Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/14cec6-41b6-49a3-8d1d-271038b7693f/1/8vAbQZnz_l5_3G8cQc0LvsgpGnU.roa
File: 8vAbQZnz_l5_3G8cQc0LvsgpGnU.roa (raw, json)
Hash identifier: tJqCv/imju9XFTRZQL2fELPuh56u87wZv4sqMflqqzM=
Subject key identifier: F2:F0:1B:41:99:F3:FE:5E:7F:DC:6F:1C:41:CD:0B:BE:C8:29:1A:75
Certificate issuer: /CN=a06252613c9669f5ba5d1a59234e5684de21a0bc
Certificate serial: 01856D8ACD75F05CA7ED56028611A59BBCE2
Authority key identifier: A0:62:52:61:3C:96:69:F5:BA:5D:1A:59:23:4E:56:84:DE:21:A0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGJSYTyWafW6XRpZI05WhN4hoLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/14cec6-41b6-49a3-8d1d-271038b7693f/1/8vAbQZnz_l5_3G8cQc0LvsgpGnU.roa
Signing time: Sun 01 Jan 2023 13:34:51 +0000
ROA not before: Sun 01 Jan 2023 13:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 91.242.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:cd:75:f0:5c:a7:ed:56:02:86:11:a5:9b:bc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06252613c9669f5ba5d1a59234e5684de21a0bc
Validity
Not Before: Jan 1 13:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2f01b4199f3fe5e7fdc6f1c41cd0bbec8291a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:05:9f:24:5c:58:0d:17:eb:d6:50:20:83:
22:e4:b8:61:27:63:82:56:e5:d8:ac:38:be:47:1e:
19:fc:81:e2:02:e3:91:77:28:f2:f2:66:73:86:d9:
9b:c7:3f:4a:91:a5:65:f7:39:76:fb:d4:07:db:ef:
df:3a:59:5d:3f:09:c8:a8:73:b6:9e:cb:43:ea:97:
46:96:dc:73:9a:68:61:ec:9e:9b:02:27:45:30:66:
eb:0e:d6:e6:84:42:bd:d3:81:66:5f:21:29:c4:75:
89:47:50:c2:46:1b:f1:aa:53:8c:fc:a4:f9:ea:94:
95:dc:77:18:34:e5:4c:f9:be:65:07:43:25:2c:a4:
15:b8:89:aa:08:27:7d:b1:03:14:2d:f4:83:ad:30:
92:f3:b1:ee:ac:94:14:a8:4f:9f:f9:03:a0:a1:ad:
a7:9c:b7:92:14:a1:94:5e:8a:1a:59:60:84:11:ea:
ae:36:ef:97:d0:57:e9:3b:bd:df:ee:ae:f7:88:82:
0d:d0:85:bb:6c:06:d6:bc:4f:35:a6:4c:47:6b:95:
5e:ac:7b:d1:66:2f:9e:33:1d:5f:18:02:d4:3d:ba:
16:f9:ee:8a:ec:c0:5a:24:a2:70:89:aa:ee:ba:a1:
4f:fa:7c:54:7d:93:4a:ed:74:5e:70:0b:e5:d1:f9:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F0:1B:41:99:F3:FE:5E:7F:DC:6F:1C:41:CD:0B:BE:C8:29:1A:75
X509v3 Authority Key Identifier:
keyid:A0:62:52:61:3C:96:69:F5:BA:5D:1A:59:23:4E:56:84:DE:21:A0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGJSYTyWafW6XRpZI05WhN4hoLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/14cec6-41b6-49a3-8d1d-271038b7693f/1/8vAbQZnz_l5_3G8cQc0LvsgpGnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/14cec6-41b6-49a3-8d1d-271038b7693f/1/oGJSYTyWafW6XRpZI05WhN4hoLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.224.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:47:af:e2:f4:2b:ec:f9:54:5c:90:6f:61:56:c0:0c:cd:76:
00:cb:ae:1b:ce:ae:cd:74:6a:35:6f:5c:0c:8a:dd:10:d1:d6:
20:35:c8:f7:aa:c2:ec:f9:0f:16:1d:8e:dd:57:12:8c:84:81:
e2:84:ee:07:ce:39:f8:54:01:ab:f2:0e:55:d6:43:65:33:e0:
f0:96:bb:fb:88:71:db:56:44:00:b3:8f:ab:ee:80:fd:9e:3a:
42:b2:61:33:33:81:e1:c1:bb:c2:cd:e9:fe:ee:ef:42:f4:0c:
97:90:bf:f3:6e:da:5d:36:f8:ab:f8:37:9d:80:2c:1f:5c:dd:
6b:9e:b3:94:84:da:6f:a6:7e:e5:b9:0b:e1:ad:e3:ba:57:79:
b5:3f:da:00:d0:98:90:8a:29:ad:23:d1:cf:eb:bb:4a:8f:49:
c0:88:40:bd:39:cc:15:3c:81:60:38:b7:21:78:dd:df:48:04:
6a:61:74:2f:8d:43:76:e4:9f:c3:db:e2:75:45:3e:ce:1c:0b:
36:e6:e0:ae:9b:b5:7f:11:87:fc:09:27:ec:09:0a:74:05:b5:
c4:72:26:e9:b1:23:5b:d9:0c:de:9e:78:ce:2e:d7:50:87:27:
13:5d:4b:2a:ab:6a:e8:0b:9f:7b:0c:38:49:d3:3b:69:2d:e1:
fb:b0:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:51 2024 by rpki-client on console-ams.rpki-client.org