Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/Me61TctcMFdyopOA-TH8vhTo1Ic.roa
File: Me61TctcMFdyopOA-TH8vhTo1Ic.roa (raw, json)
Hash identifier: +m7Rg6WduucEj4qPhfec8CnNDdD8TeO+NDt91eukUiA=
Subject key identifier: 31:EE:B5:4D:CB:5C:30:57:72:A2:93:80:F9:31:FC:BE:14:E8:D4:87
Certificate issuer: /CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Certificate serial: 01856D01AE73DF674E30C5256AB3EEE4AB31
Authority key identifier: 65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/Me61TctcMFdyopOA-TH8vhTo1Ic.roa
Signing time: Sun 01 Jan 2023 11:05:04 +0000
ROA not before: Sun 01 Jan 2023 11:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207306
IP address blocks: 91.240.92.0/24 maxlen: 24
2a0a:d880::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:ae:73:df:67:4e:30:c5:25:6a:b3:ee:e4:ab:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Validity
Not Before: Jan 1 11:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31eeb54dcb5c305772a29380f931fcbe14e8d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:a5:87:06:e9:53:47:da:af:36:8e:ff:2d:
19:e7:ea:19:3b:f6:67:02:31:ec:14:43:71:c7:23:
92:17:00:4c:bf:fd:6d:92:66:d5:fb:29:d3:51:26:
db:fe:2b:de:cb:a5:12:6c:52:f5:1a:3b:4a:19:2f:
cf:b2:c0:b4:4b:46:94:d0:12:50:22:6e:ef:d5:1a:
da:ed:52:28:f9:ce:d2:c9:0e:22:61:ae:38:65:b9:
3a:48:5a:fc:2f:27:0d:b9:1b:2a:bf:62:f4:59:49:
4b:53:3e:ab:99:2a:8a:b7:67:58:a6:ad:ec:1c:c5:
5c:85:f3:cb:15:69:5a:bc:75:ce:30:61:2f:92:b2:
2a:25:f2:0e:1c:9e:06:fc:d4:09:bf:a4:3e:12:b9:
94:b5:3d:27:e3:2d:80:61:49:c8:c7:bc:fb:aa:cf:
bc:0b:a9:42:98:45:66:15:42:31:14:6c:4f:d5:ef:
db:75:1d:61:d8:c3:49:33:6f:07:98:6d:30:63:7a:
b8:07:1e:80:40:28:f6:a0:1d:29:04:77:68:14:8a:
fa:1f:ec:95:a7:c4:5c:34:1e:7f:73:78:89:61:a9:
0e:5a:dd:59:1d:eb:6d:3f:ef:e4:5a:53:06:eb:34:
94:f8:1d:22:3f:2f:e6:a7:c0:e8:3d:5a:57:30:f0:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EE:B5:4D:CB:5C:30:57:72:A2:93:80:F9:31:FC:BE:14:E8:D4:87
X509v3 Authority Key Identifier:
keyid:65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/Me61TctcMFdyopOA-TH8vhTo1Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ZQxZLbH9_ItOag57p1ZGhjc6a18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.92.0/24
IPv6:
2a0a:d880::/44
Signature Algorithm: sha256WithRSAEncryption
68:61:a4:5d:d1:37:91:57:e7:8b:a3:d8:e5:53:d6:37:30:f2:
03:56:c8:72:cb:69:c5:55:a6:4b:54:78:b9:74:76:9d:ad:a5:
5c:55:ef:7b:f0:18:cc:7f:61:a0:5d:84:f8:c0:3d:6e:f3:a7:
be:1e:97:e2:97:4f:ee:7c:f3:fd:be:a9:c0:e8:f3:3d:4a:06:
34:f6:5e:0c:dc:ad:31:5d:64:a4:3d:da:31:41:59:e8:a4:a8:
5d:dc:09:1c:86:08:c3:8d:07:e2:e2:c8:5b:c6:71:5f:b1:dd:
ee:ad:3d:5b:f0:6e:e6:0a:e9:56:5e:05:5f:2c:97:01:65:a6:
ee:31:ba:da:35:6f:71:66:c5:93:04:3b:85:d4:0e:75:7c:78:
02:ce:fb:bd:d0:2a:36:8a:91:ab:48:32:02:e4:07:6b:a7:ce:
8f:ad:d0:2e:b1:d6:ed:46:38:e6:6c:5b:30:43:c7:3e:f2:4a:
19:da:56:db:2d:54:6d:a8:98:7b:bf:c8:78:e2:e3:63:04:4d:
1a:27:ca:3c:7d:62:fe:5d:1d:1f:ce:24:af:05:d8:7b:19:22:
f9:ff:5e:c1:e8:5c:71:a5:e1:7f:f8:d6:32:ca:18:5e:4d:84:
ad:01:84:b8:65:eb:7f:ee:44:7a:42:1f:52:f1:3b:0f:d7:41:
f7:f1:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:17 2024 by rpki-client on console-ams.rpki-client.org