Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/BAaXl6XbucYHQk47IwMGi3G6C9k.roa
File: BAaXl6XbucYHQk47IwMGi3G6C9k.roa (raw, json)
Hash identifier: S2ytcyfAnZbtDYozZrnHqNRbF/FeorpUzcFEiseQG7k=
Subject key identifier: 04:06:97:97:A5:DB:B9:C6:07:42:4E:3B:23:03:06:8B:71:BA:0B:D9
Certificate issuer: /CN=072b4786a83b774cb5d1f7b85256fd6c51bb3460
Certificate serial: 09F4CD90
Authority key identifier: 07:2B:47:86:A8:3B:77:4C:B5:D1:F7:B8:52:56:FD:6C:51:BB:34:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BytHhqg7d0y10fe4Ulb9bFG7NGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/BAaXl6XbucYHQk47IwMGi3G6C9k.roa
Signing time: Sat 01 Jan 2022 01:51:32 +0000
ROA not before: Sat 01 Jan 2022 01:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35547
IP address blocks: 91.93.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167038352 (0x9f4cd90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b4786a83b774cb5d1f7b85256fd6c51bb3460
Validity
Not Before: Jan 1 01:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04069797a5dbb9c607424e3b2303068b71ba0bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:5a:57:6c:53:b0:30:04:b3:2e:7c:ff:7a:
47:03:a5:75:2d:54:00:ea:5a:f6:23:0e:1c:97:ee:
34:95:2a:7c:fe:77:d8:65:3d:54:49:80:f5:57:03:
97:0b:16:f2:e0:45:e1:00:2e:2b:32:be:02:d5:77:
7e:0a:94:0f:41:60:8e:cb:fe:90:c8:db:c5:f0:0b:
36:ef:09:68:c9:75:37:75:a8:58:a1:1d:4a:47:9e:
5d:78:0a:21:8b:25:0d:92:be:e4:b3:f4:15:77:f9:
cf:a3:a4:f3:7a:db:bb:b1:30:e3:a0:e0:99:88:a2:
b4:4a:a9:2a:d3:59:a6:1e:bb:8e:f1:e9:0b:d1:38:
61:2e:4b:db:86:f9:41:44:60:56:78:de:2d:6a:75:
bf:4a:67:46:50:73:2c:db:a5:a8:16:61:ea:ef:31:
7b:af:22:a3:21:b4:cc:9c:bf:64:67:e4:cc:57:e6:
b2:0b:4e:fc:c9:29:44:45:bb:1e:cf:7b:a5:dd:c6:
22:30:c9:c5:89:4c:57:87:9f:05:79:c3:2d:dc:7b:
f6:da:94:1d:98:c7:d8:3d:30:fe:23:74:6c:7c:14:
11:fc:70:4a:42:9b:90:70:56:59:e9:23:e0:29:61:
b1:ad:f4:f3:6d:93:6d:d7:49:95:a5:07:a2:7f:55:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:97:97:A5:DB:B9:C6:07:42:4E:3B:23:03:06:8B:71:BA:0B:D9
X509v3 Authority Key Identifier:
keyid:07:2B:47:86:A8:3B:77:4C:B5:D1:F7:B8:52:56:FD:6C:51:BB:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BytHhqg7d0y10fe4Ulb9bFG7NGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/BAaXl6XbucYHQk47IwMGi3G6C9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/BytHhqg7d0y10fe4Ulb9bFG7NGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5a:d8:0c:d0:1c:0a:4a:60:12:28:a8:57:c2:2e:1b:62:d8:
ef:e6:49:06:c9:25:b5:f1:7b:4d:d9:fd:75:9b:d5:81:bd:74:
2a:ae:48:78:d6:d4:50:9b:f7:27:12:e1:a6:ce:5a:82:c3:48:
82:52:08:51:b3:51:63:1c:ad:50:da:12:66:6e:ed:9d:a2:06:
8f:36:9d:63:4f:89:79:c5:e3:7d:fc:f6:7b:f2:cd:07:cb:13:
59:2a:d4:58:13:43:0c:05:ff:3c:15:5a:e9:0d:ed:2e:12:00:
6d:fd:2d:21:f5:3f:19:0c:16:43:ec:77:15:09:a5:8d:4a:89:
df:76:f0:ab:2d:3a:5e:4c:f6:1d:6c:ba:55:98:71:39:a9:af:
bb:97:49:ee:e8:32:5e:d4:b4:53:aa:4a:f4:85:0d:8d:e7:bc:
7a:29:fe:0b:09:fd:52:7d:c1:bd:f5:21:a1:e8:25:21:ad:92:
36:f6:f7:fe:61:7b:0b:74:05:39:1c:dc:ee:92:fe:61:5c:3c:
01:2d:e1:45:22:02:67:49:07:15:c2:47:f5:4f:83:b9:da:e4:
43:bf:90:3a:0f:4b:38:2d:41:b4:1f:04:a8:e7:22:57:5d:94:
cb:80:f4:7b:ca:a0:b8:1e:98:a5:41:61:e2:86:1d:5a:f8:0c:
d0:47:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:17 2024 by rpki-client on console-ams.rpki-client.org