Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/UXXjLOr2K-KqQ5kWAb1F3uKnyrU.roa
File: UXXjLOr2K-KqQ5kWAb1F3uKnyrU.roa (raw, json)
Hash identifier: hgNSCWzdXkdySn907ezNXGJhvw91Yvt0ZYVXGYcj3ok=
Subject key identifier: 51:75:E3:2C:EA:F6:2B:E2:AA:43:99:16:01:BD:45:DE:E2:A7:CA:B5
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 018CC3B74631710E83F4423B1A9352533F0E
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/UXXjLOr2K-KqQ5kWAb1F3uKnyrU.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50893
IP address blocks: 91.216.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:46:31:71:0e:83:f4:42:3b:1a:93:52:53:3f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5175e32ceaf62be2aa43991601bd45dee2a7cab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:b5:97:56:f3:01:64:50:e1:e5:9e:fd:c3:
e7:98:84:fb:a5:89:d3:83:a3:d7:50:72:12:89:90:
ba:94:b4:8c:17:d6:3e:71:bb:04:e5:f7:86:2a:b2:
99:58:cd:69:6c:b6:09:32:80:0a:34:8b:b3:33:75:
1f:9b:60:99:1b:48:9d:21:26:01:63:30:0d:34:70:
93:96:43:f7:3e:38:33:ce:55:7b:00:2b:77:c6:a5:
4a:d8:11:69:46:5a:31:4d:48:7e:90:ef:9e:c1:78:
66:b2:a1:0e:7e:44:b1:ac:18:76:d6:ae:5e:e6:b9:
12:21:42:f3:3f:09:d7:16:53:d4:f5:3a:4f:26:9b:
f6:00:80:d8:07:c1:88:dc:22:3e:80:9d:f3:98:36:
54:7f:c3:4b:77:e6:9b:26:3a:2f:83:82:ea:fa:b6:
69:87:ce:5d:7e:b0:ba:d4:5d:35:83:5e:76:2b:be:
34:b0:7a:f3:78:e3:96:7f:13:eb:4c:b2:24:78:0f:
7c:fd:4b:4e:d1:32:8e:a4:91:5b:1a:6e:34:32:00:
ff:9b:bc:c8:24:46:f9:6e:51:2e:e9:72:f8:24:1a:
0f:87:86:de:4f:47:ff:37:0e:15:89:67:66:a5:df:
1b:68:58:8e:c3:41:26:bb:d6:9b:63:46:91:b6:1f:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:E3:2C:EA:F6:2B:E2:AA:43:99:16:01:BD:45:DE:E2:A7:CA:B5
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/UXXjLOr2K-KqQ5kWAb1F3uKnyrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:17:34:ba:9b:b8:fb:42:4f:03:49:c9:21:c5:1f:ef:3f:c3:
5c:1c:e5:32:36:92:9e:ca:40:45:5e:cc:ff:3f:3d:e1:d1:be:
3d:e1:2d:51:74:14:01:34:27:c5:aa:ec:07:28:da:e0:24:41:
cb:fa:88:a6:be:8f:c2:36:fd:4e:3c:32:e4:54:04:90:5e:48:
35:f0:07:9a:19:76:d4:8c:b3:7f:e4:74:f4:52:82:09:87:f5:
82:f1:ec:63:af:85:77:2c:65:6a:c3:51:d6:d4:a3:d1:e3:af:
7b:08:24:f2:07:23:35:65:e2:2f:d0:ef:06:8c:b7:06:06:1b:
9e:db:2f:72:6b:04:a5:a7:6f:ae:7a:99:91:a0:25:ad:bf:8c:
ea:c7:8f:3f:32:c1:e5:4e:28:f3:ea:a8:dd:16:1f:81:cd:02:
c3:c7:39:63:5d:ef:c0:c1:15:94:50:02:86:76:a1:a9:df:2d:
78:d3:be:3c:ca:34:30:63:76:47:9a:85:15:1d:be:75:ab:13:
f0:39:2a:1d:aa:14:76:69:13:f6:f6:76:c9:a1:87:37:df:4a:
39:78:67:a8:6d:61:70:f2:7f:9f:4b:ab:bd:e4:6b:e9:4d:93:
1d:98:70:44:98:f7:4e:bb:bf:a1:b4:b1:69:0d:6a:72:9a:90:
0d:97:98:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:16 2024 by rpki-client on console.sobornost.net