Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/sfzB8SOyGN7JmvfKwFAAw1ctOEM.roa
File: sfzB8SOyGN7JmvfKwFAAw1ctOEM.roa (raw, json)
Hash identifier: lGXPmTK5KoZFH21Mo+c9P2Ve2OsEG8rPYEr0KwWQjJg=
Subject key identifier: B1:FC:C1:F1:23:B2:18:DE:C9:9A:F7:CA:C0:50:00:C3:57:2D:38:43
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 018CC3489CFA20586F5C955EFC7957677254
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/sfzB8SOyGN7JmvfKwFAAw1ctOEM.roa
Signing time: Mon 01 Jan 2024 04:29:25 +0000
ROA not before: Mon 01 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197302
IP address blocks: 91.223.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9c:fa:20:58:6f:5c:95:5e:fc:79:57:67:72:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1fcc1f123b218dec99af7cac05000c3572d3843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:35:15:4d:42:97:a3:e9:e0:68:2d:4b:d0:
0d:30:f4:1b:cf:0c:9c:e6:bb:b7:8e:bf:da:6a:27:
c4:88:46:33:e3:fa:ad:73:3e:be:82:50:6c:f7:b8:
ab:17:a2:83:a1:79:f8:52:dc:76:ec:58:bd:2d:1d:
f3:32:f6:ac:a1:a2:c2:26:00:30:07:2e:13:e4:7c:
97:4e:ab:aa:c0:56:c8:78:5b:e9:00:b4:61:be:6a:
19:ad:a6:8c:0b:4d:3e:91:f2:da:b8:42:38:3b:f0:
bf:29:72:4d:98:af:7a:7c:91:c1:95:5f:d8:f5:4b:
1f:55:51:24:ef:32:13:95:64:a9:8e:a8:44:88:f5:
04:32:44:08:d9:cc:02:43:5a:c0:80:bd:39:4d:b0:
d5:bc:1c:1b:2e:17:66:c9:fb:82:cb:77:f3:f9:84:
7b:f7:6d:8e:26:b9:00:57:13:5b:d3:b2:3a:fb:57:
af:f0:b2:27:e3:77:b5:77:17:fb:59:fe:b8:72:86:
28:07:30:0c:88:d5:e0:94:8a:85:37:28:9d:46:6e:
84:88:6b:13:70:9f:2e:98:3b:d6:ac:1f:9a:32:60:
95:db:dc:db:15:7a:e4:1a:92:16:0f:be:fe:e4:d1:
5e:fd:a8:8d:96:2a:93:c9:b0:24:65:e0:88:ab:1b:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:C1:F1:23:B2:18:DE:C9:9A:F7:CA:C0:50:00:C3:57:2D:38:43
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/sfzB8SOyGN7JmvfKwFAAw1ctOEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.124.0/24
Signature Algorithm: sha256WithRSAEncryption
35:bf:f8:77:2e:22:29:4c:b0:a6:16:c9:f6:ca:3f:f8:9a:cc:
c1:12:48:90:6d:a7:90:e1:bd:b1:ca:51:6a:59:d1:62:74:85:
d5:e1:5e:db:e9:7c:22:89:b4:3c:31:86:72:c8:a3:1d:ef:c1:
2a:98:ba:f0:90:6c:c2:e5:58:04:3e:cc:ae:79:8c:cc:cc:0d:
70:5e:69:1c:61:cc:09:74:f1:43:52:0b:1c:93:2c:ef:9c:0b:
14:c3:39:b2:d6:18:52:62:66:5d:67:a7:9b:16:67:4d:4e:4a:
eb:6a:9d:f9:e3:7b:f9:4c:64:81:3f:36:16:d9:cc:91:8f:dd:
8a:57:62:a0:c0:74:ab:30:45:f9:95:19:cc:19:39:18:f9:82:
c8:c6:a2:f9:33:37:04:c5:9c:16:f5:bf:89:d1:cc:a0:45:2e:
a2:56:67:df:ec:c8:1d:7e:65:93:12:a7:2b:15:27:58:e7:c2:
d5:36:43:62:f1:7c:a2:6d:a8:d2:fa:86:95:bf:41:40:38:41:
ea:91:74:fc:cf:63:d1:09:ac:bf:75:fa:34:b8:20:ac:27:ce:
24:f1:cc:9e:80:c5:d5:05:8a:00:d6:51:15:9d:df:87:9f:41:
21:da:52:3c:6a:52:e6:51:f5:6f:78:12:16:25:ab:1a:62:cd:
97:a4:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:50 2024 by rpki-client on console.sobornost.net