Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/Tvd8wdwDSvdSyDpsGCCRAnvc87A.roa
File: Tvd8wdwDSvdSyDpsGCCRAnvc87A.roa (raw, json)
Hash identifier: /YsyBDfP+QR+rx4BLGPGCCOuSTNVCMBs1BcXU3GQRnE=
Subject key identifier: 4E:F7:7C:C1:DC:03:4A:F7:52:C8:3A:6C:18:20:91:02:7B:DC:F3:B0
Certificate issuer: /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial: 01856CCAFC1B184A11455E59250FD6A66D1D
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/Tvd8wdwDSvdSyDpsGCCRAnvc87A.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21343
IP address blocks: 91.223.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fc:1b:18:4a:11:45:5e:59:25:0f:d6:a6:6d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef77cc1dc034af752c83a6c182091027bdcf3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:10:00:0d:e9:36:8b:bc:e2:ab:cc:c0:26:
d1:57:e0:eb:37:13:b0:55:7e:08:54:ad:61:c0:c8:
91:de:ea:f1:ad:ef:8e:26:39:b3:a0:89:93:9d:d1:
ea:a6:bc:c1:ba:d5:86:83:22:7b:ca:6d:f6:4e:35:
39:0d:de:15:e2:95:6a:e8:d3:46:5e:3b:db:ae:40:
e8:6d:6c:15:65:b7:03:1e:f5:69:5d:6e:9b:60:71:
06:4b:68:0f:bd:e1:05:30:ff:83:68:10:7d:c9:1a:
56:58:2f:9d:3f:50:e5:4a:62:5e:5e:2e:cb:08:fd:
e5:9e:f0:72:67:b9:ae:fb:68:a8:16:be:d0:3c:4d:
46:9e:90:fb:f4:6a:5c:36:e0:7f:e5:8a:5e:ca:79:
d9:d0:1a:bf:6d:22:db:28:0b:80:e7:f9:e2:4e:9f:
8b:b9:8a:b0:35:ad:58:05:6a:29:8c:e0:41:ae:be:
e3:0f:32:3c:d0:b1:f6:28:d9:ab:d7:d4:1e:78:c7:
bd:f1:11:43:04:f3:f7:0b:82:88:33:bf:61:28:70:
50:2b:3b:7e:b7:a4:5a:fd:f4:ea:15:fa:e3:e5:7f:
c4:73:9e:b7:bd:2f:f5:05:5a:19:ba:97:39:76:10:
86:76:d9:3d:de:4c:68:98:5b:b4:78:bd:8e:d7:b3:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F7:7C:C1:DC:03:4A:F7:52:C8:3A:6C:18:20:91:02:7B:DC:F3:B0
X509v3 Authority Key Identifier:
keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/Tvd8wdwDSvdSyDpsGCCRAnvc87A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d8:28:26:02:1c:0e:a4:49:8b:b1:ac:b6:27:ac:d3:c7:10:
b4:b5:1a:5e:b9:da:6c:00:c4:5d:0d:c1:26:a2:78:a5:27:a4:
44:cc:fc:30:b0:0d:62:80:5d:e5:43:03:cd:00:14:e0:31:d7:
58:70:ff:7c:26:f0:b0:8c:a3:44:b7:a2:72:e3:f1:bf:81:64:
78:28:c9:d7:c3:68:4a:8d:69:8d:dc:ee:43:ca:39:24:0e:a4:
a5:80:01:56:8c:50:22:8d:ea:cf:e1:7e:85:56:e0:16:21:80:
68:75:61:11:59:51:b8:7f:63:11:05:a1:70:3e:62:89:b0:a5:
57:b4:81:77:d5:d4:64:57:45:4e:a2:76:2a:fe:82:2c:67:6f:
0d:e1:0f:a8:2e:ee:5c:64:1d:e2:f4:fc:ef:04:1f:c3:05:a5:
09:21:29:25:6a:5d:23:f1:ab:5f:c9:2f:a7:93:4a:94:38:87:
14:c6:08:97:e7:60:7a:43:e4:a3:7c:da:fc:12:e4:60:0f:c2:
63:4d:30:dd:c0:c5:87:28:7b:c8:57:e4:f6:ab:0e:96:8f:99:
78:c8:d3:b4:c7:7e:b7:91:16:49:31:f6:26:c8:73:1d:fa:e7:
20:97:69:5f:43:5f:17:fb:a2:dd:22:6d:67:2a:36:f1:1e:78:
25:64:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:52 2023 by rpki-client on console-fra.rpki-client.org