Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/8W6bMVQbgv_5NorpHt51tqeqqoc.roa
File: 8W6bMVQbgv_5NorpHt51tqeqqoc.roa (raw, json)
Hash identifier: xh8gz5IkW8stnOi8/XSq4NZOFw5kLQ/VSyCttGypmeM=
Subject key identifier: F1:6E:9B:31:54:1B:82:FF:F9:36:8A:E9:1E:DE:75:B6:A7:AA:AA:87
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 01936C911EA54D58C8B92FBC2F6D3A32FB7A
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/8W6bMVQbgv_5NorpHt51tqeqqoc.roa
Signing time: Wed 27 Nov 2024 07:41:10 +0000
ROA not before: Wed 27 Nov 2024 07:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58326
IP address blocks: 91.106.208.0/21 maxlen: 24
185.66.160.0/22 maxlen: 24
185.177.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:91:1e:a5:4d:58:c8:b9:2f:bc:2f:6d:3a:32:fb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Nov 27 07:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f16e9b31541b82fff9368ae91ede75b6a7aaaa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:db:ff:6a:e4:65:8f:74:63:12:9e:b5:3c:8a:
93:12:44:b8:2d:af:d5:35:49:a5:30:47:96:bc:14:
b6:4f:e2:4c:09:09:dd:03:3d:93:76:d5:54:fa:c0:
9e:3f:ff:90:da:59:25:f8:d6:a1:20:bf:c7:85:17:
6c:19:84:97:aa:51:62:88:e9:e3:4b:32:a7:5d:bc:
1d:c9:0a:90:ac:d7:81:68:9e:3a:ab:60:98:4a:0c:
30:81:2d:15:df:24:f0:d0:ec:90:20:5d:98:a6:31:
74:22:90:ea:1b:31:bc:d8:e0:98:b4:0d:13:f4:81:
f4:fb:b6:1b:a9:f7:13:ee:c7:9a:22:6f:61:f2:04:
b8:f6:af:f5:b8:34:aa:1d:3b:47:8c:ad:1f:54:f3:
5f:2c:81:df:1b:ba:6a:01:78:d2:7f:ea:e4:dc:96:
a9:ca:3f:ad:49:2a:c8:06:e1:38:3c:87:ee:df:99:
3f:d5:a8:73:c6:50:c0:13:24:f4:84:5a:e7:1b:4d:
47:fc:7a:cf:49:28:b3:9a:61:0b:1c:e3:d7:07:5e:
cb:9a:60:70:2b:7b:46:5f:cd:30:99:ba:63:10:45:
1a:26:92:f4:53:01:58:c7:0b:a4:81:87:b4:cd:42:
c8:8e:db:65:56:80:54:a4:51:f9:55:db:8f:95:eb:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:9B:31:54:1B:82:FF:F9:36:8A:E9:1E:DE:75:B6:A7:AA:AA:87
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/8W6bMVQbgv_5NorpHt51tqeqqoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.208.0/21
185.66.160.0/22
185.177.88.0/22
Signature Algorithm: sha256WithRSAEncryption
48:c7:e6:eb:f2:b1:1b:8f:2e:6c:55:e6:b3:96:7f:3f:93:4e:
6b:f8:e0:76:9d:76:b3:63:e9:21:78:6c:2a:29:9c:4b:3e:0c:
18:23:60:71:31:85:ef:cf:88:a2:93:b6:47:e2:0c:60:e0:cf:
08:f6:30:b8:29:14:e1:a0:88:49:a9:90:f9:fa:99:e6:ec:a9:
3c:b7:59:bb:1e:cf:f2:f7:b4:a6:f0:78:dd:6b:ed:6a:68:5c:
10:cd:a8:4d:64:e0:69:81:72:d1:48:51:8f:69:85:5a:89:c7:
22:5c:8b:b6:8d:62:d9:a8:b2:6c:b3:98:d4:89:27:d2:72:85:
bd:b9:2f:e9:32:8e:ad:9d:f5:28:72:07:97:01:74:d7:f0:83:
af:2d:24:f8:9c:8c:e0:ac:90:5a:06:38:9b:2b:a8:47:63:e1:
98:64:49:7b:6b:56:cc:19:22:8d:a3:69:9a:5e:f0:18:4b:ea:
84:50:e9:c2:f6:c7:ba:50:c8:00:56:d9:44:03:bf:66:8e:39:
ce:63:d7:3c:5a:8d:bb:99:1e:ab:a4:9f:e5:f2:6f:59:18:06:
e0:03:1f:69:1d:7e:19:66:0a:93:2f:aa:7d:93:c6:e0:8a:ec:
c2:6e:88:67:17:67:3b:be:b8:87:00:74:bb:15:a8:8c:35:bd:
da:05:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:21 2024 by rpki-client on console.sobornost.net