Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/4U3iGL0sn10w1g76cXc8dov5GkQ.roa
File: 4U3iGL0sn10w1g76cXc8dov5GkQ.roa (raw, json)
Hash identifier: A83gaXWUCv2XBdeF1ORHK3MEtV+wKuXuNWO59qkPOqM=
Subject key identifier: E1:4D:E2:18:BD:2C:9F:5D:30:D6:0E:FA:71:77:3C:76:8B:F9:1A:44
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 01916A0A8FAABC7377841EEB733E0311C59D
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/4U3iGL0sn10w1g76cXc8dov5GkQ.roa
Signing time: Mon 19 Aug 2024 09:49:22 +0000
ROA not before: Mon 19 Aug 2024 09:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41152
IP address blocks: 91.227.246.0/23 maxlen: 24
193.148.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:0a:8f:aa:bc:73:77:84:1e:eb:73:3e:03:11:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Aug 19 09:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e14de218bd2c9f5d30d60efa71773c768bf91a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:4c:17:cd:d3:6a:d3:b0:61:37:d4:ef:ab:
34:e1:b9:d6:bd:59:15:74:64:e7:a6:6a:d2:b7:4e:
07:9a:26:3a:b9:9e:56:3f:72:52:90:fb:8f:fb:f1:
ca:2d:cb:cf:cb:c4:5c:9e:37:ce:44:58:bb:49:f9:
23:c0:6b:e0:5c:e0:c0:da:d5:ea:13:cd:e3:72:9e:
2c:7d:e5:c0:fb:94:ad:9a:16:61:2d:27:6f:ff:07:
ad:25:9f:cf:1b:5b:ee:24:e7:8c:5a:bc:ec:2a:d0:
6e:1d:8f:3c:7e:67:8f:f4:30:2d:33:65:3d:d6:24:
6a:1f:80:02:e4:f9:da:ca:68:dd:2b:42:3f:14:15:
e1:4e:f2:97:bd:84:0a:18:89:a7:55:e6:18:39:33:
c0:c9:16:81:27:c1:a3:61:47:e8:05:a5:6b:ad:3d:
32:8d:cd:7d:81:cc:bb:5f:35:eb:5f:3b:64:80:24:
ac:52:19:e8:27:1c:d4:2d:ee:41:96:90:8b:f9:90:
56:07:d1:5a:a8:48:5b:99:e2:45:c7:7f:30:94:a2:
41:7c:ba:4f:03:8c:ff:01:7d:79:9e:0b:7b:39:49:
cf:6c:0f:ce:a7:40:a9:30:c4:08:c9:5b:78:c7:62:
3a:9e:dd:8c:ad:ed:ec:9c:a3:29:ca:56:51:f6:47:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4D:E2:18:BD:2C:9F:5D:30:D6:0E:FA:71:77:3C:76:8B:F9:1A:44
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/4U3iGL0sn10w1g76cXc8dov5GkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.246.0/23
193.148.64.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:04:f7:ad:66:f9:8c:31:6e:5b:af:ea:3e:b6:f4:6d:41:dc:
01:c3:e6:e6:2b:c6:1e:c7:17:fd:75:67:05:9b:2a:01:67:66:
94:3b:1e:39:bb:60:55:b0:fb:9c:19:d1:b8:1f:8a:8a:c9:7f:
3d:68:fc:08:35:c5:e5:62:ca:6a:ab:75:89:0d:03:d7:1d:06:
a6:11:e6:0d:a0:c1:f7:e5:14:0b:60:9a:0e:e9:19:d0:54:43:
3e:fd:a8:c1:62:65:82:cb:48:03:ea:e6:c8:9f:01:7e:18:3a:
3e:08:fa:db:d4:81:f5:34:77:04:dc:c4:f7:86:f6:bf:c8:3d:
f1:0e:61:91:33:04:a2:c1:9e:30:4e:0d:ff:58:77:08:d2:f6:
e4:be:71:5c:a6:6d:c8:56:86:f0:ab:ff:00:86:b7:5f:39:5f:
c9:8a:c7:6c:2e:71:8c:9f:a1:2e:15:69:14:ed:28:e0:b7:d9:
16:e0:6b:1a:4a:e7:1b:c7:5c:d5:50:ff:f1:15:35:f5:2b:f9:
24:74:44:38:05:f1:e7:3c:50:5b:13:92:ae:a3:ca:61:80:c5:
87:14:ac:1a:69:50:41:b8:a1:6b:f4:88:09:92:4e:8d:83:3f:
e1:83:4d:d8:1d:8e:5a:82:e7:cb:53:87:b6:b1:40:1e:61:09:
bd:32:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:48:15 2024 by rpki-client on console.sobornost.net