f:93:55:57:b7:bf:
98:fe:11:b3:b6:12:ca:0e:48:e3:f0:b2:3d:6f:64:1f:2a:19:
92:ff:20:25:ad:c4:fc:9e:96:cf:f4:c7:1f:39:96:12:91:bf:
f1:e3:4a:dc:44:a0:5f:ef:a8:75:bb:75:bb:d4:0c:a1:10:ed:
56:15:98:f6:56:6b:dd:8f:83:43:86:a5:9b:f6:20:87:19:45:
84:f3:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:06:01 2024 by rpki-client on console.sobornost.net