Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/KC1qYbwOUHNv024CyJ1fGEAudbA.roa
File: KC1qYbwOUHNv024CyJ1fGEAudbA.roa (raw, json)
Hash identifier: Mv1K3LAgKLF7OA+n1hYdmSgR3Q7UChtyE/F8GMtU1pY=
Subject key identifier: 28:2D:6A:61:BC:0E:50:73:6F:D3:6E:02:C8:9D:5F:18:40:2E:75:B0
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 018CC56DEB9A6EAA1866C7330DED957139A9
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/KC1qYbwOUHNv024CyJ1fGEAudbA.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62344
IP address blocks: 91.216.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:eb:9a:6e:aa:18:66:c7:33:0d:ed:95:71:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=282d6a61bc0e50736fd36e02c89d5f18402e75b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:1c:f5:d1:41:8a:e1:7a:b6:bc:37:10:a3:
de:62:1f:a6:22:f4:66:4b:aa:17:34:c1:5e:30:ce:
e1:5f:52:bd:34:ab:7a:54:c0:0f:d7:8c:28:2e:83:
5e:a4:a2:25:ba:5d:51:f1:c1:ec:01:e3:88:9c:74:
36:05:c0:6c:51:b6:2e:ed:51:e1:7e:01:26:2a:2f:
af:8f:bf:58:bb:88:76:7c:7d:18:62:06:2c:92:99:
9e:49:80:7e:8c:b1:5d:8d:bc:a8:03:fb:f6:38:42:
90:74:ab:91:8f:0b:e7:b4:59:ce:28:98:ec:f5:11:
1e:14:cf:38:46:fd:f9:85:7e:3b:c7:8b:d6:44:f0:
5d:e2:b6:52:d2:4c:77:8b:f4:db:f5:b9:1c:42:7a:
ab:4c:18:9f:3b:1f:ba:a3:75:46:9f:51:1b:7a:94:
a8:09:a4:1f:9c:62:e0:b3:08:88:b5:ab:9f:7f:b3:
95:03:b4:4e:1c:df:1a:ad:f3:bd:5f:04:81:a3:96:
a0:7f:59:1d:f3:90:4a:b1:46:25:7e:8e:b1:11:6b:
5d:b4:c0:bd:c2:3d:ad:dc:59:41:52:14:df:6c:91:
42:b3:a6:55:c2:0c:a4:2b:f8:68:bb:42:6e:6f:3f:
98:4f:b1:53:f2:6a:6e:e7:cd:cc:9f:5d:c3:77:8a:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2D:6A:61:BC:0E:50:73:6F:D3:6E:02:C8:9D:5F:18:40:2E:75:B0
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/KC1qYbwOUHNv024CyJ1fGEAudbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:42:70:f2:dc:0f:19:80:b5:b5:61:3f:ab:39:0d:ba:ef:70:
cb:7c:8f:1a:3f:e0:04:31:87:e4:b4:15:86:97:a3:24:6f:87:
68:e1:04:b2:ca:b5:ca:46:d9:3a:c2:21:98:96:7d:73:96:01:
2a:3c:a6:a3:67:29:c4:b4:5a:53:0f:f5:78:c2:17:e7:c8:af:
4c:1e:ef:fc:7d:a3:4a:17:6d:36:83:7f:b7:aa:12:fc:18:17:
53:6e:c9:4c:f0:3b:13:2c:fe:b0:57:45:b2:b3:dd:25:2b:f6:
1d:a0:66:92:27:88:91:5e:55:db:ce:78:58:11:e5:02:da:42:
77:7c:87:96:0a:f5:39:a9:72:83:fb:f4:d6:df:f3:60:0a:ff:
03:09:ae:dc:00:ce:7f:49:9f:33:b1:07:b0:5d:d1:1b:03:af:
9a:d2:80:01:d0:18:3a:29:bf:22:69:0e:c0:d1:f5:8e:44:e6:
57:9f:75:62:1b:8d:a9:51:b1:4a:de:d5:d5:eb:54:10:fb:52:
b8:a7:9b:6a:60:d0:67:2c:e2:a9:02:f9:18:5e:02:80:fa:14:
91:3b:9a:80:36:e4:34:6e:ce:2c:ad:94:7f:b6:f6:34:d2:67:
e5:fc:47:e3:cb:94:e4:4e:b9:74:75:3a:98:a5:ec:5c:b1:0b:
50:9e:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:27 2024 by rpki-client on console.sobornost.net