Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/M1jMeZyYwHQnlvahQ6LhHZOpK7A.roa
File: M1jMeZyYwHQnlvahQ6LhHZOpK7A.roa (raw, json)
Hash identifier: fqUp9VVQr+0m610jX81XMWTkRvboQpAmKVIFRC5MjNg=
Subject key identifier: 33:58:CC:79:9C:98:C0:74:27:96:F6:A1:43:A2:E1:1D:93:A9:2B:B0
Certificate issuer: /CN=07996b3ac201e8b9b81fc97a160e94914304f99a
Certificate serial: 0182595E37C586FC8B4A3E6E9D2E299F87D0
Authority key identifier: 07:99:6B:3A:C2:01:E8:B9:B8:1F:C9:7A:16:0E:94:91:43:04:F9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/M1jMeZyYwHQnlvahQ6LhHZOpK7A.roa
Signing time: Mon 01 Aug 2022 12:25:23 +0000
ROA not before: Mon 01 Aug 2022 12:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 91.210.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:59:5e:37:c5:86:fc:8b:4a:3e:6e:9d:2e:29:9f:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07996b3ac201e8b9b81fc97a160e94914304f99a
Validity
Not Before: Aug 1 12:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3358cc799c98c0742796f6a143a2e11d93a92bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:09:11:a0:d7:11:1f:8c:dc:f8:ba:40:79:
5d:5d:78:70:2c:25:37:10:66:6c:bd:0f:8f:dd:20:
84:d8:3a:bf:22:ca:dc:09:c6:8c:21:85:be:9f:7b:
e3:6e:55:6c:7b:1f:8c:95:a2:2a:a1:8e:b9:5a:9c:
29:aa:66:3d:f4:5c:fe:49:01:02:f3:cb:9f:91:fb:
e8:2a:7b:02:28:d2:cc:30:96:fe:7f:02:4e:67:01:
43:15:d1:ee:df:e8:92:6f:09:94:fc:72:e9:eb:58:
7d:c3:6b:2e:3e:ad:7b:de:3e:fc:a3:5a:6c:e9:97:
c4:1c:94:1e:34:d4:b1:39:4b:99:99:37:8e:58:69:
5e:0c:76:2f:26:d6:ff:6b:7d:6a:63:5b:84:e7:a2:
88:0a:d1:f5:39:13:dd:9d:74:45:b6:8e:92:0e:f4:
3b:9f:5a:14:25:c8:d2:85:52:7a:1f:3d:c1:19:d2:
c5:4f:a5:77:54:f7:77:7d:d9:1d:dc:f3:a1:c6:c9:
87:c5:b3:aa:93:11:0b:49:7b:47:0d:92:6f:a9:1e:
e0:fa:0f:f3:b6:e1:3d:f8:13:51:c9:95:06:4c:3c:
38:1c:d3:24:3d:0e:95:9e:8d:90:2c:2e:bd:67:24:
05:0f:42:5f:1c:2d:b6:51:7e:e8:39:95:95:84:35:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:58:CC:79:9C:98:C0:74:27:96:F6:A1:43:A2:E1:1D:93:A9:2B:B0
X509v3 Authority Key Identifier:
keyid:07:99:6B:3A:C2:01:E8:B9:B8:1F:C9:7A:16:0E:94:91:43:04:F9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/M1jMeZyYwHQnlvahQ6LhHZOpK7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:b0:94:7b:2a:73:3b:b3:6e:ca:b8:c0:7c:8e:67:86:40:e2:
2c:0b:a7:76:1e:17:87:79:0c:ac:9d:93:0e:29:3b:fe:2e:81:
90:07:a9:3d:7a:b9:13:0a:bf:55:e9:94:f9:5c:a1:62:e8:bc:
f7:82:e1:2c:fd:48:42:54:6d:d5:1c:14:57:95:f7:46:0f:9c:
9a:7a:b6:bc:af:c5:5d:56:c6:d1:6c:a7:eb:08:1f:73:55:cf:
7e:ee:a7:62:f4:a4:06:6c:b8:83:8d:f6:93:2a:b9:fb:72:62:
ca:dd:89:4c:22:b9:16:33:fd:9b:74:f1:2a:ee:0e:89:e0:a7:
13:d7:ea:04:f9:61:a4:d2:c6:53:2e:1c:5f:5c:d2:40:6e:23:
f7:05:df:10:20:75:a0:46:0e:49:23:b2:2b:c5:a5:04:21:30:
ae:82:43:e0:15:b4:04:7f:1d:da:44:3c:8a:ef:ce:fa:71:d3:
30:9e:fb:bf:3d:d8:3a:4b:7b:7b:0e:f8:ad:aa:53:2e:19:67:
4d:aa:02:d4:b2:48:c5:36:f5:2e:cd:05:a9:c4:30:f4:47:5a:
6d:ee:c9:56:1c:73:83:b8:40:d6:b8:b7:c6:d6:56:c6:61:d9:
3f:68:55:24:8d:ff:54:45:01:42:3b:53:00:0a:a4:fe:46:7b:
46:0f:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net