Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/w-SsulSuHt4wh5q5YOeHGNKpez0.roa
File: w-SsulSuHt4wh5q5YOeHGNKpez0.roa (raw, json)
Hash identifier: zNp/fqXeHydFLp3h8elM8Chi9TADgF+TbS6cfPV1BTY=
Subject key identifier: C3:E4:AC:BA:54:AE:1E:DE:30:87:9A:B9:60:E7:87:18:D2:A9:7B:3D
Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial: 018CC5DD2B60CDB18178D2F672DE4E70A15C
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/w-SsulSuHt4wh5q5YOeHGNKpez0.roa
Signing time: Mon 01 Jan 2024 16:30:55 +0000
ROA not before: Mon 01 Jan 2024 16:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197368
IP address blocks: 91.220.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:2b:60:cd:b1:81:78:d2:f6:72:de:4e:70:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Validity
Not Before: Jan 1 16:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3e4acba54ae1ede30879ab960e78718d2a97b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:1e:c5:b4:5f:c3:be:58:1e:e0:cd:96:26:
b6:4a:4f:42:f4:c1:a9:83:17:1d:4b:1e:07:2d:8f:
ef:49:c3:bc:86:4c:0f:a1:88:dc:57:88:73:59:67:
e8:f8:bf:f1:d2:77:9e:3d:88:01:23:f8:8d:07:31:
74:3e:4a:4c:b1:fa:1a:fe:fd:82:6f:20:ce:54:fe:
de:68:78:fa:83:81:66:55:75:2b:1b:9a:c6:07:28:
dd:d1:96:68:67:2c:ef:88:08:ef:48:6c:a1:c3:94:
6f:69:f4:59:38:19:81:30:74:6c:93:2d:c5:0f:f9:
b1:3f:9b:0f:df:75:45:b7:08:2a:dd:6f:92:b1:3d:
73:95:b1:2b:bc:f4:0d:10:51:33:7f:c0:6d:88:c4:
8d:fc:d6:71:02:cf:99:21:42:da:25:31:48:f7:0f:
b8:97:69:e7:20:4f:5b:41:57:66:75:c1:f5:05:23:
92:ea:74:28:ef:4b:7e:52:7c:fa:8f:7f:6e:a1:a1:
bc:9f:ad:4b:11:81:5f:b3:71:8e:97:42:27:8c:75:
1a:3f:8c:06:c6:02:70:86:79:67:f1:95:de:d9:93:
38:75:b8:e3:92:ba:52:04:c3:a6:7f:29:e0:3b:fc:
a1:c9:9a:63:e2:05:e5:db:2a:0d:16:d3:d6:a4:4b:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:AC:BA:54:AE:1E:DE:30:87:9A:B9:60:E7:87:18:D2:A9:7B:3D
X509v3 Authority Key Identifier:
keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/w-SsulSuHt4wh5q5YOeHGNKpez0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.44.0/24
Signature Algorithm: sha256WithRSAEncryption
48:dc:4e:e8:2a:50:26:8e:44:a4:87:f6:76:10:c5:2d:c7:f0:
a7:84:28:e3:4e:4c:1a:5f:3f:87:18:74:86:a7:6a:e5:66:01:
63:2c:6b:6a:0f:74:87:76:0c:41:40:92:53:af:1f:07:5a:34:
6b:e6:49:a5:e7:13:dc:e0:19:fb:7b:f9:19:ac:66:c8:e6:1e:
e9:3e:1b:e4:e6:bd:3b:a6:97:04:6b:5b:98:30:ef:74:f9:7e:
3b:e0:0d:10:d5:85:ec:74:36:d2:8c:91:eb:33:14:bd:fb:5d:
bb:d8:8b:6c:9a:f8:df:9a:97:5e:3e:63:40:65:e8:ff:f3:47:
89:31:ea:da:4f:72:b8:a4:76:63:0a:29:e5:2e:4a:ce:ed:41:
2a:5f:94:ff:e7:99:86:3f:a4:53:e6:6e:fd:69:33:0c:3c:62:
5c:d1:72:1a:bc:e8:07:9d:39:35:8e:f7:55:46:7a:a1:c7:6c:
78:15:db:95:9c:59:8e:5c:67:66:ab:66:19:07:f2:da:49:86:
45:ff:d1:c5:74:71:09:25:33:18:fc:48:40:45:a7:1b:d1:a6:
75:8d:2e:54:89:c5:06:b6:d6:d8:df:b8:26:f7:8a:4f:5e:79:
06:2b:91:94:a0:dc:56:41:11:02:bc:77:08:2b:49:c0:f5:f9:
b9:b4:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net