Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/6nJ-i3ms5ijI10UMecpa3vOEJ0M.roa
File: 6nJ-i3ms5ijI10UMecpa3vOEJ0M.roa (raw, json)
Hash identifier: KBkRG7EpbQQwy8L8R5NwngUOF+slGSdnz8FNHvkCEic=
Subject key identifier: EA:72:7E:8B:79:AC:E6:28:C8:D7:45:0C:79:CA:5A:DE:F3:84:27:43
Certificate issuer: /CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Certificate serial: 01892CA081AC39E51BB4BABCA53028C24903
Authority key identifier: F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/6nJ-i3ms5ijI10UMecpa3vOEJ0M.roa
Signing time: Thu 06 Jul 2023 19:14:23 +0000
ROA not before: Thu 06 Jul 2023 19:14:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 91.198.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:a0:81:ac:39:e5:1b:b4:ba:bc:a5:30:28:c2:49:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Validity
Not Before: Jul 6 19:14:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea727e8b79ace628c8d7450c79ca5adef3842743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:68:9b:7e:6a:62:cc:46:22:f4:ce:3e:73:
1e:6d:5c:e6:ce:2a:7b:a0:f3:c4:e8:ba:f8:eb:f1:
a4:d5:1d:8d:68:58:be:6d:31:e7:86:df:b6:1d:08:
8c:6b:5f:6e:83:e0:40:0d:6c:dc:58:a5:b2:aa:70:
c3:ef:28:49:e4:02:b0:3e:a7:47:fa:93:38:c9:00:
ef:00:96:0d:5c:31:77:93:a3:bc:43:f2:44:a8:04:
70:0c:8a:91:18:3b:08:02:de:e3:50:bc:02:17:e2:
85:96:9a:aa:5c:15:15:43:18:1c:4e:b3:43:30:00:
eb:d7:b1:30:46:33:02:cc:20:d5:77:0d:96:d3:18:
57:72:ad:bd:30:ab:fd:90:f0:c1:0b:0e:db:b3:ab:
3a:51:e8:5a:d1:8d:79:79:07:a7:27:b1:fe:39:b8:
17:76:b1:54:d2:f3:42:ff:3e:84:ec:ad:84:f7:41:
d5:d8:eb:8b:94:0d:e3:f4:86:0f:dd:a1:81:1a:41:
71:57:fa:12:2f:42:79:2b:e1:c4:44:33:ad:bc:0a:
fd:23:2d:15:07:61:8d:49:74:cd:0b:c9:ca:9e:53:
a5:9e:a4:7b:96:f4:0d:a4:97:8a:09:4b:44:2a:bb:
63:e5:5e:dd:ab:ec:6f:c3:1a:f3:e8:c7:23:78:03:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:7E:8B:79:AC:E6:28:C8:D7:45:0C:79:CA:5A:DE:F3:84:27:43
X509v3 Authority Key Identifier:
keyid:F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/6nJ-i3ms5ijI10UMecpa3vOEJ0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.87.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f2:13:69:9d:e0:1f:75:42:88:29:65:d2:44:e8:43:50:ff:
8b:9b:a2:57:e6:42:9c:2d:62:e8:65:e6:b7:7e:5a:07:91:17:
a8:73:cf:ae:b6:f8:56:68:93:77:5d:80:b4:58:ad:91:4a:ef:
76:38:94:8d:e9:30:f3:7d:bd:d4:cc:d6:a9:8b:47:c8:8c:28:
ca:55:13:0b:85:50:f4:2f:9a:4a:3c:2e:94:fc:b5:43:d4:ec:
29:a2:8d:66:f1:3e:69:40:db:f1:cd:a7:1f:03:55:61:3e:0c:
02:cc:50:eb:d7:31:da:09:48:6f:87:19:04:2c:51:1e:66:c9:
bd:ce:f8:44:87:00:ce:eb:1e:74:7e:3e:3e:54:2e:8d:ef:26:
b2:6d:90:30:9c:1a:30:89:b4:94:86:16:0d:e8:29:0c:25:b8:
41:4e:a8:18:d8:04:95:e7:89:fd:ce:df:be:b9:a2:67:15:0e:
a9:15:7f:cb:84:47:05:6e:a3:ee:d2:fc:7f:fd:67:96:aa:9c:
6b:a8:34:2a:b6:e1:06:f0:52:18:97:93:c8:5b:79:89:7c:b7:
d3:48:77:00:a5:91:da:0c:55:0b:42:48:0e:08:f7:04:2c:39:
07:e5:24:c2:3b:99:dd:5d:82:2e:03:5f:e2:53:03:a1:d1:a8:
db:14:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org