Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/T2o0OC4-HOXXtQDWXvUxR_R0fzk.roa
File: T2o0OC4-HOXXtQDWXvUxR_R0fzk.roa (raw, json)
Hash identifier: 6emS8s1rc8FCTDcpErzLHerR/WeQ032slHQOhiU4/GE=
Subject key identifier: 4F:6A:34:38:2E:3E:1C:E5:D7:B5:00:D6:5E:F5:31:47:F4:74:7F:39
Certificate issuer: /CN=1dd981766f4ad970f78b077e1224d1089ae41e86
Certificate serial: 01844E636E0F0D981ECF2D489AFD692BF204
Authority key identifier: 1D:D9:81:76:6F:4A:D9:70:F7:8B:07:7E:12:24:D1:08:9A:E4:1E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmBdm9K2XD3iwd-EiTRCJrkHoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/T2o0OC4-HOXXtQDWXvUxR_R0fzk.roa
Signing time: Sun 06 Nov 2022 19:20:49 +0000
ROA not before: Sun 06 Nov 2022 19:20:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 91.217.249.0/24 maxlen: 24
91.217.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4e:63:6e:0f:0d:98:1e:cf:2d:48:9a:fd:69:2b:f2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd981766f4ad970f78b077e1224d1089ae41e86
Validity
Not Before: Nov 6 19:20:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f6a34382e3e1ce5d7b500d65ef53147f4747f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:95:06:75:53:2d:2d:eb:4f:91:8f:85:aa:
81:fc:b8:76:f0:3a:3a:06:bd:36:ec:78:85:d5:13:
16:1a:0c:0e:a8:d1:19:09:3c:43:20:e4:22:e9:67:
93:5f:56:0b:83:88:b7:c1:3b:22:4b:5d:99:88:1e:
e1:61:c3:7a:4e:82:38:91:62:a4:10:73:fe:83:df:
5f:b6:b8:c0:cc:14:ae:f4:e1:25:02:06:9f:34:4d:
e0:3b:6a:a6:a7:11:8d:28:6b:98:96:c4:5a:1c:69:
eb:ab:d3:6f:69:d6:63:38:9f:37:56:57:65:58:0e:
28:ec:7f:74:75:5a:55:07:c2:f1:fc:3c:0b:34:dd:
a8:88:9b:10:f6:88:5b:5e:0e:a0:6e:c1:01:78:51:
54:c5:9f:53:e4:e9:29:28:af:7f:cd:09:1f:18:2a:
59:c8:8d:9a:3d:67:4c:21:0b:5a:3d:1f:38:c5:a5:
6f:30:8e:a9:fa:a2:23:50:87:7f:33:6d:48:cc:db:
c9:a4:6c:81:0c:0a:3c:66:ac:ee:ab:aa:2e:50:2f:
11:b4:4b:86:f4:26:71:06:6b:b7:9a:79:67:bd:89:
9f:ee:6d:49:40:a3:c4:a3:b3:ee:a3:2b:90:33:eb:
03:9e:a4:39:39:85:3e:05:ae:1d:f6:e0:bb:ee:ee:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:34:38:2E:3E:1C:E5:D7:B5:00:D6:5E:F5:31:47:F4:74:7F:39
X509v3 Authority Key Identifier:
keyid:1D:D9:81:76:6F:4A:D9:70:F7:8B:07:7E:12:24:D1:08:9A:E4:1E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmBdm9K2XD3iwd-EiTRCJrkHoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/T2o0OC4-HOXXtQDWXvUxR_R0fzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/HdmBdm9K2XD3iwd-EiTRCJrkHoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.249.0-91.217.250.255
Signature Algorithm: sha256WithRSAEncryption
4f:ce:16:4a:64:05:c5:91:58:cd:b2:4d:6b:a4:d1:c2:f2:5a:
a4:42:a0:01:0f:13:d4:2d:c8:e0:b1:82:c4:69:bb:95:8b:5b:
3f:d7:36:3b:25:88:6b:e8:07:60:48:c6:e5:e7:93:77:57:71:
f6:4c:50:15:1e:fe:c4:71:fb:cf:40:d9:3f:d6:0c:b3:b9:ce:
a9:e4:d1:14:4c:b0:7c:0f:46:8e:64:5a:68:3b:fd:83:0b:5a:
e3:30:d1:37:55:e7:e7:a9:49:33:ee:f3:b4:bf:48:9c:42:d7:
44:8b:53:87:13:21:c6:1f:b6:03:78:86:ab:6f:ec:dc:11:17:
e5:56:99:cb:2e:00:d3:bf:9a:ac:90:69:9b:5f:d1:6b:97:2a:
e5:88:bf:0f:aa:47:1b:ad:13:cd:bc:6b:30:eb:32:11:15:e5:
c8:8b:0c:62:4d:92:0c:5c:6f:d3:d8:43:99:50:14:44:63:eb:
42:23:2f:bc:04:fb:14:e3:37:07:be:9f:35:fd:a6:b9:7b:53:
e4:73:91:41:1a:fd:51:f1:d0:72:3b:97:2b:0d:0b:b9:92:26:
03:0e:6e:b2:4e:30:72:67:21:bb:48:66:93:33:96:ad:22:68:
00:18:7a:0d:85:57:c4:6f:f8:a9:30:c2:6c:88:1c:0f:a6:83:
a8:64:98:26
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYROY24PDZgezy1Imv1pK/IEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDk4MTc2NmY0YWQ5NzBmNzhiMDc3ZTEyMjRkMTA4OWFl
NDFlODYwHhcNMjIxMTA2MTkyMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjZhMzQzODJlM2UxY2U1ZDdiNTAwZDY1ZWY1MzE0N2Y0NzQ3ZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocWVBnVTLS3rT5GPhaqB/Lh28Do6
Br027HiF1RMWGgwOqNEZCTxDIOQi6WeTX1YLg4i3wTsiS12ZiB7hYcN6ToI4kWKk
EHP+g99ftrjAzBSu9OElAgafNE3gO2qmpxGNKGuYlsRaHGnrq9NvadZjOJ83Vldl
WA4o7H90dVpVB8Lx/DwLNN2oiJsQ9ohbXg6gbsEBeFFUxZ9T5OkpKK9/zQkfGCpZ
yI2aPWdMIQtaPR84xaVvMI6p+qIjUId/M21IzNvJpGyBDAo8Zqzuq6ouUC8RtEuG
9CZxBmu3mnlnvYmf7m1JQKPEo7PuoyuQM+sDnqQ5OYU+Ba4d9uC77u5pmwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE9qNDguPhzl17UA1l71MUf0dH85MB8GA1UdIwQY
MBaAFB3ZgXZvStlw94sHfhIk0Qia5B6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRtQmRtOUsyWEQzaXdkLUVpVFJDSnJrSG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kZDhjNDktYzJlMi00YTQyLTljNWMt
MDRmNjI4NjhjNDNkLzEvVDJvME9DNC1IT1hYdFFEV1h2VXhSX1IwZnprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kZDhjNDktYzJlMi00YTQyLTljNWMtMDRmNjI4NjhjNDNk
LzEvSGRtQmRtOUsyWEQzaXdkLUVpVFJDSnJrSG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb2fkD
BABb2fowDQYJKoZIhvcNAQELBQADggEBAE/OFkpkBcWRWM2yTWuk0cLyWqRCoAEP
E9QtyOCxgsRpu5WLWz/XNjsliGvoB2BIxuXnk3dXcfZMUBUe/sRx+89A2T/WDLO5
zqnk0RRMsHwPRo5kWmg7/YMLWuMw0TdV5+epSTPu87S/SJxC10SLU4cTIcYftgN4
hqtv7NwRF+VWmcsuANO/mqyQaZtf0WuXKuWIvw+qRxutE828azDrMhEV5ciLDGJN
kgxcb9PYQ5lQFERj60IjL7wE+xTjNwe+nzX9prl7U+RzkUEa/VHx0HI7lysNC7mS
JgMObrJOMHJnIbtIZpMzlq0iaAAYeg2FV8Rv+KkwwmyIHA+mg6hkmCY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:06 2024 by rpki-client on console-fra.rpki-client.org