Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/WHzVF7UOTzPvDZXk7OmUaZZ3h8Y.roa
File: WHzVF7UOTzPvDZXk7OmUaZZ3h8Y.roa (raw, json)
Hash identifier: fcrGGorBnp32FpnQpt5ZBooxBo+jBqOdPino1gPQIWo=
Subject key identifier: 58:7C:D5:17:B5:0E:4F:33:EF:0D:95:E4:EC:E9:94:69:96:77:87:C6
Certificate issuer: /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial: 018CC8DEAB5FF023E39F3EB44B7D82C676F2
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/WHzVF7UOTzPvDZXk7OmUaZZ3h8Y.roa
Signing time: Tue 02 Jan 2024 06:31:25 +0000
ROA not before: Tue 02 Jan 2024 06:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51729
IP address blocks: 91.220.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ab:5f:f0:23:e3:9f:3e:b4:4b:7d:82:c6:76:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Validity
Not Before: Jan 2 06:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=587cd517b50e4f33ef0d95e4ece99469967787c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:d2:fc:13:8c:f3:81:3e:b4:e5:5f:24:57:
25:46:94:83:7b:05:20:05:56:0d:ca:bc:49:f1:ea:
e7:96:9b:44:df:61:1c:98:05:a2:08:20:3b:b0:e2:
67:ff:a9:2c:de:46:c4:d3:6d:2e:ef:3f:0f:2a:37:
70:f0:4a:6d:db:e7:f0:7e:43:19:4c:0f:db:7d:e6:
47:21:b5:1c:eb:01:2b:41:70:8c:da:d5:a1:f7:ee:
ad:5f:08:77:f2:8e:37:96:ae:17:e3:2b:6f:b8:80:
11:d2:b1:db:58:87:9c:72:48:93:d6:f1:cd:85:0b:
a6:0f:ca:16:89:61:5a:52:ce:7c:60:bb:f1:3b:5b:
bd:56:30:08:01:5e:26:5d:22:21:44:f0:a9:ca:38:
ae:9a:64:33:2d:79:f7:63:37:a9:48:06:06:3e:2f:
2c:b0:c5:d0:a0:0e:d4:e9:d8:33:6e:7f:43:75:fc:
a0:c0:c4:30:c5:df:3a:91:8f:f4:5e:8a:7a:a1:51:
91:38:23:b8:b6:51:c3:1e:7e:62:df:90:04:ac:88:
19:b3:15:49:bf:82:ab:57:88:25:98:14:05:26:30:
07:5e:c5:20:6d:b4:b8:4b:b9:c2:e3:61:a6:e2:25:
8e:56:c8:fc:02:f5:9d:d8:64:b9:79:c7:f0:c1:72:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:D5:17:B5:0E:4F:33:EF:0D:95:E4:EC:E9:94:69:96:77:87:C6
X509v3 Authority Key Identifier:
keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/WHzVF7UOTzPvDZXk7OmUaZZ3h8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.65.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f3:9b:20:9e:de:38:df:b8:ca:d5:2c:dc:1f:6c:4c:26:0f:
81:f1:07:15:f2:ed:57:af:24:b6:00:07:d8:a2:d4:7d:b2:f6:
9f:c7:13:50:1e:d0:7f:68:93:34:0c:1d:d2:ab:79:c6:e7:59:
73:49:aa:bb:88:bf:f6:53:4f:ca:55:50:e3:a5:b9:56:3a:2d:
f7:22:48:f0:9e:39:ff:8f:7c:a2:c3:b9:a8:7e:a7:e9:e8:82:
0e:0e:da:b6:47:ce:18:58:68:e1:c3:06:60:eb:0d:94:13:65:
35:ca:da:9f:15:d8:6c:1d:7f:c0:19:0a:6b:6d:2d:92:e8:49:
7f:2f:83:ff:0d:f4:0f:54:e2:3e:1d:71:1a:af:33:f1:1a:1e:
53:91:fc:ba:d1:a6:69:aa:c2:c4:ed:ec:a1:f1:9e:5e:c2:9e:
2c:fc:70:c8:50:c6:1f:57:36:66:85:fa:0b:98:d3:ed:60:29:
18:30:d8:6f:c3:c8:ee:d3:3b:b6:3b:af:b5:6b:b9:4d:76:6c:
24:4a:91:c0:81:91:94:75:0c:44:cd:0f:97:38:e7:8a:14:63:
23:83:11:ed:41:1b:83:ac:c8:60:85:00:c4:33:4c:45:67:c7:
af:64:a5:42:ff:a8:2e:d0:c5:bf:14:e0:c4:3c:6f:d6:77:b1:
b7:73:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:18 2024 by rpki-client on console.sobornost.net