Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d55ee2-2df1-4a79-90c4-e3419e0887c1/1/CE1TlbauiXstDVDfkgVVgAYg5G4.roa
File: CE1TlbauiXstDVDfkgVVgAYg5G4.roa (raw, json)
Hash identifier: 20NnhETaxscFp2maDZx0sKDNkJM6HPpzdb7YZwW5CmY=
Subject key identifier: 08:4D:53:95:B6:AE:89:7B:2D:0D:50:DF:92:05:55:80:06:20:E4:6E
Certificate issuer: /CN=e33c0a79af24502acaa6dc2f1677f0400f1c4461
Certificate serial: 36EA74
Authority key identifier: E3:3C:0A:79:AF:24:50:2A:CA:A6:DC:2F:16:77:F0:40:0F:1C:44:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zwKea8kUCrKptwvFnfwQA8cRGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d55ee2-2df1-4a79-90c4-e3419e0887c1/1/CE1TlbauiXstDVDfkgVVgAYg5G4.roa
Signing time: Sat 01 Jan 2022 00:51:20 +0000
ROA not before: Sat 01 Jan 2022 00:51:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64429
IP address blocks: 91.212.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3598964 (0x36ea74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33c0a79af24502acaa6dc2f1677f0400f1c4461
Validity
Not Before: Jan 1 00:51:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=084d5395b6ae897b2d0d50df920555800620e46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:97:d7:23:87:c1:6a:03:2d:4c:1f:a1:a0:
1c:28:ad:1c:ee:af:48:66:7c:e7:4b:3f:2e:5b:1f:
52:e6:a9:10:5c:72:5c:ac:a6:22:f6:6f:b4:07:02:
c1:2e:89:dc:3f:77:29:37:7e:82:99:68:7e:d4:a6:
d3:d5:ca:2e:8e:68:b8:92:c2:18:98:03:53:67:c9:
b1:78:7e:63:30:51:e4:db:70:6b:80:ed:29:35:7b:
b9:70:17:0a:6c:a3:d2:1e:54:a9:07:4d:96:d4:2d:
7a:ab:c3:21:38:6b:9b:31:10:a2:0b:ad:ef:0e:ab:
b0:3d:74:7d:6a:34:c6:34:3e:9d:88:2f:ec:75:00:
53:22:bd:61:14:0b:a3:c4:29:cb:2c:26:03:bc:c1:
0c:3f:9f:ce:d9:7b:43:fb:ea:60:f3:76:33:ed:44:
aa:62:63:44:2a:b1:d6:b1:4d:66:cb:3c:ea:00:6d:
01:ff:51:2c:72:6e:20:6a:29:2f:8e:4b:63:bc:34:
be:7f:fd:22:91:f1:62:e8:c4:a3:16:2b:94:7c:a7:
a1:30:da:a7:c7:07:d9:d8:d7:e6:0e:96:d9:43:1a:
cc:dd:7a:8c:b9:3d:69:78:70:c1:39:46:82:4a:8c:
28:67:72:39:37:1f:a9:22:02:d0:ce:9d:a2:93:20:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4D:53:95:B6:AE:89:7B:2D:0D:50:DF:92:05:55:80:06:20:E4:6E
X509v3 Authority Key Identifier:
keyid:E3:3C:0A:79:AF:24:50:2A:CA:A6:DC:2F:16:77:F0:40:0F:1C:44:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zwKea8kUCrKptwvFnfwQA8cRGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d55ee2-2df1-4a79-90c4-e3419e0887c1/1/CE1TlbauiXstDVDfkgVVgAYg5G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d55ee2-2df1-4a79-90c4-e3419e0887c1/1/4zwKea8kUCrKptwvFnfwQA8cRGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.64.0/24
Signature Algorithm: sha256WithRSAEncryption
19:68:ec:d3:c4:23:5a:43:b7:09:ef:d6:a7:2b:58:ae:8d:e1:
f5:2c:4b:54:73:aa:8f:82:a0:07:81:1e:93:f4:56:5d:76:ca:
f5:e6:e0:26:c5:19:c7:c4:9c:43:21:16:fa:97:2f:99:1a:4f:
5b:94:8b:10:6d:37:0f:22:93:cb:91:61:af:f8:92:0a:51:43:
f5:01:a2:b4:f1:c4:00:ab:33:ef:0a:3f:f7:f7:da:7d:ff:69:
35:6c:d8:f0:e8:ab:f0:fc:2b:af:54:ea:21:80:66:c3:5f:93:
fb:13:81:a3:2f:a5:d2:97:4f:4b:bf:ce:00:0c:c6:62:0f:c4:
44:83:b3:7b:bc:c6:4e:c5:41:ee:62:aa:eb:a4:aa:7a:2e:39:
9a:de:d8:8d:fb:e8:fd:e3:54:7f:e8:5c:26:c2:15:c0:88:c1:
ce:24:5d:14:60:d1:09:a2:24:bb:ab:08:66:5a:fa:97:52:81:
02:3e:c9:0a:96:ee:48:97:41:07:45:e5:d7:48:4c:d0:5a:4c:
38:1c:25:47:da:64:a4:5b:21:43:a5:e3:b4:02:74:ad:a1:08:
0c:9c:ab:84:e4:df:b3:47:d6:a5:2b:82:4c:42:f3:42:d2:ac:
47:12:24:c9:08:23:30:72:65:d8:43:24:31:78:da:68:36:21:
12:93:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:59 2023 by rpki-client on console.sobornost.net