Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/VH-E7tuBYicdGasqDwA3PX85jFE.roa
File: VH-E7tuBYicdGasqDwA3PX85jFE.roa (raw, json)
Hash identifier: IR5r8F8C9HTkvm1jdTo1lnYPLwPi0D17HcmAa9wh48w=
Subject key identifier: 54:7F:84:EE:DB:81:62:27:1D:19:AB:2A:0F:00:37:3D:7F:39:8C:51
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 01910CF5DAD71721DA10E109C7703BCF8523
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/VH-E7tuBYicdGasqDwA3PX85jFE.roa
Signing time: Thu 01 Aug 2024 08:02:04 +0000
ROA not before: Thu 01 Aug 2024 08:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56816
IP address blocks: 91.228.16.0/22 maxlen: 24
91.228.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:f5:da:d7:17:21:da:10:e1:09:c7:70:3b:cf:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: Aug 1 08:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=547f84eedb8162271d19ab2a0f00373d7f398c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:58:6a:38:e4:a5:0e:b6:2d:bb:10:af:1f:
06:72:cb:2d:7b:92:b7:b1:43:4b:d4:f8:41:09:c8:
6a:ff:8d:63:0d:c3:e7:ef:72:9a:a5:fe:33:40:5d:
91:72:26:cf:3c:ff:28:fc:c4:4f:c8:75:01:b8:88:
fa:35:ca:93:0b:cd:97:bf:6f:f8:7d:b3:0a:21:bd:
59:c0:d7:a8:57:1d:41:d7:93:3d:28:ec:fa:97:4b:
7e:81:75:8b:16:84:2e:bf:81:0f:8a:9a:1e:4d:32:
75:cb:15:de:bb:ba:2e:35:e9:b9:9a:88:51:24:44:
d4:39:07:3c:a5:0d:e6:13:99:04:64:c0:c1:ad:41:
57:58:b3:ab:87:4b:69:72:1a:ff:32:7a:91:97:bd:
a1:b4:d1:2a:21:e6:7f:68:92:fa:51:81:9b:a5:95:
27:ac:15:ef:dd:a7:26:8b:9b:e1:11:b7:53:5f:c1:
25:66:10:19:d3:fe:b2:b2:b7:3a:fe:b1:cb:da:fe:
c7:0b:08:14:aa:8e:34:01:2a:0a:78:9c:90:e2:7c:
5c:87:3f:c4:26:2a:b7:f5:64:62:b5:c7:df:ea:d7:
3e:b0:eb:c9:d3:a0:6a:ca:80:3d:e9:b4:1a:a0:a0:
58:c7:db:f8:75:8d:22:8b:1b:d2:1b:a3:51:21:f5:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7F:84:EE:DB:81:62:27:1D:19:AB:2A:0F:00:37:3D:7F:39:8C:51
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/VH-E7tuBYicdGasqDwA3PX85jFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.16.0-91.228.21.255
Signature Algorithm: sha256WithRSAEncryption
8a:4f:cd:5a:d1:7b:ec:85:72:06:d8:df:4e:50:df:0e:97:5b:
f9:02:ef:76:71:8f:c7:fd:33:a0:92:42:2f:78:7f:6e:b0:4f:
6d:1b:0c:a9:eb:33:c2:0c:ad:20:4a:1f:76:6c:70:d4:f1:96:
0f:ad:81:72:1f:22:3e:4e:f5:e6:c8:ad:1c:e3:b8:b3:ef:40:
27:31:8f:17:6d:d4:02:ef:cf:a4:a1:16:f0:41:8c:66:1c:48:
a7:c3:5b:c4:9e:56:13:3f:78:e8:ee:b9:f8:6a:14:1d:31:7f:
5d:af:cb:e2:0f:d2:87:40:3e:d8:1d:56:b0:e4:d2:ae:76:ff:
04:5e:6d:bf:44:46:9f:d3:aa:3e:24:e2:3f:56:20:44:62:fa:
29:c7:3d:2c:02:79:ef:ee:b5:37:76:f7:c6:d2:92:a7:c3:74:
a5:d2:81:52:51:0d:fd:7c:30:45:18:9a:aa:0c:ae:bf:63:2c:
3f:43:0b:a1:c1:b1:26:2b:f8:42:ad:13:a6:d9:a1:16:29:4d:
81:4a:da:14:e9:22:e8:46:6c:4b:c8:03:4d:c5:12:16:4b:da:
dd:ef:06:a8:3d:96:2e:50:4b:cf:e8:81:4c:1c:8b:60:35:05:
77:0c:64:ce:78:56:c3:76:cf:dd:89:31:cb:84:5b:bb:10:df:
69:50:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net