Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/LvYl2_X3JcHGh2VhQDKndgxIHrs.roa
File: LvYl2_X3JcHGh2VhQDKndgxIHrs.roa (raw, json)
Hash identifier: MD/Zty84HtvPfKRUVC1s2Uu8aSFkQ4VmFDQP5B9wtvU=
Subject key identifier: 2E:F6:25:DB:F5:F7:25:C1:C6:87:65:61:40:32:A7:76:0C:48:1E:BB
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 0212CD78
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/LvYl2_X3JcHGh2VhQDKndgxIHrs.roa
Signing time: Sat 01 Jan 2022 01:01:33 +0000
ROA not before: Sat 01 Jan 2022 01:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212941
IP address blocks: 178.239.249.0/24 maxlen: 24
31.222.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34786680 (0x212cd78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Jan 1 01:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef625dbf5f725c1c68765614032a7760c481ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:22:ae:b5:c3:98:d5:40:da:e2:7a:e7:82:
69:2b:cb:4c:cd:07:08:d0:bc:ff:19:7b:c3:5a:17:
88:a8:7d:52:e4:b6:25:28:10:8a:e5:ea:fe:a6:16:
8b:3a:54:4d:66:c1:18:aa:73:f0:fa:5a:20:ba:3d:
71:60:16:fd:b7:31:99:78:91:d8:b5:33:a0:0d:38:
70:94:56:0b:42:40:c3:87:f2:4f:e7:36:a7:6c:3b:
a0:a0:b1:74:8d:e0:f5:f4:5a:61:1e:ad:96:48:ae:
ce:7f:80:fa:85:80:f5:18:f8:a2:cb:aa:1f:de:48:
c6:91:06:7a:c1:43:74:47:d6:19:76:f5:b2:2d:9d:
18:6c:6b:a6:60:64:2e:a3:85:d4:10:cc:f7:30:f6:
d5:02:aa:99:97:13:2c:96:08:d9:93:f2:06:73:45:
d9:40:6e:2b:26:94:64:a3:ee:fe:ff:48:ce:ef:bc:
40:36:6b:34:89:9e:cd:4b:a8:73:73:04:61:b6:a1:
93:1f:f4:a0:10:f2:8e:27:51:59:3f:93:77:c2:be:
c0:3e:3e:83:e8:62:01:89:b7:67:3e:e6:30:bd:21:
44:0f:d4:9b:15:24:f9:5a:41:cd:fe:0e:25:52:c9:
b7:66:50:ba:7c:37:ec:2f:4e:3c:04:ae:a9:e8:03:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:25:DB:F5:F7:25:C1:C6:87:65:61:40:32:A7:76:0C:48:1E:BB
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/LvYl2_X3JcHGh2VhQDKndgxIHrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.110.0/24
178.239.249.0/24
Signature Algorithm: sha256WithRSAEncryption
48:93:52:41:07:29:a2:0a:62:aa:2a:51:e7:d7:9a:88:b1:d6:
86:ed:d3:0b:69:e4:93:6e:33:75:5a:ba:79:70:d7:b2:57:10:
9f:04:59:5b:be:bc:9e:e5:8c:39:0f:5d:90:e4:73:88:6a:53:
87:2f:34:3b:ad:57:01:f1:f2:be:1e:55:f3:dc:52:a8:9d:8f:
eb:2c:22:58:64:3f:d9:f3:c0:4a:a0:2f:62:27:23:f6:c4:30:
ea:e4:bb:5d:8c:3d:86:73:94:50:12:1a:61:80:dd:38:7b:a0:
d6:9e:73:35:c7:e3:f7:2d:c5:66:da:a9:c6:02:9d:e7:be:c8:
e6:2e:00:58:cb:85:d9:3d:d0:08:e6:81:8d:63:20:a3:7f:4a:
22:fc:4b:64:ef:86:72:31:ba:36:40:3b:86:aa:04:dd:a3:cd:
ac:c6:76:a5:c5:50:d5:5d:50:2b:de:67:ca:37:ec:d3:99:2a:
29:cf:e8:86:b2:02:de:d9:eb:16:d9:10:dc:06:15:de:cb:fc:
f6:80:48:63:94:0a:72:de:19:ab:56:95:1d:bd:c4:f7:9c:79:
30:13:ed:31:43:b5:2c:ef:88:07:fa:72:81:32:71:3c:85:bc:
ca:f3:8d:29:e0:fc:fc:fd:6a:c7:71:e5:db:8d:70:0e:66:85:
9a:32:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net