Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/LpEdOiIKcoI7Un9b4mjzaSShgyo.roa
File: LpEdOiIKcoI7Un9b4mjzaSShgyo.roa (raw, json)
Hash identifier: 3BX6aQKwxhP22En25jgslDnoBaqifHCMhwFr61WCINw=
Subject key identifier: 2E:91:1D:3A:22:0A:72:82:3B:52:7F:5B:E2:68:F3:69:24:A1:83:2A
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 018CC56E53F5DF0D17B452BCE1BAA63AB7BB
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/LpEdOiIKcoI7Un9b4mjzaSShgyo.roa
Signing time: Mon 01 Jan 2024 14:29:51 +0000
ROA not before: Mon 01 Jan 2024 14:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204054
IP address blocks: 91.216.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:53:f5:df:0d:17:b4:52:bc:e1:ba:a6:3a:b7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Jan 1 14:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e911d3a220a72823b527f5be268f36924a1832a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:ec:86:d7:a0:f6:5c:a6:d9:e1:87:9d:46:
8e:19:33:c1:a2:98:94:f5:e7:e1:72:2d:b0:3f:f8:
66:cf:11:f5:12:fc:52:f5:97:4c:c3:4c:e8:09:a5:
6c:8f:7f:d9:21:9c:46:c3:8d:9d:9b:fc:2c:ad:3a:
d3:c9:4c:a9:35:08:9a:9a:ea:3b:cf:c0:b9:b1:58:
12:a8:c5:f4:4e:5a:13:3f:5b:f7:1b:82:45:29:93:
f8:aa:c4:2a:b1:7c:85:e1:9d:6c:51:3d:83:23:5e:
40:20:d5:b4:19:5f:59:3c:7e:0a:3b:4a:b6:d2:28:
0b:d2:1b:67:42:23:06:2e:2e:65:70:38:7d:0d:5a:
e1:55:eb:4f:1d:34:97:2a:42:7e:7c:a8:35:14:a8:
1c:42:61:71:f4:57:f4:b0:30:a9:d1:3c:6e:48:04:
43:ee:6f:47:b8:ba:bc:31:fe:58:4a:94:99:c8:13:
a9:4d:d7:ca:8a:54:a1:08:ad:f7:40:ef:2e:a8:6b:
f4:63:a4:ac:63:97:5b:f6:4e:11:cd:43:8a:f2:97:
64:b3:d8:c0:2b:09:ae:c2:db:de:ab:58:65:0f:ff:
c7:d2:e4:15:bf:b5:d2:64:5c:9d:35:ca:4e:86:25:
ef:7b:80:2d:7f:71:d9:13:f3:2c:71:6c:b0:0d:8c:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:91:1D:3A:22:0A:72:82:3B:52:7F:5B:E2:68:F3:69:24:A1:83:2A
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/LpEdOiIKcoI7Un9b4mjzaSShgyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a6:48:1a:2e:25:f0:38:c4:bd:d3:ea:ce:92:4b:9f:2e:df:
26:8c:6b:84:2a:0f:48:e7:00:9f:3e:02:ea:e8:72:28:e9:5a:
ae:c4:46:d6:d8:a4:b1:ba:68:44:14:2c:94:d9:ca:9e:ab:b5:
1d:26:f6:5b:2d:67:9b:f9:58:8e:94:cf:b8:6d:29:76:e7:ac:
53:13:51:64:a5:7c:c5:67:ac:ac:80:60:92:64:38:90:3f:ad:
ca:c7:61:76:33:c5:33:bc:93:cc:a2:81:5f:01:31:b2:b5:2a:
d2:08:22:f3:70:6e:7f:4a:80:b7:ab:16:68:33:b8:51:3c:1a:
a4:84:ff:45:47:c2:f7:20:dd:63:6d:be:1e:95:e1:07:f1:63:
bb:4c:93:f0:64:01:04:b2:ce:ed:9b:c7:41:b0:8c:12:72:7c:
ea:46:fd:07:50:74:f9:95:40:a0:8b:02:62:c3:66:60:b8:7a:
69:72:0b:3e:53:7d:8d:c8:a5:3c:da:4c:c1:5c:dd:74:0b:18:
c8:08:2a:5b:2d:36:0c:5f:03:73:35:6f:73:a4:09:ae:ac:b1:
a1:e0:7a:32:f9:d9:da:1f:81:e5:af:04:c5:b1:a2:3c:f5:41:
8c:22:e0:4b:cd:dd:0d:c6:da:81:7f:ef:18:8e:1a:7d:4e:96:
fc:84:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:29 2024 by rpki-client on console.sobornost.net