Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5c5821-f342-477a-9eb8-acc2879f9f2e/1/RkVRPrMgehYRTIYAYmpTVjjWvR0.roa
File: RkVRPrMgehYRTIYAYmpTVjjWvR0.roa (raw, json)
Hash identifier: EMyBv2aj0fqfpYvO5qR/uTY2/TJ4E9tXLK+JXIMqgkY=
Subject key identifier: 46:45:51:3E:B3:20:7A:16:11:4C:86:00:62:6A:53:56:38:D6:BD:1D
Certificate issuer: /CN=1360d57284bf127c28140e04b26a8f3e8bdef179
Certificate serial: 0192D8014DB5965904A531A45BE5ABC00812
Authority key identifier: 13:60:D5:72:84:BF:12:7C:28:14:0E:04:B2:6A:8F:3E:8B:DE:F1:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2DVcoS_EnwoFA4EsmqPPove8Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5c5821-f342-477a-9eb8-acc2879f9f2e/1/RkVRPrMgehYRTIYAYmpTVjjWvR0.roa
Signing time: Tue 29 Oct 2024 11:20:17 +0000
ROA not before: Tue 29 Oct 2024 11:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20986
IP address blocks: 91.236.153.0/24 maxlen: 24
185.51.216.0/22 maxlen: 22
185.51.216.0/24 maxlen: 24
185.51.217.0/24 maxlen: 24
185.51.218.0/24 maxlen: 24
185.51.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:01:4d:b5:96:59:04:a5:31:a4:5b:e5:ab:c0:08:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1360d57284bf127c28140e04b26a8f3e8bdef179
Validity
Not Before: Oct 29 11:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4645513eb3207a16114c8600626a535638d6bd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:de:29:ad:b6:c6:41:59:4d:9c:8d:c3:f6:
bb:69:ef:39:de:2a:f5:f1:69:e6:d5:1f:86:e3:0d:
29:8b:d0:24:a5:db:c7:22:03:e6:22:2e:29:0e:70:
4f:2d:67:a2:a7:b3:90:48:4f:15:4f:3a:25:70:aa:
a0:f2:10:f6:b2:5e:a4:b5:90:f2:0b:c4:93:11:ce:
f4:e1:69:d9:4e:8d:bd:25:f9:26:d5:3f:16:39:99:
61:5e:70:97:0c:76:b1:a9:68:1f:25:31:0f:95:37:
6c:02:89:c1:15:b8:29:08:60:81:e2:de:d6:59:c3:
32:7a:00:21:9d:76:43:a4:79:71:2a:a6:a1:df:01:
5d:02:a4:71:56:4c:3a:b8:91:ce:c1:fa:f4:51:bf:
49:e6:cc:eb:89:f4:0e:84:00:11:74:8f:19:0c:c4:
6e:f2:45:c7:8f:56:db:5e:3c:b5:d6:1d:eb:d2:e0:
5f:8d:39:a6:ef:8a:af:a9:11:08:14:df:5e:4a:60:
5d:24:61:96:85:5a:c4:7e:b8:7b:ea:fb:68:a0:11:
d6:15:7b:6e:d7:db:09:bc:54:21:e7:36:83:a9:f1:
d8:a6:da:a1:e4:99:ef:6a:ed:57:59:72:63:8c:e1:
6f:2e:ce:0e:84:62:fc:d8:8c:45:6f:0a:a7:e9:3a:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:51:3E:B3:20:7A:16:11:4C:86:00:62:6A:53:56:38:D6:BD:1D
X509v3 Authority Key Identifier:
keyid:13:60:D5:72:84:BF:12:7C:28:14:0E:04:B2:6A:8F:3E:8B:DE:F1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2DVcoS_EnwoFA4EsmqPPove8Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5c5821-f342-477a-9eb8-acc2879f9f2e/1/RkVRPrMgehYRTIYAYmpTVjjWvR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5c5821-f342-477a-9eb8-acc2879f9f2e/1/E2DVcoS_EnwoFA4EsmqPPove8Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.153.0/24
185.51.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:3f:d6:6b:39:a3:b8:39:23:6c:fc:35:76:2d:98:16:b2:d6:
4f:d6:5f:c0:8f:e5:da:75:3c:cb:50:61:cf:45:87:13:de:fa:
16:b5:62:f1:78:2b:9a:58:0d:c4:d7:ac:d7:ac:76:be:fc:cf:
a2:62:74:cd:ad:af:42:2a:1e:18:ae:23:dd:3f:27:9f:b7:06:
03:f3:de:c9:3f:35:ff:72:15:76:89:76:51:e1:78:05:f2:e3:
d5:34:ab:65:8d:27:4d:8b:1b:f7:af:88:d7:1a:45:f4:aa:cc:
a7:8f:ba:71:ea:17:5e:df:ef:74:24:90:9a:8d:f7:75:c6:53:
dc:af:7b:6a:71:13:0c:f7:61:7c:c2:d6:e7:a5:75:4d:d0:d2:
88:d5:9c:b4:44:6a:87:6a:b1:f7:57:0a:23:a5:8e:ea:c9:fe:
b8:f6:c6:e9:86:19:1c:a3:e1:61:cd:3f:ec:1a:8e:3c:8a:86:
e5:ef:d4:b8:8d:50:61:b8:6a:a2:7c:c6:d2:27:63:bf:08:af:
c4:c9:09:d8:b8:6b:ca:f5:1a:61:3e:8a:53:6c:6a:0d:31:d8:
ce:05:95:86:c6:ac:97:0e:b2:48:f0:04:6a:72:f4:57:35:d2:
7b:52:af:b0:7d:ca:9a:af:8a:82:6c:73:af:69:dc:05:08:f3:
29:c1:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net