Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/01skFwuxLHCz1HrhX1hcOzT88II.roa
File: 01skFwuxLHCz1HrhX1hcOzT88II.roa (raw, json)
Hash identifier: WoqOLiiChergYwWanWpXnAv7kJZJGQSi8T6Ay6JGCNU=
Subject key identifier: D3:5B:24:17:0B:B1:2C:70:B3:D4:7A:E1:5F:58:5C:3B:34:FC:F0:82
Certificate issuer: /CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Certificate serial: 01936885A88731F3C07C25E4E05F74AF9E75
Authority key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/01skFwuxLHCz1HrhX1hcOzT88II.roa
Signing time: Tue 26 Nov 2024 12:50:09 +0000
ROA not before: Tue 26 Nov 2024 12:50:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35434
IP address blocks: 91.222.212.0/22 maxlen: 22
195.242.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:85:a8:87:31:f3:c0:7c:25:e4:e0:5f:74:af:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Validity
Not Before: Nov 26 12:50:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d35b24170bb12c70b3d47ae15f585c3b34fcf082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:3f:6c:19:dd:79:9b:81:a6:40:55:ed:6f:
68:40:53:6c:14:3f:81:a4:31:93:fb:2b:2b:9d:6c:
df:3b:b2:cb:ca:51:68:c4:4a:8d:23:80:1c:93:e0:
a9:55:d6:86:dc:5e:be:07:05:06:d4:16:76:32:6b:
79:cc:53:24:aa:19:bb:51:6c:95:b9:80:c2:d0:10:
78:af:16:d7:27:91:e3:33:62:6a:e6:0b:81:f3:1f:
fa:16:b7:b9:d9:ae:88:94:72:06:8a:fb:28:9c:f1:
c5:01:74:63:c0:4f:e0:ca:4c:7f:20:84:39:21:a3:
33:76:e9:0a:bb:c8:33:68:bb:9d:d6:2f:3d:ba:62:
23:1a:0f:7c:eb:8d:42:ca:0a:ff:9c:ba:5d:70:02:
a5:d2:5d:a1:3a:d0:dc:da:d2:e1:41:33:81:b8:f5:
7b:ab:39:2b:16:fa:18:80:9e:0a:dc:62:89:87:63:
54:b3:67:01:a0:56:32:bf:a5:e5:e4:40:79:ee:9e:
e5:90:1a:9b:d9:f1:4f:3f:d6:47:c0:2b:d3:b2:6b:
ed:0f:79:83:52:4b:21:72:39:9b:79:d2:54:0f:57:
9f:77:15:4f:86:c7:9d:c6:fd:8b:b7:8c:fe:bf:d5:
ed:3a:8d:8a:6f:26:18:61:66:f2:94:84:9a:3a:f5:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5B:24:17:0B:B1:2C:70:B3:D4:7A:E1:5F:58:5C:3B:34:FC:F0:82
X509v3 Authority Key Identifier:
keyid:B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/01skFwuxLHCz1HrhX1hcOzT88II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.212.0/22
195.242.128.0/23
Signature Algorithm: sha256WithRSAEncryption
44:a6:4a:a7:eb:95:38:ff:03:b2:e8:d1:a4:65:fb:90:10:e0:
30:0e:70:ea:55:18:89:99:0d:ed:7c:15:a9:6f:15:ba:67:83:
47:36:f3:10:c4:1a:9b:aa:cb:b3:2a:9e:a0:2a:90:fc:b7:47:
a7:b6:1b:73:b1:03:51:76:4d:5f:e0:bd:c3:91:98:6c:b0:60:
a7:e7:50:bf:a5:1b:4d:b0:e2:41:6f:e9:4b:9d:5b:18:4a:aa:
0b:3a:f3:8f:c6:97:82:f7:23:4d:9d:fe:a3:ee:36:2f:5f:8a:
e6:37:90:3e:e9:cb:5f:98:1f:0f:15:64:31:ad:9a:76:d1:b8:
d9:a2:cb:24:ac:d4:d5:b3:c1:0d:a0:5d:b3:6f:8c:22:13:19:
e5:96:b6:54:ef:e9:88:d0:c5:5c:ff:84:d2:7d:54:9b:10:02:
a8:0f:37:c8:de:c5:64:78:55:c9:ea:2e:34:fb:d3:ab:63:69:
de:6c:dd:49:73:4c:6d:36:ae:55:d1:c0:b2:5c:ae:59:a8:04:
4c:6b:56:f3:d6:ed:a3:b8:49:47:5b:bd:17:a4:62:96:08:2d:
33:fc:84:1c:3a:65:fb:4d:fd:da:95:d0:c6:6f:38:69:64:4e:
75:40:a8:3b:b7:3f:3a:e3:35:88:34:54:db:31:dd:80:46:14:
d5:6f:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:18 2024 by rpki-client on console.sobornost.net