Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/Rxf_UVwyWlAqsOqebUpcXgObFpo.roa
File: Rxf_UVwyWlAqsOqebUpcXgObFpo.roa (raw, json)
Hash identifier: zNLF2W2Aroh90oWleUkamgKul1C+K8x+E57sesqh4TQ=
Subject key identifier: 47:17:FF:51:5C:32:5A:50:2A:B0:EA:9E:6D:4A:5C:5E:03:9B:16:9A
Certificate issuer: /CN=9959ce4eae5fb6592b9e42e1433818b6a8664caa
Certificate serial: 018964C2560A1974ED436434F0C76687819E
Authority key identifier: 99:59:CE:4E:AE:5F:B6:59:2B:9E:42:E1:43:38:18:B6:A8:66:4C:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVnOTq5ftlkrnkLhQzgYtqhmTKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/Rxf_UVwyWlAqsOqebUpcXgObFpo.roa
Signing time: Mon 17 Jul 2023 16:50:04 +0000
ROA not before: Mon 17 Jul 2023 16:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.239.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c2:56:0a:19:74:ed:43:64:34:f0:c7:66:87:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9959ce4eae5fb6592b9e42e1433818b6a8664caa
Validity
Not Before: Jul 17 16:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4717ff515c325a502ab0ea9e6d4a5c5e039b169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:0d:58:84:74:2f:c7:ba:f5:d4:c0:b3:6e:
b4:1b:4a:2c:6d:9a:4a:09:5c:f4:13:57:8e:af:e5:
6d:e5:25:31:f7:a2:a3:99:d9:9d:be:93:47:d4:15:
6c:32:e1:2a:25:a1:d7:81:3a:d7:72:4d:6d:ff:33:
c3:27:99:09:90:5f:50:6b:1e:4f:dd:ed:af:9a:32:
11:fc:76:e9:10:92:25:38:35:8d:4c:bc:ed:4a:ec:
6a:3d:4c:74:08:05:17:35:50:0e:f6:65:ba:f0:8b:
76:64:0b:bc:72:44:f6:3b:18:c0:37:08:b2:bc:b2:
2d:01:4d:1c:c5:77:65:83:8f:61:e7:1e:4b:27:b7:
dd:47:5b:80:05:3d:d9:8e:2e:e1:e8:8a:0c:be:ff:
5f:7a:35:24:07:b1:e0:c8:f2:26:47:be:88:a1:1e:
7f:ce:bb:dd:2e:8d:e7:4e:b4:80:48:70:23:22:8d:
86:e9:35:cb:0e:75:d4:63:41:87:be:7b:1f:0f:c5:
73:bc:3f:48:aa:85:14:1c:44:71:13:ad:89:61:8d:
2a:7a:b1:ad:8d:4a:26:da:79:d3:c3:91:08:75:e9:
69:2f:c9:19:e4:ef:16:ad:00:f7:0f:5a:6f:9e:90:
a6:1a:92:ab:32:0e:57:b3:0c:43:f8:c1:f2:d8:db:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:17:FF:51:5C:32:5A:50:2A:B0:EA:9E:6D:4A:5C:5E:03:9B:16:9A
X509v3 Authority Key Identifier:
keyid:99:59:CE:4E:AE:5F:B6:59:2B:9E:42:E1:43:38:18:B6:A8:66:4C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVnOTq5ftlkrnkLhQzgYtqhmTKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/Rxf_UVwyWlAqsOqebUpcXgObFpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:96:84:ae:8e:14:bf:fc:6a:22:dd:67:e3:ed:04:86:69:5e:
6b:45:fd:a9:d4:8b:06:a5:ef:c4:fd:90:7b:d9:11:26:d5:60:
d0:32:b7:83:d4:5b:51:52:14:05:24:68:e0:f4:43:f8:51:e3:
82:fa:2a:65:1c:53:0f:d8:92:a4:ee:39:b0:3c:28:6f:19:f7:
8c:df:01:1d:5c:69:87:6a:c0:cf:ee:dc:bf:d9:d2:8d:96:ab:
32:80:e2:0d:09:7c:2a:a9:b3:57:ba:2f:8e:50:63:9c:53:ca:
50:16:bd:97:80:64:9d:b4:44:ac:a6:6b:a6:39:3d:cd:95:37:
d5:78:07:88:34:56:ae:7c:a7:d7:d4:cc:79:35:67:70:d2:4a:
cb:3d:3e:11:36:02:d9:7b:b2:79:96:2c:30:ae:34:85:24:27:
ca:6c:35:e2:d0:06:17:da:82:4c:3e:c0:3a:a7:6d:bf:e2:7f:
1a:40:36:d9:7c:05:e8:ee:1a:53:c0:3d:0f:f6:cd:9e:13:97:
85:10:6b:20:11:9c:9e:b3:0c:8c:80:be:ff:a9:8e:6e:b3:5a:
3c:f6:78:cf:55:ce:65:e5:4b:33:23:c0:41:48:6a:f3:4a:f4:
3d:1d:ad:c2:65:04:c5:2b:fd:e5:4e:36:90:26:ba:5c:5c:33:
64:89:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org