Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1b40af-b75b-4831-a3fa-92c6e2a156c6/1/Tb018TrS_pxn8acy6yn73eY1s9U.roa
File: Tb018TrS_pxn8acy6yn73eY1s9U.roa (raw, json)
Hash identifier: U+UqeEumckSQICmDXsxuqeL+CSmii3lTe6GkTfQDqfc=
Subject key identifier: 4D:BD:35:F1:3A:D2:FE:9C:67:F1:A7:32:EB:29:FB:DD:E6:35:B3:D5
Certificate issuer: /CN=191d3820f137139ebe36a1ac87138a5e98339fcd
Certificate serial: 03ADC34C
Authority key identifier: 19:1D:38:20:F1:37:13:9E:BE:36:A1:AC:87:13:8A:5E:98:33:9F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR04IPE3E56-NqGshxOKXpgzn80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1b40af-b75b-4831-a3fa-92c6e2a156c6/1/Tb018TrS_pxn8acy6yn73eY1s9U.roa
Signing time: Sat 01 Jan 2022 05:02:11 +0000
ROA not before: Sat 01 Jan 2022 05:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 91.213.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61719372 (0x3adc34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191d3820f137139ebe36a1ac87138a5e98339fcd
Validity
Not Before: Jan 1 05:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dbd35f13ad2fe9c67f1a732eb29fbdde635b3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:63:7e:e4:83:ed:38:ac:48:86:fc:3a:85:
7e:21:10:3a:cb:48:b7:df:5a:bc:7d:46:39:59:3e:
09:d6:ea:49:af:05:42:1f:0c:15:13:e4:34:db:4a:
8b:b3:92:2d:6b:cc:6b:c3:82:c8:f7:05:53:c2:37:
74:18:95:85:0a:8d:47:14:0d:f0:9c:84:b1:e4:69:
b8:e5:0b:4a:a6:da:a1:82:f4:3b:d1:62:20:08:d8:
7c:ec:10:b0:50:41:3c:67:4f:fc:38:f4:8e:ba:72:
ed:91:d5:56:ce:0d:f8:7a:97:f2:cc:d2:30:60:dc:
0d:35:4a:b6:bc:72:a7:57:88:99:85:b6:56:6d:11:
ee:11:d1:ea:0e:4f:85:ed:f2:13:11:4a:ae:e6:fd:
00:7d:b7:8d:a5:93:23:17:bf:e9:db:f8:29:55:bf:
5e:00:7c:6c:ae:3c:8f:0a:9d:22:06:82:b0:95:a5:
ff:4e:28:b8:d4:f4:8b:ee:6a:23:f7:a7:c7:8b:82:
b7:0a:29:75:c9:48:d1:d8:af:e4:5f:30:a4:4c:6f:
93:1d:2c:22:f0:c8:f0:be:a1:05:5a:4d:df:b0:64:
ac:85:e7:24:09:ee:a6:3b:3f:f0:54:8a:d6:58:8e:
ca:f7:6a:cd:5f:d3:f3:9c:18:d8:d1:69:c8:25:73:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BD:35:F1:3A:D2:FE:9C:67:F1:A7:32:EB:29:FB:DD:E6:35:B3:D5
X509v3 Authority Key Identifier:
keyid:19:1D:38:20:F1:37:13:9E:BE:36:A1:AC:87:13:8A:5E:98:33:9F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR04IPE3E56-NqGshxOKXpgzn80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1b40af-b75b-4831-a3fa-92c6e2a156c6/1/Tb018TrS_pxn8acy6yn73eY1s9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1b40af-b75b-4831-a3fa-92c6e2a156c6/1/GR04IPE3E56-NqGshxOKXpgzn80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4a:28:7c:29:0b:6f:21:9e:a3:37:9e:6c:da:37:22:c9:18:
b2:aa:29:ca:72:00:8d:77:06:53:1a:99:a8:ea:a1:f8:82:b2:
46:19:1c:31:91:c7:6e:b7:8d:23:a4:83:6e:22:b5:66:31:f9:
d4:a3:3a:00:00:85:4b:df:a2:cf:8e:da:1a:f7:00:94:30:bf:
75:d0:a4:06:78:ed:d1:1f:69:c5:a3:46:99:8d:f0:d4:5e:12:
9e:5a:e8:73:a3:7a:d7:ac:53:16:7c:62:3e:38:75:7f:60:0d:
c3:f9:b6:d9:22:59:75:17:b5:0a:6d:c4:87:16:b6:65:3c:b3:
f7:0a:83:6b:7d:76:fc:44:42:a5:3e:2e:0c:e9:5b:65:db:cb:
f9:68:c0:a1:9a:69:ef:71:2d:d3:85:94:b7:dd:27:d9:18:f0:
a4:78:33:e4:6e:25:21:5b:09:4c:93:8e:99:4e:ad:47:d5:4a:
88:e3:fd:b2:db:b6:76:a3:12:ce:a1:cf:7f:5c:ca:93:f7:84:
90:ec:a1:cd:5d:1f:e8:0d:99:28:0a:1b:bc:b6:ab:1a:73:41:
45:a2:08:a3:1a:42:4c:03:b8:e3:ad:d9:a8:7e:3d:e3:1b:b9:
b7:d6:c8:00:c9:dd:08:1b:3d:2b:c4:0e:06:0a:98:69:cd:01:
13:04:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:45 2023 by rpki-client on console-ams.rpki-client.org