Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/c-cxabvkncfHM1d3e_5gw1zhNBk.roa
File: c-cxabvkncfHM1d3e_5gw1zhNBk.roa (raw, json)
Hash identifier: GlJKHsiHBRTiIicOoOv2fILc30hBbKojulBFxTxPrkw=
Subject key identifier: 73:E7:31:69:BB:E4:9D:C7:C7:33:57:77:7B:FE:60:C3:5C:E1:34:19
Certificate issuer: /CN=288798a754d6da2aca18f617f63d3d5f14297b81
Certificate serial: 01857139EF489691B9F24D4670D17160BE49
Authority key identifier: 28:87:98:A7:54:D6:DA:2A:CA:18:F6:17:F6:3D:3D:5F:14:29:7B:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIeYp1TW2irKGPYX9j09XxQpe4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/c-cxabvkncfHM1d3e_5gw1zhNBk.roa
Signing time: Mon 02 Jan 2023 06:45:00 +0000
ROA not before: Mon 02 Jan 2023 06:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 91.213.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ef:48:96:91:b9:f2:4d:46:70:d1:71:60:be:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=288798a754d6da2aca18f617f63d3d5f14297b81
Validity
Not Before: Jan 2 06:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e73169bbe49dc7c73357777bfe60c35ce13419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:fb:4f:67:41:60:19:ce:f6:89:ce:9e:d9:
89:fc:08:3d:09:c3:c0:b6:3e:5c:7c:75:f8:fc:ee:
3b:16:ed:4d:e7:08:21:35:59:6e:cc:dd:b2:b2:fc:
e6:9a:4f:0d:4c:e2:30:c5:fe:29:73:60:31:57:be:
b7:33:20:22:be:5e:23:da:4e:4c:c2:b8:7f:7c:90:
1f:8c:32:6b:38:c1:50:c5:51:b8:10:06:08:bd:1f:
56:89:02:98:77:a6:79:69:e0:86:a0:7c:d3:ea:7a:
ef:eb:92:87:39:7c:94:1b:b7:1f:15:18:7d:2a:18:
93:d1:8b:07:48:99:76:f9:5a:e8:bf:92:de:71:fd:
62:c2:de:1a:c3:9b:33:75:e1:63:5b:66:09:36:e5:
e2:e8:8a:af:e6:79:77:b4:8e:cd:2d:40:fc:66:ae:
d7:90:13:7a:0c:e8:2a:fa:40:8e:f3:03:cd:2e:09:
85:5d:02:cc:e8:2a:b1:95:07:49:23:f4:7f:94:d6:
d3:a4:a4:04:a9:78:8d:49:70:8e:2d:c2:68:7d:7e:
8b:ed:5a:0e:60:f3:e0:e3:b4:8e:68:00:5b:be:48:
d3:0d:d1:6b:49:57:1e:8e:32:2a:ce:e4:c9:76:ee:
08:1e:0e:52:40:7c:a6:29:e9:c3:66:1a:a0:2e:c8:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:31:69:BB:E4:9D:C7:C7:33:57:77:7B:FE:60:C3:5C:E1:34:19
X509v3 Authority Key Identifier:
keyid:28:87:98:A7:54:D6:DA:2A:CA:18:F6:17:F6:3D:3D:5F:14:29:7B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIeYp1TW2irKGPYX9j09XxQpe4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/c-cxabvkncfHM1d3e_5gw1zhNBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/KIeYp1TW2irKGPYX9j09XxQpe4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:78:4b:9d:50:7a:08:6c:33:a5:1c:ba:a2:3e:3b:9b:7a:94:
49:86:f2:ac:f9:f2:1d:e0:05:e6:74:05:c7:65:a9:1d:75:eb:
c8:a7:af:01:e9:b3:23:df:40:a5:a0:9d:a0:43:03:f0:cc:6c:
70:57:72:2d:7d:97:06:6e:1e:f8:4f:82:bf:3b:b9:11:a4:c9:
db:1c:f8:c3:ae:ed:51:ea:86:57:d2:d5:fd:c1:00:94:06:69:
74:59:33:e4:cf:c3:24:0f:bb:5b:fe:33:8b:7d:05:ac:cf:11:
a7:ae:f8:38:a3:ec:e4:3c:7c:0a:fc:09:bd:22:22:f6:86:ac:
4b:dd:d4:e1:36:fb:2e:c4:0e:4f:4e:30:03:e4:7c:d3:ec:74:
da:f0:9b:49:3e:8b:5e:16:95:b1:14:54:21:44:d4:d6:e2:3d:
9a:3f:84:b5:e2:df:51:e1:99:04:c8:06:19:36:7f:70:bd:73:
be:99:df:f0:96:df:24:f6:a1:5b:52:54:3a:a9:05:e8:3f:bb:
62:89:33:1a:83:88:ec:bc:2c:17:66:38:61:28:8f:ec:8b:da:
69:d1:aa:30:84:a9:1c:11:93:a1:a5:d1:5b:86:b9:7f:37:8c:
1c:a0:5b:ed:7e:c8:67:9b:be:3f:cd:08:d1:35:cd:c4:45:b3:
36:3e:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net