Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/D1rpmygBy2p0tr0AL6TGEDORkb0.roa
File: D1rpmygBy2p0tr0AL6TGEDORkb0.roa (raw, json)
Hash identifier: K3W+4g/ekHdAoEdRs/5RQ9RBrjk7VT+y9N6Yp8FpQ7o=
Subject key identifier: 0F:5A:E9:9B:28:01:CB:6A:74:B6:BD:00:2F:A4:C6:10:33:91:91:BD
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01932B63A15B62CACFBC8F382199F47C806C
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/D1rpmygBy2p0tr0AL6TGEDORkb0.roa
Signing time: Thu 14 Nov 2024 15:56:09 +0000
ROA not before: Thu 14 Nov 2024 15:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 91.108.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2b:63:a1:5b:62:ca:cf:bc:8f:38:21:99:f4:7c:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Nov 14 15:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f5ae99b2801cb6a74b6bd002fa4c610339191bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:dd:fd:01:aa:55:67:fe:c2:92:9c:cf:61:3c:
23:be:a6:59:d2:de:bb:8a:df:ba:77:cd:90:67:d4:
40:54:4d:ed:f4:71:29:87:f7:95:a2:3f:51:93:82:
b8:7b:2a:01:ba:d6:be:31:1b:fc:a3:88:66:39:52:
ec:ae:6e:56:29:76:ff:53:7d:59:30:6e:67:c0:d4:
41:47:56:90:66:50:96:f8:55:cc:72:23:d5:05:91:
86:e5:3a:ce:34:da:c6:52:02:58:ed:5c:aa:aa:0b:
60:4d:ca:d4:84:92:58:0b:7f:bf:f4:82:3b:43:0b:
cc:70:50:f0:89:e9:5a:28:6c:8f:0d:e5:8f:12:50:
36:4c:c6:96:63:83:72:3e:50:33:aa:2c:59:18:25:
79:5f:39:92:61:38:8f:a7:e3:a0:7a:30:4b:38:6a:
b8:09:b9:e7:e3:81:ea:60:99:35:b9:f1:05:f5:5a:
cc:42:11:d3:9f:68:45:db:4a:bd:2e:fe:74:3a:43:
be:d0:f6:ea:aa:25:99:a4:ca:a8:09:93:65:7a:2b:
22:7e:75:38:ff:15:1e:06:68:39:8c:36:c8:75:77:
9d:73:73:72:99:31:5e:0a:b2:39:15:bb:b5:c2:46:
e0:56:02:7d:f9:34:45:e9:0c:1b:d6:e1:de:88:f8:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:E9:9B:28:01:CB:6A:74:B6:BD:00:2F:A4:C6:10:33:91:91:BD
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/D1rpmygBy2p0tr0AL6TGEDORkb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.242.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9c:74:0c:2b:01:33:c7:28:bc:78:51:78:a7:ac:57:7e:48:
23:36:4f:b4:53:df:00:3c:31:30:59:0d:ef:c6:5a:88:1e:f7:
fb:04:77:ff:58:7d:ba:66:4a:33:b3:4e:8a:68:07:c0:2d:1a:
a1:30:73:c3:8d:92:c5:f4:dc:85:c4:8f:01:39:37:a1:b2:75:
85:b3:a3:ca:4b:ca:98:e5:a6:af:58:98:b6:7d:3f:e7:16:72:
19:0f:44:16:c6:e3:f4:38:6e:6e:9f:47:31:6b:49:e1:83:e1:
7f:99:79:52:09:88:8f:e2:45:da:30:0f:99:41:51:2c:cc:4f:
18:3d:3b:fd:49:7f:7a:52:17:24:89:1e:b8:b7:30:c1:a5:89:
ac:02:01:94:45:76:34:38:05:7c:ca:0e:bf:5e:37:37:d4:7d:
2e:c8:d3:e3:68:e6:2d:88:ae:e1:80:98:f6:b9:9f:3b:ef:2f:
8a:44:09:6f:6e:8b:fe:7d:c6:e4:4d:5f:ee:1a:ef:e2:63:88:
9d:e8:3a:23:d5:27:79:75:fc:a8:97:76:d6:0f:55:58:07:f6:
c9:a6:61:e1:78:fd:54:32:3d:25:b1:5b:ff:4c:49:dc:1b:cb:
12:26:0c:1e:4b:66:e5:91:86:2f:c9:2c:65:21:e0:b4:6a:6c:
85:9c:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:13 2024 by rpki-client on console.sobornost.net