Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/f2PJ7SdeSIIwjAvPIhx1VHRVAG8.roa
File: f2PJ7SdeSIIwjAvPIhx1VHRVAG8.roa (raw, json)
Hash identifier: k5UVvEXJprEQmas9ozK9l0DPWqchLi5826omRzMox0E=
Subject key identifier: 7F:63:C9:ED:27:5E:48:82:30:8C:0B:CF:22:1C:75:54:74:55:00:6F
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 0191FFAD8A1CF577B86090B9FE14F97CFD50
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/f2PJ7SdeSIIwjAvPIhx1VHRVAG8.roa
Signing time: Tue 17 Sep 2024 11:10:48 +0000
ROA not before: Tue 17 Sep 2024 11:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47898
IP address blocks: 91.198.249.0/24 maxlen: 24
91.206.252.0/24 maxlen: 24
91.206.253.0/24 maxlen: 24
91.214.136.0/22 maxlen: 22
91.214.136.0/23 maxlen: 23
91.214.138.0/23 maxlen: 23
91.223.122.0/24 maxlen: 24
193.202.118.0/24 maxlen: 24
194.24.236.0/24 maxlen: 24
194.24.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:ad:8a:1c:f5:77:b8:60:90:b9:fe:14:f9:7c:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Sep 17 11:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f63c9ed275e4882308c0bcf221c75547455006f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:b4:aa:00:7e:80:57:7a:fd:75:70:22:3d:
39:ef:72:37:b0:ea:84:dc:ae:d1:ef:32:32:b7:20:
72:79:b4:7e:00:2a:ea:e1:c2:56:10:64:c8:f2:b4:
e3:4c:33:cb:66:54:1e:82:f6:48:fb:6c:a0:df:52:
03:17:3a:59:f3:6c:50:47:5c:6c:b0:ec:b1:50:7b:
97:6f:c7:1d:c8:fa:7c:a7:f1:98:0e:35:80:39:98:
b9:a1:3b:1f:4e:74:66:20:b1:99:10:ac:b5:a8:80:
0a:34:de:65:e6:71:e1:1c:63:c9:d9:5d:8b:c3:fd:
59:9e:9a:49:76:fd:9c:f4:0c:30:18:06:cb:df:60:
4e:f4:78:ba:1b:15:4e:af:41:07:9d:fd:4e:64:ce:
88:08:61:58:3b:fe:33:83:21:7d:8b:b1:9a:25:19:
6b:10:be:40:3c:02:b7:12:8e:d0:5e:c0:13:b5:fb:
bc:0c:56:73:c5:b1:88:34:b3:f6:5f:03:14:e5:23:
5a:a3:72:43:95:4c:48:84:0e:fd:42:f1:88:f7:89:
6d:86:04:ce:55:f4:5d:c0:87:36:d9:21:f0:5b:82:
e9:a4:59:4a:50:4e:2e:2d:e1:8c:b9:11:4b:2d:9a:
b7:40:81:8c:a0:e7:35:3b:d4:70:89:e3:93:23:22:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:C9:ED:27:5E:48:82:30:8C:0B:CF:22:1C:75:54:74:55:00:6F
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/f2PJ7SdeSIIwjAvPIhx1VHRVAG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.249.0/24
91.206.252.0/23
91.214.136.0/22
91.223.122.0/24
193.202.118.0/24
194.24.236.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:28:26:81:39:ce:6c:78:66:ce:ea:e6:68:a9:15:d2:e3:97:
06:28:ab:f5:fe:67:20:99:8b:c8:71:ff:e3:57:07:3c:03:3b:
bf:83:61:0e:7b:1a:0f:37:1d:9f:1a:52:30:1e:ff:d3:24:62:
60:c1:2a:b5:1e:7b:f5:08:12:e2:ac:d5:bc:9c:b6:92:04:b2:
50:70:14:2d:46:73:99:48:8c:f0:0b:67:93:5b:ac:e6:45:be:
83:28:59:db:b5:f1:9d:f8:33:b3:e3:4a:98:20:27:7a:ed:b4:
75:5b:51:ca:6f:02:fa:34:ad:74:b0:42:9a:67:59:66:bb:89:
2e:64:67:13:14:20:ef:cf:72:81:f5:61:61:8d:fe:d8:0c:01:
ac:d3:d1:f5:ca:b9:91:47:56:46:08:fc:2f:6f:85:f1:96:2c:
c2:f1:ad:ca:fd:20:19:2d:62:19:1f:bc:fa:c5:11:4b:8b:28:
e1:db:bc:41:13:0c:69:6c:a6:50:2a:47:74:67:9e:34:78:f3:
c6:90:3d:5f:3d:31:0b:ea:13:83:3b:ee:03:52:c6:7d:1a:c0:
91:9b:7d:78:98:c4:e9:04:e7:61:09:9a:27:b4:74:1e:1f:4b:
13:50:da:06:6b:4a:eb:49:bc:27:2c:47:9e:51:c6:6f:a4:00:
b5:ae:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:26 2024 by rpki-client on console.sobornost.net