Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/GW5hQ-Cqh-N702VgE9WG3tKW20I.roa
File: GW5hQ-Cqh-N702VgE9WG3tKW20I.roa (raw, json)
Hash identifier: UaDQEueH2MnThC7EJKfwhwBGUr/0jdo8Hr5pSufoSrs=
Subject key identifier: 19:6E:61:43:E0:AA:87:E3:7B:D3:65:60:13:D5:86:DE:D2:96:DB:42
Certificate issuer: /CN=496a77608f1f4472f6fc30273c5560e967caf273
Certificate serial: 018706870ED37B852A90EED01B1BCB02A4E4
Authority key identifier: 49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/GW5hQ-Cqh-N702VgE9WG3tKW20I.roa
Signing time: Tue 21 Mar 2023 23:35:27 +0000
ROA not before: Tue 21 Mar 2023 23:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 91.246.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:87:0e:d3:7b:85:2a:90:ee:d0:1b:1b:cb:02:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496a77608f1f4472f6fc30273c5560e967caf273
Validity
Not Before: Mar 21 23:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=196e6143e0aa87e37bd3656013d586ded296db42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:d3:c3:df:f7:3d:fd:ae:a8:56:a6:c0:b3:
50:4f:9b:b7:6c:db:35:c3:c4:ea:15:a6:4c:09:e1:
1b:7e:94:ee:a0:ac:3c:79:28:18:bc:9c:1e:61:1c:
14:3b:7a:f4:9b:1d:36:b7:12:c3:fc:e2:33:2e:8f:
00:2b:21:22:8f:c8:e4:40:71:4a:97:08:2a:87:86:
e9:eb:cd:08:1b:2c:44:c5:7d:eb:23:7d:68:6b:f3:
eb:40:a7:9a:42:58:38:5f:67:05:3d:03:95:71:30:
ee:3b:81:f7:61:df:88:c1:a7:19:9f:75:64:a7:47:
10:ef:6d:5d:1d:94:1a:ad:87:47:94:92:7f:e3:71:
1b:60:5b:fd:0d:a0:9d:2f:0c:c6:00:c5:b0:59:17:
61:4b:21:bc:21:85:53:4e:f7:17:10:18:22:59:5a:
aa:c0:3e:82:ae:ac:e5:ed:17:73:b0:87:e7:63:a8:
86:3f:b2:57:d6:9a:c5:e7:db:b6:60:b0:d2:e2:52:
49:48:76:2c:16:eb:50:d0:7c:9b:ba:08:09:90:68:
3a:2f:a6:fe:73:66:fa:39:18:77:6e:19:09:96:f8:
20:c5:fd:b8:29:eb:f4:d4:a5:ab:6d:c3:ac:3c:ca:
05:bf:b4:b7:29:ed:90:4e:7e:52:69:50:9c:48:32:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:61:43:E0:AA:87:E3:7B:D3:65:60:13:D5:86:DE:D2:96:DB:42
X509v3 Authority Key Identifier:
keyid:49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/GW5hQ-Cqh-N702VgE9WG3tKW20I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:98:ea:21:b8:50:6e:db:1d:f4:82:a9:d6:6b:0e:91:7d:36:
22:6e:a1:92:a9:58:64:cc:39:29:43:7f:b5:9a:88:0e:99:95:
5c:17:5f:3f:50:4b:c3:83:bb:a6:d1:5e:cb:61:de:05:61:55:
95:94:e0:53:81:6a:73:75:48:36:7a:ac:00:5b:1b:b9:a7:e2:
a5:21:e7:7d:90:75:7e:18:bf:8b:8e:14:0f:23:62:8b:1f:c1:
11:87:f3:76:1a:4e:aa:cb:85:fd:bb:18:a6:72:e9:cd:89:51:
4a:91:0c:60:3e:26:4b:9e:36:48:76:f1:b1:49:60:ac:1d:64:
22:0e:1f:83:79:51:e7:1d:33:30:c9:4f:06:c2:75:f8:7a:38:
70:1a:db:0c:50:1b:c9:5f:d6:4e:f5:37:96:f1:74:1f:67:63:
31:7d:fb:86:e2:63:d8:a1:f7:26:dc:4d:eb:22:23:7d:fe:7f:
4a:e7:e6:bb:59:ce:64:48:11:f6:5b:78:4d:4e:9b:ff:28:03:
8f:9c:15:82:94:c1:ba:7e:a4:15:0b:3e:c2:98:6b:7d:a4:4d:
51:a8:04:0f:f5:39:10:5e:05:d9:2f:c2:00:71:f8:fb:11:1e:
fe:31:d1:10:80:df:dd:c5:8c:0c:26:be:08:86:29:dc:3f:bf:
56:57:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 13:57:53 2023 by rpki-client on console-fra.rpki-client.org