Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/NMCfTa7TfFkLdPl7lo7yivQjZik.roa
File: NMCfTa7TfFkLdPl7lo7yivQjZik.roa (raw, json)
Hash identifier: ouREumIyRVGJ3pkXzR9lCSHCstEWl6wETE79Bz97wVo=
Subject key identifier: 34:C0:9F:4D:AE:D3:7C:59:0B:74:F9:7B:96:8E:F2:8A:F4:23:66:29
Certificate issuer: /CN=3e44aaa9e5063511b6120b37f004855197916d2c
Certificate serial: 01856C65C6C70989AD2CA40A7A281C5A6224
Authority key identifier: 3E:44:AA:A9:E5:06:35:11:B6:12:0B:37:F0:04:85:51:97:91:6D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkSqqeUGNRG2Egs38ASFUZeRbSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/NMCfTa7TfFkLdPl7lo7yivQjZik.roa
Signing time: Sun 01 Jan 2023 08:14:47 +0000
ROA not before: Sun 01 Jan 2023 08:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197950
IP address blocks: 91.233.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:c6:c7:09:89:ad:2c:a4:0a:7a:28:1c:5a:62:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e44aaa9e5063511b6120b37f004855197916d2c
Validity
Not Before: Jan 1 08:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34c09f4daed37c590b74f97b968ef28af4236629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:4a:03:10:a4:6a:85:ae:4c:21:59:b3:dc:
fe:2b:6d:f7:e8:74:fb:a7:28:49:19:80:ef:74:01:
aa:88:05:51:26:83:91:0c:e9:a7:31:ce:d5:54:ba:
ef:59:b9:84:d1:c5:9f:79:0f:78:68:90:9a:b6:e0:
a1:0a:2d:54:50:b0:f4:30:ca:0c:98:ee:e5:a2:7c:
44:cb:f4:2d:94:91:73:7b:94:6e:14:4d:d2:a4:92:
67:ed:00:77:d3:44:62:d8:ab:f4:d9:8d:82:6c:c4:
7a:ec:f1:99:84:55:20:9d:7c:0b:bf:af:b5:65:f8:
b5:11:31:91:0f:49:4d:a6:77:fa:38:b4:5c:53:47:
4e:bc:1b:12:37:14:b9:91:ed:82:b6:ef:fc:13:3e:
a1:8c:41:f8:8e:c5:c1:8c:e8:74:5a:ff:9a:e9:af:
6e:ed:fb:47:97:2a:88:73:5d:b4:4e:df:49:82:51:
0d:9d:65:81:f3:e2:89:1a:3a:42:a3:8f:c1:8f:87:
a2:24:d7:d5:ce:56:b4:fe:92:1d:c9:bc:83:30:da:
e3:c6:e4:8e:f6:da:1f:48:ba:be:33:8b:28:bb:fb:
6b:d8:65:ee:3c:73:ca:52:71:8c:3a:d1:82:4d:4c:
54:e6:36:c3:23:a3:7a:a4:ed:bb:eb:1d:7d:f1:28:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C0:9F:4D:AE:D3:7C:59:0B:74:F9:7B:96:8E:F2:8A:F4:23:66:29
X509v3 Authority Key Identifier:
keyid:3E:44:AA:A9:E5:06:35:11:B6:12:0B:37:F0:04:85:51:97:91:6D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkSqqeUGNRG2Egs38ASFUZeRbSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/NMCfTa7TfFkLdPl7lo7yivQjZik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/PkSqqeUGNRG2Egs38ASFUZeRbSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:67:a4:ab:07:91:31:21:69:87:30:bb:4a:3e:58:66:59:b8:
c4:0f:d4:ad:a8:61:83:78:eb:cf:fb:af:2e:d2:65:37:e9:10:
3f:e2:a8:c5:c0:8b:7f:f9:76:68:4b:b5:12:cb:a5:9e:90:8b:
2c:e0:26:ff:a0:d9:0a:06:48:03:e7:9d:45:82:37:96:58:ba:
98:4e:9c:34:02:38:d2:b6:5e:a3:4b:d2:16:6a:13:ad:e3:ce:
50:52:dd:09:70:5e:ee:88:11:60:56:be:a7:36:b9:d5:07:ff:
17:af:71:1e:68:cd:a3:f7:d1:54:a0:2e:7a:f0:7d:26:8e:e8:
25:e0:e3:af:ef:ad:80:c5:44:9d:3f:5a:79:1d:75:d3:73:92:
a0:1e:c2:bc:6c:2d:a7:cf:ec:8c:1f:f5:43:7a:eb:a2:37:a0:
1d:6b:31:4c:30:d0:09:8a:ca:31:ca:d1:2f:d2:dd:2f:bd:29:
f2:dd:d9:43:d7:e9:de:e7:b0:93:26:b5:fb:fe:d6:35:cf:41:
ef:b5:5c:2f:00:a1:a0:00:04:a4:b0:e1:86:ae:e7:8a:98:2b:
76:f3:27:b2:c6:b6:ea:f8:9a:3d:99:8c:49:c0:40:5a:6a:81:
03:dd:b5:9e:0a:0f:ff:51:ab:3f:1d:d9:a7:29:eb:af:6b:af:
b3:f3:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net