Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/8V9ufGRAHMrpYOO_0r-3fBiZTds.roa
File: 8V9ufGRAHMrpYOO_0r-3fBiZTds.roa (raw, json)
Hash identifier: GnF+ctk4EvepyJM6on6Hdeo4tTOyCHjtu7CIh5uxrYU=
Subject key identifier: F1:5F:6E:7C:64:40:1C:CA:E9:60:E3:BF:D2:BF:B7:7C:18:99:4D:DB
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 018CC924C0B0154A1505368957174CDE0E21
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/8V9ufGRAHMrpYOO_0r-3fBiZTds.roa
Signing time: Tue 02 Jan 2024 07:47:58 +0000
ROA not before: Tue 02 Jan 2024 07:47:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207558
IP address blocks: 91.224.171.0/24 maxlen: 24
91.196.229.0/24 maxlen: 24
91.196.228.0/24 maxlen: 24
91.196.231.0/24 maxlen: 24
91.196.230.0/24 maxlen: 24
2a0f:d840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:24:c0:b0:15:4a:15:05:36:89:57:17:4c:de:0e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: Jan 2 07:47:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f15f6e7c64401ccae960e3bfd2bfb77c18994ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:3d:18:6e:96:da:f0:6c:bb:e5:d5:90:2c:
7d:f9:3f:02:82:98:39:ed:6f:7c:45:4e:73:34:06:
a5:79:d8:03:16:62:02:ae:ed:10:2a:16:82:5b:43:
de:8f:35:9f:39:21:30:4d:9f:20:e6:8b:0c:74:21:
95:96:42:f2:85:ad:3b:b9:1a:bf:00:ff:ef:f2:0e:
a5:60:3f:bc:0e:fd:11:4e:89:f9:57:9d:74:b9:78:
91:55:54:0a:d1:55:b9:f4:cd:00:d3:67:fc:1e:e3:
ae:0c:77:a5:2c:e3:07:17:7a:bc:03:e7:ba:21:53:
df:6f:d4:86:93:10:e2:5c:9b:1b:a3:33:97:85:c8:
9a:f5:44:4e:d0:72:e0:a5:59:21:72:87:c8:22:41:
5f:ad:5f:b6:ac:8a:92:75:8f:a0:6b:66:e9:7b:d8:
67:af:b0:cc:e4:74:44:0b:5a:d9:8e:09:51:45:9f:
c2:af:23:ab:a5:5b:27:e7:8f:16:e1:f7:80:27:cc:
6d:43:46:4a:20:42:4e:c2:13:42:f8:1f:89:48:e3:
f6:a7:b6:0d:83:56:b3:07:e2:9e:10:df:62:c2:83:
75:f6:d8:94:dd:e0:7b:d5:ea:2d:fd:e7:ea:52:0d:
cf:57:ce:c6:88:7f:19:d1:bd:2c:83:82:df:52:29:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5F:6E:7C:64:40:1C:CA:E9:60:E3:BF:D2:BF:B7:7C:18:99:4D:DB
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/8V9ufGRAHMrpYOO_0r-3fBiZTds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.228.0/22
91.224.171.0/24
IPv6:
2a0f:d840::/29
Signature Algorithm: sha256WithRSAEncryption
a6:d8:ae:ad:cd:99:ff:d8:dc:90:9b:d9:00:a1:d7:7d:3a:26:
b4:0e:60:ff:29:df:95:3a:d2:ae:c3:e2:d2:38:e6:d3:be:e0:
8c:7d:5b:db:a8:6a:a7:98:88:6c:df:ee:c8:b0:9c:37:0f:01:
e6:49:f4:56:30:37:03:4f:49:34:8b:cb:67:e8:58:f0:de:1b:
e8:f2:55:07:bc:f0:84:88:ff:e1:4f:e1:7b:f5:ad:e7:10:82:
d8:9f:40:99:7c:c9:c7:13:8b:53:2e:e8:81:71:ef:39:d9:83:
f2:c2:ce:0d:50:5e:ea:3a:7d:2d:3e:41:62:d8:57:26:ea:a0:
0a:16:c6:e7:9b:47:e6:d5:f1:4b:fa:75:33:56:87:ae:a1:56:
96:e2:56:75:70:50:6c:0b:84:12:ee:ab:ec:69:e7:6a:da:f6:
58:ef:b1:30:cc:e7:f7:e4:fc:8a:bb:44:64:82:e0:ba:3b:ad:
1d:b2:c8:30:f8:e1:86:bc:08:04:ce:ee:ab:27:a5:28:fd:9e:
aa:be:d2:67:b5:ff:88:39:f8:6d:97:1b:e3:46:3f:0d:b5:40:
9b:c5:55:c5:1b:d5:20:fe:27:87:5d:65:12:cd:47:20:c7:e5:
f4:84:a4:ef:c3:9e:86:93:df:5d:a8:6e:7f:bd:43:51:39:9b:
a6:11:a4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:26 2024 by rpki-client on console.sobornost.net