Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/91Awp5mXjKzZCsf7dN-liA2Ls2s.roa
File: 91Awp5mXjKzZCsf7dN-liA2Ls2s.roa (raw, json)
Hash identifier: MytGfjjH6cEwUcoHeUm1+VmWjstyOjXBDl7GkIzMXzo=
Subject key identifier: F7:50:30:A7:99:97:8C:AC:D9:0A:C7:FB:74:DF:A5:88:0D:8B:B3:6B
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D981B57BCBD1338D99431A6B200F
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/91Awp5mXjKzZCsf7dN-liA2Ls2s.roa
Signing time: Sun 01 Jan 2023 11:22:44 +0000
ROA not before: Sun 01 Jan 2023 11:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198961
IP address blocks: 178.254.171.0/24 maxlen: 24
178.254.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d9:81:b5:7b:cb:d1:33:8d:99:43:1a:6b:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f75030a799978cacd90ac7fb74dfa5880d8bb36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:9a:5f:78:ea:2c:73:b0:de:a5:9b:1a:5c:
f7:b7:58:f0:d1:a4:32:11:7d:b1:cf:36:e2:5c:66:
70:27:e5:cf:58:ae:37:ed:67:0a:0d:19:19:f0:15:
ad:55:7a:de:30:ac:1a:86:23:8a:f3:c8:b1:6e:dd:
4d:54:96:af:ca:5a:d3:35:6c:c1:e2:b1:39:b6:09:
1a:43:79:97:c8:09:8f:16:81:32:69:1d:fc:27:03:
08:80:79:e6:a2:04:20:a9:90:7d:c5:23:03:ec:5e:
61:45:ae:3b:57:48:d2:c0:d5:f7:2b:c0:c4:5b:b1:
b2:28:c7:7a:41:10:48:a9:c0:30:26:1f:a5:64:84:
a9:a0:2b:c5:00:d9:5d:25:f5:15:d5:ac:ff:0c:4a:
51:80:95:c5:32:05:a3:5f:d0:8b:97:fa:e7:b4:c0:
9b:08:f8:50:09:e5:06:cd:d9:f3:20:df:94:57:db:
7c:92:75:61:53:2a:24:8f:42:cf:44:a9:d4:f1:26:
e6:33:e7:62:99:a9:b4:9f:39:5a:aa:84:f7:d8:7c:
85:24:d0:2e:24:8f:aa:3a:8d:6d:93:ed:74:2e:0a:
f2:01:39:74:1b:f5:1c:bd:d9:c3:93:06:4e:2e:7c:
61:25:56:c1:36:10:d6:13:57:a4:4e:00:f5:d8:0c:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:30:A7:99:97:8C:AC:D9:0A:C7:FB:74:DF:A5:88:0D:8B:B3:6B
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/91Awp5mXjKzZCsf7dN-liA2Ls2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.171.0/24
178.254.179.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ab:12:bd:84:bf:ff:ea:05:f9:da:3c:08:c4:eb:95:7f:58:
a3:d7:6c:cb:79:5e:7a:31:b0:bc:3f:dd:ca:62:a3:c9:c3:bf:
da:77:f5:4a:c3:55:bd:42:93:d6:e4:06:eb:8f:0f:74:d9:0e:
3d:8c:98:ec:31:67:92:f4:a3:cc:66:5d:76:fc:b8:59:d3:96:
eb:d5:3a:02:66:73:41:60:a6:db:c6:d4:14:bf:b5:d0:26:8c:
cf:72:d3:63:dd:4c:90:8f:10:cd:16:19:f7:77:2a:bf:16:4b:
0c:81:03:65:5f:ee:01:9a:f1:b7:29:53:4a:99:95:5a:85:c7:
93:7e:e3:34:de:cf:8f:03:12:76:41:b5:b0:d9:7f:1d:6b:95:
1b:18:93:d1:de:cd:a0:e3:63:bd:7d:36:cb:9a:84:fd:47:5b:
e8:dc:52:dc:4b:d6:f8:e9:6d:0b:e8:65:ae:fe:23:79:dd:17:
e4:18:fb:fc:99:63:d8:71:f3:8d:d0:56:c9:d5:f0:df:28:ae:
ba:d1:5c:cc:5b:c9:cf:88:7f:3a:40:e4:07:ef:3a:5a:17:17:
f7:ac:3c:16:e8:ea:33:62:7f:51:39:75:4e:a5:28:91:2c:d8:
a9:5d:53:8b:f1:20:da:ce:57:a0:70:d3:92:96:8b:b3:47:5e:
fc:16:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net