Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/S1BQkHImL-X2No1kmGxuwrJ1Urk.roa
File: S1BQkHImL-X2No1kmGxuwrJ1Urk.roa (raw, json)
Hash identifier: N97DUXCKgT3UfIAZYhQHZt783XVrmNSZLGWoSDEKg7s=
Subject key identifier: 4B:50:50:90:72:26:2F:E5:F6:36:8D:64:98:6C:6E:C2:B2:75:52:B9
Certificate issuer: /CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Certificate serial: 0192709601E86B4E08CC441FF31553AD9A51
Authority key identifier: 3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/S1BQkHImL-X2No1kmGxuwrJ1Urk.roa
Signing time: Wed 09 Oct 2024 09:22:11 +0000
ROA not before: Wed 09 Oct 2024 09:22:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198397
IP address blocks: 91.234.124.0/22 maxlen: 22
176.106.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:96:01:e8:6b:4e:08:cc:44:1f:f3:15:53:ad:9a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Validity
Not Before: Oct 9 09:22:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b50509072262fe5f6368d64986c6ec2b27552b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:71:c9:54:97:d6:b5:0f:15:79:b9:fe:d9:
61:ec:0f:35:d1:69:cd:8e:9b:46:4c:f1:bb:56:a2:
8d:7a:93:b1:b9:ea:2e:c1:95:bf:a0:a2:d7:5c:4c:
9d:4b:25:da:37:9b:5b:ae:53:54:31:d1:30:0a:af:
3f:f7:9b:80:9c:18:2e:fc:1d:0c:a0:d3:cd:a8:5c:
9a:62:a0:f4:e7:f2:b6:c8:01:7c:16:5a:45:8e:4a:
82:f7:db:13:02:e9:86:ae:af:56:64:56:42:c8:35:
4f:c0:27:ae:f7:5a:6a:59:e0:78:c7:d3:81:ae:03:
18:fd:28:4c:76:24:44:37:c8:e4:6a:fc:a2:1d:15:
24:48:3b:65:f1:bd:5f:0f:76:84:ed:7c:2f:c0:28:
c5:ee:85:84:eb:bc:5f:84:da:23:25:ed:43:76:02:
b7:f5:05:a0:f5:4b:0c:ad:62:21:12:06:09:6b:9f:
5d:dd:f9:2c:b9:93:11:c9:10:ee:d1:69:f4:9d:bb:
2e:90:06:96:f5:ca:01:c2:b9:98:86:85:d4:9c:ef:
12:c9:90:ae:40:b1:fb:cb:5e:e2:82:59:75:55:4a:
6a:17:54:22:66:a4:6f:09:4c:e8:98:4a:0f:fa:8e:
54:33:ca:cb:4c:9a:51:41:ff:60:1e:e4:0a:d1:85:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:50:90:72:26:2F:E5:F6:36:8D:64:98:6C:6E:C2:B2:75:52:B9
X509v3 Authority Key Identifier:
keyid:3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/S1BQkHImL-X2No1kmGxuwrJ1Urk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.124.0/22
176.106.32.0/21
Signature Algorithm: sha256WithRSAEncryption
42:5f:b5:da:80:fe:10:11:59:c4:5e:b5:fc:fe:26:4b:74:d8:
11:41:22:c6:11:ad:1a:a7:da:9f:95:3a:10:0e:99:dc:d6:8e:
74:6e:2d:f5:d1:20:38:09:d5:f0:90:9b:96:4a:99:38:3a:9f:
ee:c9:b1:ce:88:d4:58:e0:b0:85:48:c5:bf:56:65:c2:70:79:
b4:db:3f:2d:a1:bf:75:1e:8f:cd:98:21:f1:29:d2:d7:b0:5e:
ab:30:4c:25:81:c1:3d:0a:81:e9:56:bb:d0:ae:53:a3:85:bb:
da:e5:29:53:ef:d7:cd:48:e8:8e:e7:c5:bf:43:13:77:5a:da:
76:e1:80:47:4e:46:7a:cd:b5:47:71:2f:54:73:c7:b3:25:e5:
cb:e9:8b:4c:5d:e3:10:ae:06:49:1d:c7:f6:98:83:8c:67:be:
3f:7f:2a:09:c2:e9:e6:a9:4e:2f:3b:02:8d:7e:42:f2:91:bf:
92:b0:3e:a2:e3:08:a3:2d:b9:90:f9:29:f1:a2:e6:71:d9:17:
f5:68:f8:48:5c:39:74:0a:fc:c2:25:16:ba:78:13:96:ea:60:
3a:17:7a:35:45:e2:56:8b:bb:a9:a9:1f:eb:07:08:61:61:5f:
8b:5d:0b:6a:26:a8:1d:25:e3:00:b4:2c:82:70:91:a4:63:32:
06:e5:03:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net