Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/scICPvpxU2aQhOlfA9hLkhrQXlI.roa
File: scICPvpxU2aQhOlfA9hLkhrQXlI.roa (raw, json)
Hash identifier: fsVMY/SGGhM9malL3twbAd/6OD8ZMvDf7SySJQguoiM=
Subject key identifier: B1:C2:02:3E:FA:71:53:66:90:84:E9:5F:03:D8:4B:92:1A:D0:5E:52
Certificate issuer: /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial: 01856C1376D1C794760297FFB2C08E24AEE1
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/scICPvpxU2aQhOlfA9hLkhrQXlI.roa
Signing time: Sun 01 Jan 2023 06:44:52 +0000
ROA not before: Sun 01 Jan 2023 06:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51511
IP address blocks: 91.241.163.0/24 maxlen: 24
91.241.162.0/24 maxlen: 24
91.241.161.0/24 maxlen: 24
91.241.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:76:d1:c7:94:76:02:97:ff:b2:c0:8e:24:ae:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Validity
Not Before: Jan 1 06:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1c2023efa7153669084e95f03d84b921ad05e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:f8:3d:12:bb:53:5c:80:b6:a5:14:0a:78:
c5:ba:8f:e1:06:5d:32:ba:43:6c:b3:a8:39:c9:de:
a7:b2:4a:ed:d6:81:5c:fa:b0:1f:dd:37:5f:6f:28:
cd:0c:b7:04:87:39:f2:a7:03:e5:ae:d8:1d:ca:7a:
12:a4:94:a0:6e:52:21:7e:eb:48:85:12:14:40:0a:
86:10:e3:38:dd:21:59:92:a4:1b:19:7d:59:0d:12:
fb:6f:94:26:b1:d9:34:d7:cd:15:b3:f3:c1:3b:19:
27:c5:69:e7:08:a0:85:c3:85:89:9d:ce:a8:16:14:
e3:a4:c7:d9:ac:88:c2:0e:3f:44:f0:00:43:16:42:
ee:25:fd:11:0f:4b:82:29:d8:6c:4c:40:1a:a7:f5:
a2:ed:71:8e:69:5a:79:f1:99:da:79:02:c4:e9:9e:
97:2d:9c:d8:6c:89:ee:fb:c8:24:80:3b:00:6e:25:
a4:e0:ba:7f:66:ca:90:78:fb:72:37:d8:00:21:28:
e3:70:91:e1:12:52:66:ea:18:9f:bf:5d:12:63:9c:
1c:ae:64:a4:9f:53:9e:7e:e7:63:49:e4:0c:30:33:
9a:69:d9:ed:9a:b3:d1:b2:b0:da:7f:d2:73:06:61:
c7:ab:cf:b8:90:91:e5:92:da:d4:39:34:80:20:3b:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C2:02:3E:FA:71:53:66:90:84:E9:5F:03:D8:4B:92:1A:D0:5E:52
X509v3 Authority Key Identifier:
keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/scICPvpxU2aQhOlfA9hLkhrQXlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:53:f0:1f:a2:3a:2d:05:72:87:f9:10:35:f0:b0:13:5f:28:
cf:d2:94:d5:11:26:ec:70:02:94:c6:67:69:fc:11:64:67:43:
40:4a:b9:f1:fe:18:68:78:3e:5e:2a:e4:68:b3:87:59:d3:35:
bc:e5:bb:4e:bd:1c:8c:65:f2:98:b7:4a:a5:5a:12:65:1e:33:
a6:e1:1e:60:c8:78:50:5d:0d:5d:cd:df:a4:05:2c:5f:2e:39:
e1:da:9a:9b:c3:3b:a1:bc:9a:6d:f0:2b:ef:65:db:63:d2:36:
7e:d8:71:79:ab:a1:56:9a:ac:a0:aa:39:90:5a:30:bf:b0:cd:
16:77:d2:86:4d:96:de:14:50:9b:3e:4b:66:4e:5a:3d:1b:2d:
0d:00:39:40:de:9e:51:2d:ad:6c:fd:f2:ff:a6:96:b6:af:11:
29:7d:49:c7:da:11:18:c7:8b:ea:49:f6:f1:53:f0:42:d6:b2:
2f:d3:92:39:51:82:59:22:bf:ee:4b:2f:7d:b4:a2:49:8b:3a:
1b:b7:df:fa:e8:1d:a6:db:c2:bc:6c:45:94:fd:a0:c4:0c:3d:
75:d0:ab:23:00:ae:61:09:b0:2f:14:7a:ed:37:9c:9d:d0:5e:
bd:68:8b:a6:12:3a:5c:a1:e0:e3:b1:03:d1:17:00:03:94:7e:
e8:71:e9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net