Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/kS8VSzPAy6UQHdQarPokADkS8m8.roa
File: kS8VSzPAy6UQHdQarPokADkS8m8.roa (raw, json)
Hash identifier: ifJS4kDROLKW1jBQ+jNmYuECZo48HpGF6hUBvPWht0U=
Subject key identifier: 91:2F:15:4B:33:C0:CB:A5:10:1D:D4:1A:AC:FA:24:00:39:12:F2:6F
Certificate issuer: /CN=9f8de721e3aa46c02a386bab94e34d8a5800583a
Certificate serial: 018570151B74396099F4513B60FFC2D6DCEB
Authority key identifier: 9F:8D:E7:21:E3:AA:46:C0:2A:38:6B:AB:94:E3:4D:8A:58:00:58:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n43nIeOqRsAqOGurlONNilgAWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/kS8VSzPAy6UQHdQarPokADkS8m8.roa
Signing time: Mon 02 Jan 2023 01:25:09 +0000
ROA not before: Mon 02 Jan 2023 01:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394540
IP address blocks: 91.205.112.0/24 maxlen: 24
91.205.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:1b:74:39:60:99:f4:51:3b:60:ff:c2:d6:dc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8de721e3aa46c02a386bab94e34d8a5800583a
Validity
Not Before: Jan 2 01:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=912f154b33c0cba5101dd41aacfa24003912f26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f8:38:cc:38:3c:d4:3b:7a:19:fd:d8:0c:c0:
eb:bf:ba:d6:4e:18:31:a1:28:8e:c5:97:ac:e2:ab:
1a:c9:2f:44:10:c6:bf:2c:04:ff:c5:eb:cf:4a:ad:
ac:58:f8:b6:13:f9:ef:a0:4b:48:ad:1a:ee:48:b1:
9b:27:f8:02:91:de:a2:a1:20:0c:31:f1:35:b7:a4:
5f:8a:28:b8:5e:0b:be:fa:4c:3f:ed:0c:0e:a3:07:
fc:36:1e:77:f5:83:36:65:b8:f6:f8:bc:18:cd:34:
7e:de:d1:c6:75:f0:5e:f9:bd:f9:2b:e3:b9:64:c2:
ea:10:10:f4:57:57:bb:a2:69:99:df:09:f5:1e:34:
da:8b:6d:1a:f3:cf:1d:ae:10:fc:26:fc:d0:20:fc:
19:2d:07:46:e9:f9:a4:40:cb:70:6f:b9:6a:c7:25:
f5:82:91:5b:ba:44:7c:ef:19:e3:ec:87:81:f5:8f:
51:51:52:d6:e6:08:3e:2e:2c:be:f9:3f:0b:23:82:
75:1f:16:4b:11:a8:63:d4:4e:bf:76:e9:d1:7c:3d:
e7:17:a1:2f:7e:cc:f5:60:fc:5a:27:e8:3b:6a:69:
32:b4:46:f3:b2:46:02:c4:b4:18:79:20:a6:25:84:
c3:d0:eb:69:68:d1:85:95:d4:a1:2d:ee:3d:d4:f4:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:15:4B:33:C0:CB:A5:10:1D:D4:1A:AC:FA:24:00:39:12:F2:6F
X509v3 Authority Key Identifier:
keyid:9F:8D:E7:21:E3:AA:46:C0:2A:38:6B:AB:94:E3:4D:8A:58:00:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n43nIeOqRsAqOGurlONNilgAWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/kS8VSzPAy6UQHdQarPokADkS8m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/n43nIeOqRsAqOGurlONNilgAWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.112.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:a4:8d:0a:5c:bb:af:3f:68:f6:ca:a2:ec:6c:88:32:13:ea:
22:91:13:b6:15:1b:39:b3:dd:ff:42:03:89:b6:3b:93:38:f3:
b6:2a:c3:09:1b:9c:39:bf:d1:77:a2:08:c7:9a:27:be:33:2a:
11:59:89:2f:84:dc:ed:6a:38:0f:a9:6d:0e:92:e3:e3:dd:2a:
49:28:b4:92:36:d6:06:0a:b0:69:e2:f3:44:16:cb:bc:63:a7:
16:93:3c:fa:d5:7e:c0:43:df:25:d8:0f:e4:c4:39:79:1f:20:
fa:b3:2c:de:ac:b4:3a:e8:87:20:31:ce:7c:42:84:83:c0:f1:
55:d7:a0:a1:d0:cb:9b:bc:d4:b6:db:88:de:92:ae:b1:4b:10:
d6:ea:9a:04:1a:5d:97:8d:3e:bb:10:c4:a4:a9:6d:ac:74:16:
ff:36:4b:78:ea:64:79:27:44:13:3d:15:b9:c1:c8:7c:21:96:
7a:bf:56:c1:1a:ae:eb:32:c7:0a:b4:0e:67:b3:8c:04:4d:30:
28:5a:66:18:34:72:4e:c1:94:6e:5f:22:4a:2e:b3:e1:56:e1:
d7:f0:ac:1b:17:da:d3:c1:10:30:03:f2:22:3a:79:4f:c0:81:
78:92:db:9d:fc:0b:45:8c:5b:1b:ac:8a:ed:c6:2c:dc:fb:a9:
42:a7:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:55 2024 by rpki-client on console-fra.rpki-client.org