Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/lpFIG--f9DxHwLU5VKYMXtFyUi0.roa
File: lpFIG--f9DxHwLU5VKYMXtFyUi0.roa (raw, json)
Hash identifier: FfJkkkAB120isb3uhn5ZsBItOkTQVczwLBez7MXw+NI=
Subject key identifier: 96:91:48:1B:EF:9F:F4:3C:47:C0:B5:39:54:A6:0C:5E:D1:72:52:2D
Certificate issuer: /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial: 0193CFC9B28D220BEA4A44F98CFBF55B46E2
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/lpFIG--f9DxHwLU5VKYMXtFyUi0.roa
Signing time: Mon 16 Dec 2024 14:05:22 +0000
ROA not before: Mon 16 Dec 2024 14:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47133
IP address blocks: 91.203.188.0/24 maxlen: 24
91.203.189.0/24 maxlen: 24
91.203.190.0/24 maxlen: 24
91.203.191.0/24 maxlen: 24
2001:67c:f40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:c9:b2:8d:22:0b:ea:4a:44:f9:8c:fb:f5:5b:46:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Validity
Not Before: Dec 16 14:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9691481bef9ff43c47c0b53954a60c5ed172522d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:21:19:cb:bf:98:56:70:b1:9e:fe:b8:fb:
5d:1a:1e:79:ee:99:92:53:46:4d:13:bd:cd:fb:43:
da:a8:2c:a5:c3:3c:4a:b3:a0:0d:45:ce:88:cb:28:
8d:df:0a:a0:4d:94:77:30:1a:6e:c1:4e:1a:74:ea:
24:1d:4c:71:23:90:19:53:47:25:b4:51:21:55:87:
43:62:57:94:5b:5d:4c:d7:00:1b:20:69:da:08:b4:
af:92:e3:3e:ac:f0:b8:66:1d:10:7c:16:00:8b:93:
31:4d:4f:9b:7e:57:c3:6b:10:a3:99:12:b7:ec:9b:
34:83:68:73:77:2f:19:90:c8:b0:e7:e8:61:e1:09:
8d:f5:2a:83:f0:22:49:a8:09:84:b0:ed:42:29:ae:
22:64:60:68:e8:35:f4:a0:cb:26:18:42:fd:1a:02:
69:df:fd:99:29:7f:e3:b8:ba:c4:21:05:99:6d:73:
bc:27:6d:63:08:a5:cf:31:d0:23:f1:9f:b9:0c:72:
1e:9a:4a:a7:ae:0f:e5:7d:91:d0:1c:ee:43:d1:7a:
56:96:ff:4c:d3:ef:99:27:60:40:ca:81:71:45:7c:
11:e3:74:a8:56:b0:d1:54:e2:ba:d4:55:b7:68:7c:
fc:e1:c3:f7:bc:06:80:35:b1:c4:3c:33:b7:8e:99:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:91:48:1B:EF:9F:F4:3C:47:C0:B5:39:54:A6:0C:5E:D1:72:52:2D
X509v3 Authority Key Identifier:
keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/lpFIG--f9DxHwLU5VKYMXtFyUi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.188.0/22
IPv6:
2001:67c:f40::/48
Signature Algorithm: sha256WithRSAEncryption
8e:cb:03:af:70:51:a9:b8:0a:02:a5:a2:45:0d:bf:b4:36:4f:
a8:2a:7c:ab:bf:ff:78:57:a9:da:ad:e6:35:72:99:07:d1:e8:
76:86:bc:66:37:b1:45:dc:15:2e:f2:f9:95:60:86:fb:91:02:
27:59:77:ec:df:b6:a9:0d:a3:19:e6:d6:7e:42:97:0e:62:3a:
21:0f:05:ee:ee:59:26:7b:c9:fe:1b:b5:bc:9f:51:3d:3d:40:
50:67:d4:e0:ee:9a:e1:52:01:ad:96:67:02:9b:da:d8:a3:aa:
e9:ff:c0:12:95:ee:7e:39:e2:48:36:4e:41:f0:61:a8:95:b0:
e8:4a:4b:6a:74:77:93:34:ab:93:60:13:87:ae:fc:11:1b:3b:
b6:e2:fc:2e:cb:64:a8:fc:da:ab:e9:50:d3:1c:02:83:31:70:
f2:f5:5b:a5:5b:2b:08:3a:d0:e0:1f:d6:a0:00:0a:1c:8a:f7:
e2:b6:55:97:87:55:d7:b4:71:c1:3f:89:90:90:98:22:20:af:
e2:ee:d0:dc:d4:37:44:3a:e3:21:38:96:22:b9:29:3c:ee:0f:
dc:5a:7b:b0:ba:67:6e:4b:93:4e:40:6b:67:82:85:64:f8:c1:
56:d8:38:d2:0f:55:b4:4c:d4:6e:c7:e4:19:72:9c:19:29:06:
a1:f4:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net