Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/KKdUBt9Q2r3L8_LfNL7pvP7vTiE.roa
File: KKdUBt9Q2r3L8_LfNL7pvP7vTiE.roa (raw, json)
Hash identifier: jhTvm+vznpB3sQUXl68NzKRkgv5Af6LSObnO1Z1aX5U=
Subject key identifier: 28:A7:54:06:DF:50:DA:BD:CB:F3:F2:DF:34:BE:E9:BC:FE:EF:4E:21
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 0193D711B6673267E3E907F3EB16FD8278B0
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/KKdUBt9Q2r3L8_LfNL7pvP7vTiE.roa
Signing time: Wed 18 Dec 2024 00:01:22 +0000
ROA not before: Wed 18 Dec 2024 00:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199124
IP address blocks: 69.30.89.0/24 maxlen: 24
91.218.78.0/23 maxlen: 23
91.218.79.0/24 maxlen: 24
2a09:a380:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d7:11:b6:67:32:67:e3:e9:07:f3:eb:16:fd:82:78:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Dec 18 00:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28a75406df50dabdcbf3f2df34bee9bcfeef4e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:8c:31:99:09:99:32:7f:b5:39:38:56:0a:
fb:5b:37:9c:0b:e8:88:c4:b5:bb:65:44:e4:b3:c2:
f2:35:10:17:00:14:b3:90:28:65:d7:53:7d:13:51:
20:7a:11:18:fc:ea:d3:d1:9e:5f:bc:32:45:71:f0:
71:69:b2:8c:14:68:a2:05:d5:32:4e:c4:37:ff:94:
c3:77:c0:77:f8:43:a8:34:62:51:9d:cf:88:41:b1:
88:4f:62:b5:4b:46:7b:c0:fa:27:da:f6:bd:6a:49:
3f:78:2d:b5:54:4f:81:67:fa:61:e7:ff:ce:65:ab:
6e:26:66:8c:5c:6d:f5:42:7a:73:c1:26:b6:64:05:
3e:89:f9:8f:93:61:1c:a4:25:42:50:72:d7:ee:e7:
74:7f:36:67:f1:ce:1d:b5:ac:6c:46:27:e5:90:4f:
77:30:75:10:0e:0a:ef:24:bb:75:76:4f:7d:78:43:
f2:77:cd:f6:9d:6d:1a:e9:04:51:da:07:76:2e:a3:
e7:6b:a4:cb:25:91:48:59:66:b1:09:6d:d2:83:d1:
b1:2c:3d:9d:33:2f:7d:9f:99:d4:c8:b4:89:38:d5:
6f:96:02:1b:5f:bf:31:ca:2e:f9:d5:11:13:a5:f4:
ca:6c:a8:3b:56:96:67:3b:ec:58:86:6a:09:0f:d6:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A7:54:06:DF:50:DA:BD:CB:F3:F2:DF:34:BE:E9:BC:FE:EF:4E:21
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/KKdUBt9Q2r3L8_LfNL7pvP7vTiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.30.89.0/24
91.218.78.0/23
IPv6:
2a09:a380:1::/48
Signature Algorithm: sha256WithRSAEncryption
83:ad:b8:7a:ab:8f:85:0a:07:0b:32:b5:0d:95:6b:23:87:b9:
f2:c1:ff:13:30:97:d6:be:10:99:16:cc:7d:08:92:45:8c:c4:
ff:8e:54:d1:5b:79:46:05:f4:4d:9b:6e:59:14:20:02:b2:23:
cd:af:a3:ad:bb:14:1a:66:8d:1a:92:3b:93:ab:91:9c:1a:86:
05:f4:08:24:48:87:03:78:f3:c6:ab:de:21:77:16:fe:22:22:
06:4b:ce:4c:49:4f:33:c8:10:a8:f2:f5:96:f7:05:36:6a:9e:
51:1b:d8:0b:ef:37:1b:93:09:50:5f:6c:20:5a:3d:d4:07:78:
5c:f8:2d:da:68:5d:42:e9:42:fe:12:35:98:a9:73:63:5c:dc:
39:3f:f3:73:9f:b1:b5:ac:39:e4:d4:16:53:57:82:58:a6:b1:
86:1c:dc:d1:7b:6e:a2:b5:6b:54:71:ac:43:95:b0:6d:5a:14:
07:d6:d9:a2:b3:16:66:3f:86:63:79:59:7b:63:8c:28:da:8a:
dd:04:09:f0:d9:9f:d0:49:e7:dc:6e:22:03:74:d8:1e:7c:a1:
30:1c:89:84:29:8e:d6:a7:4a:2f:ea:18:79:4d:77:df:56:a2:
68:2c:59:e9:82:a3:46:73:e6:4b:dd:16:c6:29:a9:79:79:e6:
44:17:a4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:30 2024 by rpki-client on console.sobornost.net