Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/clcDEI7Uy2dQ_Q2EqZDrvu8mDno.roa
File: clcDEI7Uy2dQ_Q2EqZDrvu8mDno.roa (raw, json)
Hash identifier: 9KNTA/Rys8YgT9MMLPnAwyupC7sVkE+47e/++q3ymGI=
Subject key identifier: 72:57:03:10:8E:D4:CB:67:50:FD:0D:84:A9:90:EB:BE:EF:26:0E:7A
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 01911C8D8E6D020CC0AAF78881309A5D6C3A
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/clcDEI7Uy2dQ_Q2EqZDrvu8mDno.roa
Signing time: Sun 04 Aug 2024 08:42:04 +0000
ROA not before: Sun 04 Aug 2024 08:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41152
IP address blocks: 91.227.246.0/23 maxlen: 24
91.228.23.0/24 maxlen: 24
193.148.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1c:8d:8e:6d:02:0c:c0:aa:f7:88:81:30:9a:5d:6c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Aug 4 08:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=725703108ed4cb6750fd0d84a990ebbeef260e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:ec:3c:4f:c5:7e:41:5c:d3:6e:51:9a:0f:
93:57:16:c3:9b:c1:75:c6:87:e0:22:65:39:2a:6f:
70:c0:f1:7a:8a:1a:2b:26:e0:52:ca:f6:f2:eb:57:
22:b3:e4:97:38:fb:f0:7a:f8:4d:24:9f:bd:06:ab:
f6:e2:4e:d4:30:20:29:61:a3:30:ef:c3:a7:f2:89:
af:ca:b7:04:70:21:c4:a3:18:c0:c8:53:01:4a:c7:
60:08:63:e4:30:1b:ee:da:0b:91:50:64:c1:43:a1:
58:70:52:32:9d:bd:3b:d6:a9:f8:18:eb:0a:3b:c5:
f9:4b:0c:23:5c:64:d1:71:a3:9c:3a:de:43:a0:8c:
4a:42:3d:47:d2:e4:53:d5:be:b5:04:2f:22:52:37:
82:63:b6:06:39:2f:5d:14:5c:54:17:9a:f4:9b:41:
e8:8d:ce:67:6e:2d:d6:31:7c:42:c6:65:cc:fb:89:
6f:fe:b5:95:4b:01:73:3e:ee:5c:3a:e3:39:ca:ae:
64:7f:39:49:c8:40:08:8e:27:b1:01:b8:69:75:41:
4d:5c:95:5d:c1:21:34:50:43:58:e5:dc:a8:69:af:
65:36:6a:63:4c:91:35:ce:9a:f3:11:3c:4e:4c:3a:
89:1b:92:5b:ca:a2:f3:07:84:ed:a6:91:f4:a6:09:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:03:10:8E:D4:CB:67:50:FD:0D:84:A9:90:EB:BE:EF:26:0E:7A
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/clcDEI7Uy2dQ_Q2EqZDrvu8mDno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.246.0/23
91.228.23.0/24
193.148.64.0/22
Signature Algorithm: sha256WithRSAEncryption
93:ff:9d:35:45:20:98:79:f3:df:f0:0d:ea:63:9d:28:d4:09:
46:7e:44:cf:f6:ab:71:c8:88:96:29:6d:b5:2d:72:d2:57:b0:
f0:4e:48:2d:c1:81:a9:7e:69:f5:ec:2c:32:b2:20:0f:23:f0:
32:6b:c8:d3:ad:18:86:57:1d:4f:aa:99:90:2b:65:c5:c4:77:
1f:0b:e1:df:87:ae:17:5a:c1:cb:5a:d6:45:00:39:04:ad:bd:
58:49:18:66:c3:3e:87:3a:ce:45:8b:9a:ad:32:cd:06:9b:6d:
d4:b2:fa:cd:d6:da:cb:6a:25:9b:e8:c7:eb:b3:b0:cc:8c:2d:
6f:44:e8:4b:ac:07:7b:90:1f:a4:1f:f8:43:bd:a8:bf:12:08:
5c:0b:5d:4c:09:0e:2b:e2:7b:7c:08:e3:5d:d6:e4:f8:47:6e:
2e:82:0f:85:a9:b1:9b:b7:b9:ea:02:b3:8e:e4:90:de:35:3d:
40:ca:e6:29:bd:ae:d2:77:d9:d6:ca:bc:99:9d:5f:81:13:ce:
15:6b:d3:a4:7e:7c:8e:1c:59:8e:01:d3:b0:40:ec:a4:5e:cd:
a7:b9:b6:2e:1a:77:60:5a:09:e1:f0:0e:03:34:15:fe:86:b7:
b9:e5:a7:96:88:d5:3f:43:5f:db:8b:e3:f1:6b:e6:24:09:17:
e7:6f:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 00:19:52 2024 by rpki-client on console.sobornost.net