Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/mPYkjjpColp0vLV4f41sFfuQlQc.roa
File: mPYkjjpColp0vLV4f41sFfuQlQc.roa (raw, json)
Hash identifier: 1rniqqzdSwkCGZC1mzvx30gf+0DLDi01KMOwx70lisE=
Subject key identifier: 98:F6:24:8E:3A:42:A2:5A:74:BC:B5:78:7F:8D:6C:15:FB:90:95:07
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 018CC42466E734BE5BD8219F98269962625D
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/mPYkjjpColp0vLV4f41sFfuQlQc.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44709
IP address blocks: 91.198.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:66:e7:34:be:5b:d8:21:9f:98:26:99:62:62:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98f6248e3a42a25a74bcb5787f8d6c15fb909507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:19:5a:51:83:c8:9e:37:49:3a:ed:d8:ea:
4e:12:40:74:9c:c5:54:80:a1:5b:b2:e3:5f:e6:d9:
a6:7a:73:61:72:14:4d:18:36:27:a2:06:a9:38:f9:
b2:9e:40:e6:c2:0d:f5:8d:dd:a9:46:b9:dc:8b:c7:
e7:46:db:92:4a:bb:bd:09:cc:1d:62:d6:a0:aa:ee:
11:12:63:b4:27:a3:9e:38:74:f1:dc:ef:88:ba:fb:
8f:35:a8:3f:0d:13:39:a5:55:99:90:fa:09:52:86:
91:93:89:c4:bc:b5:76:00:92:85:a2:fe:53:a7:bc:
01:5c:a2:5b:3c:93:c1:37:d8:e0:36:42:04:9b:1f:
68:ff:03:6f:04:1e:ff:9c:f3:73:ee:67:bc:cf:bc:
24:50:4d:fb:0a:6d:74:d5:30:0d:2f:2c:7a:80:84:
63:4e:bd:ea:fa:49:01:3a:24:23:c2:4e:fd:df:f4:
c6:e2:46:db:75:ed:84:33:ad:70:1e:11:e6:86:39:
dc:3f:35:49:ce:ae:8c:a8:9e:70:3b:29:c5:7d:e2:
05:d2:e3:63:2f:9c:89:60:a6:ca:1b:81:44:ed:6d:
4a:7f:ca:13:7b:66:7d:5f:00:7e:b8:91:7b:9b:5d:
ff:0f:fb:fc:88:c2:b5:37:2d:5d:28:1d:94:0b:fe:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:24:8E:3A:42:A2:5A:74:BC:B5:78:7F:8D:6C:15:FB:90:95:07
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/mPYkjjpColp0vLV4f41sFfuQlQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.70.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:19:30:14:36:35:26:f7:31:d3:90:9a:29:40:97:8e:dd:b3:
bf:5c:50:08:f8:4c:54:88:29:9b:b8:53:70:09:66:fc:23:f6:
ab:8c:cf:1b:06:00:49:7e:38:dc:f1:67:ce:ef:a8:df:e8:fa:
7b:47:98:c7:39:86:a5:00:84:eb:c4:24:1f:4c:58:ef:e2:27:
4d:3d:9a:8f:6d:21:61:10:b0:f3:a1:9b:ed:22:d0:23:09:de:
bb:2b:68:9b:43:c1:40:21:22:51:c1:05:f7:4f:ec:b0:e9:5c:
5b:69:b4:27:d4:b9:df:79:29:3b:44:26:e0:75:77:7d:f5:1c:
da:9f:3d:1d:bc:0c:c7:0c:4f:75:a5:b1:4e:97:20:8b:b2:1a:
c2:36:0f:51:1c:2a:0a:3f:e9:15:79:85:81:77:c3:28:8e:38:
0d:bd:84:e0:cd:d0:30:ac:65:98:a0:0d:6b:cf:33:e1:a6:93:
e6:8d:5a:a3:c8:62:25:26:d7:ab:4f:a4:b3:c8:32:0a:f5:84:
cd:bc:6d:32:25:89:b0:57:f7:6e:c4:5b:fb:8f:ad:ab:87:0e:
6a:6d:1b:6d:dd:97:a0:67:54:51:0c:94:85:bf:4a:66:4b:9e:
30:58:ce:f3:c0:a9:3d:1f:ce:21:92:10:92:d5:e0:35:f5:51:
24:7c:29:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net