Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b4da85-c363-4245-9244-38aa98431bef/1/FMrH6ay96uLhGP2EE6DRQg3UABU.roa
File: FMrH6ay96uLhGP2EE6DRQg3UABU.roa (raw, json)
Hash identifier: 8HkCg2uI+kNjnHfBhtBXGPe5n5rfdhGTD69oYoSqvlg=
Subject key identifier: 14:CA:C7:E9:AC:BD:EA:E2:E1:18:FD:84:13:A0:D1:42:0D:D4:00:15
Certificate issuer: /CN=60ff33d24d435044e235407184a40ffbb42e570d
Certificate serial: 096E0482
Authority key identifier: 60:FF:33:D2:4D:43:50:44:E2:35:40:71:84:A4:0F:FB:B4:2E:57:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP8z0k1DUETiNUBxhKQP-7QuVw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b4da85-c363-4245-9244-38aa98431bef/1/FMrH6ay96uLhGP2EE6DRQg3UABU.roa
Signing time: Sat 01 Jan 2022 15:59:39 +0000
ROA not before: Sat 01 Jan 2022 15:59:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25581
IP address blocks: 91.207.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158205058 (0x96e0482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff33d24d435044e235407184a40ffbb42e570d
Validity
Not Before: Jan 1 15:59:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14cac7e9acbdeae2e118fd8413a0d1420dd40015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:58:9a:8b:e0:55:01:59:74:c6:0a:83:a4:
7d:59:78:d1:bd:1f:42:5a:87:a2:b4:6a:9c:d3:c6:
04:4d:2d:66:e2:79:f4:40:00:4e:f7:27:3e:e7:45:
89:96:98:a7:0d:fc:a5:e3:1b:66:6a:35:29:cb:7c:
29:41:c3:17:2a:65:62:09:01:a2:42:f9:19:2b:20:
7e:38:0a:f3:fb:28:21:88:37:bc:6e:5f:9c:8a:a0:
9f:7e:c6:81:25:7b:25:07:c7:35:8b:97:7a:9c:37:
6d:10:28:26:af:c8:10:e0:d0:59:43:1d:5c:1a:e1:
bb:fa:72:cb:a7:1b:ec:7c:cf:6c:ab:3c:52:5c:78:
0f:6c:ee:c1:b7:86:7f:b5:a2:de:96:34:a2:8b:78:
51:4a:36:04:51:54:51:d1:cf:c3:ea:3e:36:06:8d:
e2:87:ad:96:c3:d8:cc:b0:c0:a8:a8:76:af:36:2a:
fa:1a:a9:f5:cd:bb:d4:ef:63:05:c9:ee:48:c2:0a:
f2:39:f4:1e:e4:ad:00:cf:d5:4e:b7:8f:44:d4:68:
8e:3a:14:26:20:93:33:da:73:04:c9:42:95:6a:ec:
59:62:6d:e1:47:09:f4:2c:61:60:1c:2d:3b:53:83:
04:7d:a6:e0:74:04:d3:76:c3:ce:f5:ce:df:2a:58:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CA:C7:E9:AC:BD:EA:E2:E1:18:FD:84:13:A0:D1:42:0D:D4:00:15
X509v3 Authority Key Identifier:
keyid:60:FF:33:D2:4D:43:50:44:E2:35:40:71:84:A4:0F:FB:B4:2E:57:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP8z0k1DUETiNUBxhKQP-7QuVw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b4da85-c363-4245-9244-38aa98431bef/1/FMrH6ay96uLhGP2EE6DRQg3UABU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b4da85-c363-4245-9244-38aa98431bef/1/YP8z0k1DUETiNUBxhKQP-7QuVw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.130.0/23
Signature Algorithm: sha256WithRSAEncryption
83:0e:c6:80:60:c6:da:61:ad:26:91:4a:30:0d:68:ac:a4:a4:
8a:fa:72:37:b0:3f:02:9d:f9:7f:c9:c8:ef:5b:b7:12:86:dd:
e2:00:b4:f3:31:aa:ac:93:80:a7:e7:db:7a:d6:cc:27:37:cf:
0d:f7:ec:a0:c1:ae:2f:55:a6:25:92:07:14:b2:d3:c0:68:74:
34:f8:ec:15:44:23:25:ef:cf:9f:59:27:8b:db:71:84:cd:de:
e7:10:ec:f7:e1:ac:fe:de:f0:07:94:69:71:90:1d:80:b2:d1:
83:a2:0c:53:71:3f:b3:3b:49:98:1a:e1:3b:32:05:8f:69:03:
eb:35:c7:13:cf:0b:ce:7a:01:f4:43:c0:9a:b3:d6:c6:22:0f:
8e:99:98:e5:65:c1:ba:46:a0:93:01:86:1a:1c:e5:c1:68:51:
47:10:3c:55:cb:bd:1b:93:13:e7:c9:65:7c:fc:52:f9:2b:dd:
05:f7:05:f8:fc:fe:30:a4:de:1b:5f:58:81:9a:01:d4:70:43:
f1:11:f5:08:df:2a:5f:18:84:e7:c2:3e:71:d9:5f:97:b5:71:
c4:59:37:55:a8:3b:a6:b1:a9:1b:e4:2e:a9:c3:fb:1e:af:df:
07:1a:0d:43:9e:00:67:50:60:9f:11:09:57:b2:07:be:64:84:
77:85:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:44 2024 by rpki-client on console-fra.rpki-client.org