Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/e7Ec6t64XovjZ6qyBv4lrVEKlkg.roa
File: e7Ec6t64XovjZ6qyBv4lrVEKlkg.roa (raw, json)
Hash identifier: D2ZVzsQ0ihBQJ06O5BsTqe4pgzfd4JAEhhhbp9lVTmM=
Subject key identifier: 7B:B1:1C:EA:DE:B8:5E:8B:E3:67:AA:B2:06:FE:25:AD:51:0A:96:48
Certificate issuer: /CN=96cc9c72622c64b762e4dbe76405cbf72a7b1f08
Certificate serial: 0182D09A3044F01F51755A70E56BF213DB47
Authority key identifier: 96:CC:9C:72:62:2C:64:B7:62:E4:DB:E7:64:05:CB:F7:2A:7B:1F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsyccmIsZLdi5NvnZAXL9yp7Hwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/e7Ec6t64XovjZ6qyBv4lrVEKlkg.roa
Signing time: Wed 24 Aug 2022 16:05:41 +0000
ROA not before: Wed 24 Aug 2022 16:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 91.242.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:9a:30:44:f0:1f:51:75:5a:70:e5:6b:f2:13:db:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cc9c72622c64b762e4dbe76405cbf72a7b1f08
Validity
Not Before: Aug 24 16:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bb11ceadeb85e8be367aab206fe25ad510a9648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:27:d3:81:ad:f6:56:df:86:1d:a8:82:8f:
27:dc:96:68:87:fd:ff:e5:e2:3f:42:46:9e:43:c0:
0f:64:8d:2d:df:9c:05:2b:08:f4:28:cd:ba:69:68:
1b:8e:a0:2a:3d:3d:a0:7c:cc:e0:4b:27:2d:12:19:
36:cf:1e:78:fa:e8:ba:b8:2a:91:f8:ec:bb:80:b7:
cc:52:0f:19:82:1e:4b:36:b7:99:df:20:fb:bd:1b:
57:42:79:f7:7d:de:0f:9e:ee:40:15:9e:64:bb:57:
55:f0:58:29:8f:84:be:53:d0:55:a2:f0:bc:98:ed:
4e:36:d5:eb:31:d9:0b:8f:12:89:b9:01:dc:8e:3a:
0c:55:d5:9b:a4:78:1b:8f:75:3b:af:66:55:af:86:
b2:d7:1c:17:9a:50:d4:98:68:51:c0:60:53:7d:79:
23:39:e1:9d:df:de:ca:ea:3c:19:6d:2e:b1:9f:1d:
85:5e:15:64:e6:ff:fa:8c:c4:bc:2c:35:ab:bb:a9:
9b:d7:89:38:88:ea:08:a5:11:6f:49:5f:f8:33:80:
28:c5:4c:2c:1f:5b:ec:c7:96:ad:7d:c5:90:97:34:
7e:5a:40:28:2f:2e:ac:e2:fd:b9:85:c8:a0:eb:cf:
db:e8:9f:f0:a7:d4:04:1d:bc:55:e1:84:cc:98:c8:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:1C:EA:DE:B8:5E:8B:E3:67:AA:B2:06:FE:25:AD:51:0A:96:48
X509v3 Authority Key Identifier:
keyid:96:CC:9C:72:62:2C:64:B7:62:E4:DB:E7:64:05:CB:F7:2A:7B:1F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsyccmIsZLdi5NvnZAXL9yp7Hwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/e7Ec6t64XovjZ6qyBv4lrVEKlkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/lsyccmIsZLdi5NvnZAXL9yp7Hwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f4:15:de:d9:7d:8a:56:cd:0c:00:5f:00:3a:de:8c:70:1e:
c8:e6:66:db:16:a9:dc:fd:de:9b:6c:ab:35:c3:9a:99:53:b4:
f8:c3:1e:2e:a8:e3:0e:69:51:7b:94:84:f4:ad:ed:c6:fc:43:
50:38:3c:e8:f3:55:8d:f4:c0:97:2b:0b:94:bc:c2:41:da:ed:
fe:54:a7:45:15:26:ad:48:0f:dc:2a:b6:52:0f:75:41:2f:0f:
2d:95:c1:92:93:20:f5:d3:1d:67:77:4f:e6:fa:1b:98:19:60:
a1:a0:78:25:db:b9:07:43:2e:a2:95:6e:4c:f8:97:fc:bf:8d:
98:1a:fb:b5:1a:7c:7d:f8:c4:0e:f6:8e:f7:1e:91:e5:c9:a3:
0f:ea:a7:0c:93:08:58:3e:be:80:67:ea:52:d2:89:15:31:c8:
73:e4:f9:1d:54:af:34:aa:64:0b:70:e1:4f:6b:cc:8d:99:5c:
7e:7f:a2:96:a9:8a:d3:f6:9e:49:93:10:8a:96:ac:a5:ae:04:
37:f3:2d:cf:c1:1a:48:d8:11:d8:a2:dd:1e:24:81:85:cb:0a:
23:23:df:f1:21:6c:ca:cd:0d:db:60:69:f7:06:f5:95:ac:38:
91:3f:a0:b0:1a:a8:d5:c2:bd:eb:47:a2:8a:0d:3c:2b:53:79:
9a:da:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net