Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/816ac6-f944-46d0-bdba-6d944b9370c6/1/0FT4TJqK3ygDlWv6dCjbFXDA0Aw.roa
File: 0FT4TJqK3ygDlWv6dCjbFXDA0Aw.roa (raw, json)
Hash identifier: C2vwffQChScf19V0IGTweh0mnXdiC+xXw1GXezy7unQ=
Subject key identifier: D0:54:F8:4C:9A:8A:DF:28:03:95:6B:FA:74:28:DB:15:70:C0:D0:0C
Certificate issuer: /CN=27571426a1b26d651cd597afe73c210344a93dbc
Certificate serial: 018572C387814EA7927F2A0908BE470C2C54
Authority key identifier: 27:57:14:26:A1:B2:6D:65:1C:D5:97:AF:E7:3C:21:03:44:A9:3D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1cUJqGybWUc1Zev5zwhA0SpPbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/816ac6-f944-46d0-bdba-6d944b9370c6/1/0FT4TJqK3ygDlWv6dCjbFXDA0Aw.roa
Signing time: Mon 02 Jan 2023 13:54:54 +0000
ROA not before: Mon 02 Jan 2023 13:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.246.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:87:81:4e:a7:92:7f:2a:09:08:be:47:0c:2c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27571426a1b26d651cd597afe73c210344a93dbc
Validity
Not Before: Jan 2 13:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d054f84c9a8adf2803956bfa7428db1570c0d00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:66:8f:59:d8:33:90:62:16:30:b8:8e:55:
ca:f8:ca:f1:fe:aa:88:b4:67:c9:4f:36:03:4e:c5:
28:b2:3c:e1:11:e5:a4:ac:85:92:c0:c7:59:8c:28:
23:b6:0b:7a:f3:8c:1a:d4:95:6e:39:f7:40:9f:41:
4d:28:6a:40:4d:b8:92:77:83:54:5d:f8:05:c8:61:
11:59:e1:81:56:f5:71:cb:83:30:2d:29:2f:13:e1:
81:33:7f:2d:22:db:d6:f3:ad:63:dd:9d:8b:d3:ac:
5d:b7:85:4a:df:e8:c3:8f:0c:d5:fa:48:cb:6b:71:
1e:d7:ff:80:40:65:e1:3b:6e:03:6b:ad:23:79:bc:
fb:87:12:3b:7d:cc:38:02:46:c6:e6:37:8d:c8:9d:
01:96:01:f5:e9:fa:01:58:93:84:0d:31:2b:ae:22:
06:00:e1:8d:17:de:f6:ba:df:97:71:7d:21:c0:74:
cb:90:67:2e:e5:8e:ee:ba:86:37:92:6a:ed:9f:43:
d8:24:ce:4f:39:14:49:61:83:da:03:83:f2:ab:91:
77:66:26:0c:51:ad:43:21:23:ba:84:4c:e2:b3:1d:
78:a9:52:35:46:9e:07:bd:c7:9a:20:a7:b4:71:09:
e7:bd:b3:6d:6d:b0:b5:04:bd:74:f3:d8:2b:fa:b3:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:F8:4C:9A:8A:DF:28:03:95:6B:FA:74:28:DB:15:70:C0:D0:0C
X509v3 Authority Key Identifier:
keyid:27:57:14:26:A1:B2:6D:65:1C:D5:97:AF:E7:3C:21:03:44:A9:3D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1cUJqGybWUc1Zev5zwhA0SpPbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/816ac6-f944-46d0-bdba-6d944b9370c6/1/0FT4TJqK3ygDlWv6dCjbFXDA0Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/816ac6-f944-46d0-bdba-6d944b9370c6/1/J1cUJqGybWUc1Zev5zwhA0SpPbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:89:71:5a:f0:79:13:fb:72:20:4a:cf:9b:3f:5c:a4:58:81:
ad:b8:68:e0:b1:ec:c8:25:b3:74:2f:f8:1b:6d:c7:ba:04:70:
a5:1e:11:22:22:81:31:99:b4:6b:8f:32:fd:95:b9:7c:f8:2c:
35:9e:5a:75:08:95:e0:a3:0e:99:e4:e0:ce:e6:53:a8:36:b3:
9c:b2:d3:9a:96:56:f5:d3:8b:d8:cf:0b:1e:87:f2:53:cd:6f:
ef:d8:65:ee:f0:18:bf:85:26:02:de:fd:99:18:d8:97:dd:4f:
93:74:3d:79:90:8c:5d:a5:be:5d:2d:d4:7f:a7:db:64:90:80:
c2:dd:4b:09:cb:a3:49:16:e9:9f:b9:50:38:8f:61:f9:34:ac:
65:64:8c:84:52:c4:cd:53:6d:7d:8c:bb:26:cf:06:38:c5:7d:
40:41:2f:d8:ed:9b:30:18:98:d3:5e:f6:cd:fc:14:d1:56:9e:
5c:8a:fc:02:8c:ab:c0:88:c7:de:8a:dd:72:ef:43:f6:d7:97:
c8:08:7b:29:d2:c0:4f:e9:b6:c5:33:45:d2:d7:01:f4:d6:84:
ba:1e:af:b6:af:b1:4e:5e:9a:f1:c3:ca:3f:13:53:05:60:30:
7a:df:9c:89:dd:1b:fd:00:14:fa:75:2f:8c:d5:10:1b:b3:30:
c0:3e:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:17 2024 by rpki-client on console-ams.rpki-client.org