Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a9934f-d316-41bd-9ed7-3cc3b091ab5c/1/1H2d0pQGL6KdniSGTXlfGUg9CR0.roa
File: 1H2d0pQGL6KdniSGTXlfGUg9CR0.roa (raw, json)
Hash identifier: ewGhB+NX+Fjcbvg7UDIEQhbAuxg+NnqV9o9p+syZtNY=
Subject key identifier: D4:7D:9D:D2:94:06:2F:A2:9D:9E:24:86:4D:79:5F:19:48:3D:09:1D
Certificate issuer: /CN=eec1002260fcc28d10943196bde3b21cdc74e11f
Certificate serial: B77DA1
Authority key identifier: EE:C1:00:22:60:FC:C2:8D:10:94:31:96:BD:E3:B2:1C:DC:74:E1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sEAImD8wo0QlDGWveOyHNx04R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a9934f-d316-41bd-9ed7-3cc3b091ab5c/1/1H2d0pQGL6KdniSGTXlfGUg9CR0.roa
Signing time: Sat 01 Jan 2022 07:03:19 +0000
ROA not before: Sat 01 Jan 2022 07:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 91.242.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12025249 (0xb77da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec1002260fcc28d10943196bde3b21cdc74e11f
Validity
Not Before: Jan 1 07:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d47d9dd294062fa29d9e24864d795f19483d091d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:7b:ed:28:ac:68:d0:df:8d:9e:78:58:cb:
df:76:c0:f1:26:d8:85:82:31:ab:c6:28:df:6c:eb:
2d:15:0e:55:5c:04:81:a7:b0:f1:e1:da:fb:07:4b:
cd:bc:0c:25:8a:07:20:f1:51:06:68:b4:63:e2:f2:
a3:4b:c9:9a:3f:22:59:8f:d0:37:31:c7:87:f4:a6:
bf:47:5f:94:9a:0b:0b:15:28:c0:15:44:d5:e4:f9:
a3:fb:e0:3e:6d:41:5f:6c:7c:f0:a4:a2:67:41:2c:
85:98:45:43:27:6d:43:b6:92:23:ce:3d:9c:16:5c:
49:de:64:a1:0a:ec:e1:9f:75:28:19:ab:67:4e:50:
fb:aa:62:c8:c6:97:35:18:46:04:91:8b:e6:3d:fa:
2c:b5:50:09:61:96:12:0a:f3:ef:72:ac:92:cd:4d:
5c:af:c9:36:fc:1f:1e:19:ea:c1:1d:2c:39:b1:0f:
5e:28:7c:6f:34:1c:52:f8:ef:2c:aa:8b:46:82:74:
bf:b2:28:c4:6a:01:ee:65:46:a6:5c:a7:b3:cb:d3:
b1:85:85:75:ba:bc:1d:f8:34:7f:31:97:5c:48:87:
47:e2:2b:42:73:be:81:95:c8:0a:ba:21:d7:69:05:
30:4c:eb:9a:c2:34:55:c6:f8:20:a8:5c:7c:7d:ab:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7D:9D:D2:94:06:2F:A2:9D:9E:24:86:4D:79:5F:19:48:3D:09:1D
X509v3 Authority Key Identifier:
keyid:EE:C1:00:22:60:FC:C2:8D:10:94:31:96:BD:E3:B2:1C:DC:74:E1:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sEAImD8wo0QlDGWveOyHNx04R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a9934f-d316-41bd-9ed7-3cc3b091ab5c/1/1H2d0pQGL6KdniSGTXlfGUg9CR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a9934f-d316-41bd-9ed7-3cc3b091ab5c/1/7sEAImD8wo0QlDGWveOyHNx04R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f5:8f:fd:0d:13:1a:de:b5:e2:a7:f7:77:a6:b6:bd:53:3f:
ad:34:00:3e:d8:b1:62:00:3b:04:33:c0:d6:52:55:8c:8a:73:
66:33:1e:4f:60:96:66:80:7d:d6:e3:c9:d9:dc:b0:fb:69:c1:
3c:9b:b9:c8:89:dc:f2:50:25:a3:4f:74:d7:58:3d:9f:e6:6c:
a0:5e:d4:b4:52:2d:26:37:7c:a8:34:a4:40:c2:0d:76:3c:fd:
77:a8:4e:0e:29:13:e9:ec:6e:f5:76:88:90:d1:e1:de:13:c5:
d8:ac:71:cf:7d:ac:bb:b4:5f:24:75:0f:9c:8e:de:d8:04:2e:
9c:09:5b:30:93:e4:4f:de:20:c6:50:a1:38:89:b6:26:98:6c:
51:00:05:05:e1:8e:8b:2d:df:4a:5d:7e:d5:ef:58:9c:84:93:
83:e1:bc:39:92:4e:90:d3:2f:4f:0d:8b:89:c6:03:b5:b8:7f:
a0:31:2b:ad:9c:ec:79:76:91:18:b9:b9:4f:fc:fc:e0:bc:93:
49:fc:c7:89:b2:3e:e7:23:d2:4d:26:78:8c:9c:be:75:4e:f8:
81:17:88:50:f3:91:28:af:11:e9:b0:14:27:6c:2f:ec:63:21:
d4:10:e7:6a:fe:b5:44:26:92:9e:81:74:3e:40:47:ee:d5:44:
d5:d3:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net