Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/V35vuGVRe0-4ROK_6KuiUmivI7w.roa
File: V35vuGVRe0-4ROK_6KuiUmivI7w.roa (raw, json)
Hash identifier: FjDZmHJK7+MVxrU0to6DOAKnssE8K/djkNEUEyhQkUs=
Subject key identifier: 57:7E:6F:B8:65:51:7B:4F:B8:44:E2:BF:E8:AB:A2:52:68:AF:23:BC
Certificate issuer: /CN=c96d86d86495dc676b7f13dba7d258a6362acd24
Certificate serial: 01856C0A5125A8C28B43F844D7B418DE286C
Authority key identifier: C9:6D:86:D8:64:95:DC:67:6B:7F:13:DB:A7:D2:58:A6:36:2A:CD:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/V35vuGVRe0-4ROK_6KuiUmivI7w.roa
Signing time: Sun 01 Jan 2023 06:34:53 +0000
ROA not before: Sun 01 Jan 2023 06:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212862
IP address blocks: 91.205.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:51:25:a8:c2:8b:43:f8:44:d7:b4:18:de:28:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96d86d86495dc676b7f13dba7d258a6362acd24
Validity
Not Before: Jan 1 06:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=577e6fb865517b4fb844e2bfe8aba25268af23bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:07:d9:ee:a2:b2:4d:ed:b4:e9:fe:00:0c:
d0:7c:43:1e:63:dd:bc:41:93:e0:31:d5:65:41:27:
6d:7c:5f:2d:e4:b7:cb:a4:b4:35:c3:bd:5a:8a:28:
6b:40:35:00:9a:3d:aa:6d:94:b1:dc:22:87:9a:66:
c1:77:1e:66:17:65:9e:02:31:93:23:cf:8e:7e:2c:
e5:f5:3e:b4:66:d2:65:34:14:ce:23:64:82:f9:c2:
86:c7:f6:a9:65:00:6c:c5:70:de:c1:06:1f:4c:78:
62:e5:4c:84:06:10:93:12:60:f8:83:24:9a:20:d7:
4d:c8:34:1e:51:cf:85:de:ff:73:c3:00:41:bf:45:
b0:96:64:2e:33:b3:e6:13:ba:1f:d9:6f:3f:65:66:
ee:78:06:6b:a3:59:fe:fa:b5:3a:33:25:1a:11:b3:
73:f6:85:1d:2c:67:69:c6:2f:10:19:0d:62:fc:16:
7f:70:c9:a7:82:72:78:38:22:87:5d:a4:bc:2b:a3:
52:7c:80:5e:51:66:8a:66:65:b3:a6:c5:fe:76:9e:
bb:93:46:72:36:a6:d8:23:64:58:63:9b:5f:53:a5:
9f:13:a3:2a:4e:aa:86:1d:d3:5a:6b:a3:1e:7f:e7:
0e:da:03:de:77:a2:6a:2d:56:62:8a:57:73:4b:f6:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7E:6F:B8:65:51:7B:4F:B8:44:E2:BF:E8:AB:A2:52:68:AF:23:BC
X509v3 Authority Key Identifier:
keyid:C9:6D:86:D8:64:95:DC:67:6B:7F:13:DB:A7:D2:58:A6:36:2A:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/V35vuGVRe0-4ROK_6KuiUmivI7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d1:31:89:b9:c9:a2:7d:ae:2c:fa:5c:7b:b1:2f:52:8c:18:
bc:f6:b9:9a:74:f5:90:7c:9c:67:63:fc:f9:66:f3:25:35:36:
f8:de:6d:ea:b6:24:11:fd:ba:a2:22:43:bb:fd:d0:e3:6e:14:
3c:80:6c:e4:6b:1c:3b:8d:13:2d:24:45:03:ae:88:b6:b2:a5:
9c:e7:f3:5c:94:39:17:b6:3b:48:b7:be:51:a6:f8:fa:68:95:
4e:e1:0f:aa:87:bf:6f:c4:fb:4d:64:e8:56:9f:5c:62:23:d7:
6b:19:36:9f:4b:b9:51:d4:a0:c5:65:9c:83:87:04:e9:8b:44:
cd:10:05:74:e3:c9:b8:37:73:9e:85:6e:98:16:aa:94:f1:db:
af:a6:a6:5a:ae:89:4b:0b:b3:82:09:ee:6c:52:da:bd:f3:b4:
f4:33:9f:a5:f3:12:ed:37:5f:76:63:c3:06:d9:01:77:a8:9f:
f4:4b:f6:ec:2c:18:43:2c:16:fe:23:e9:f4:d2:4b:fa:21:05:
0b:17:5a:5a:63:db:e7:fb:ca:82:36:f7:5a:8c:ac:2b:87:1f:
4a:88:6c:76:c9:bd:c7:3f:31:10:e5:2c:49:59:5c:3b:ef:a1:
59:f7:7b:01:4c:a2:c5:3e:5a:7a:4f:e5:d3:6d:99:a8:75:e0:
34:57:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:33 2024 by rpki-client on console-fra.rpki-client.org