Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/FRVbaZuu2CxXDWb4t5_55-nF5Nw.roa
File: FRVbaZuu2CxXDWb4t5_55-nF5Nw.roa (raw, json)
Hash identifier: DJxFJRuAFOSA41xK5vCLKgFu0Dy9jhdcYa2OYdAi0s0=
Subject key identifier: 15:15:5B:69:9B:AE:D8:2C:57:0D:66:F8:B7:9F:F9:E7:E9:C5:E4:DC
Certificate issuer: /CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Certificate serial: 01931F86D4D3F7C538F9540B4489D6BD214C
Authority key identifier: 40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/FRVbaZuu2CxXDWb4t5_55-nF5Nw.roa
Signing time: Tue 12 Nov 2024 08:39:10 +0000
ROA not before: Tue 12 Nov 2024 08:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60304
IP address blocks: 91.239.6.0/24 maxlen: 24
91.239.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:86:d4:d3:f7:c5:38:f9:54:0b:44:89:d6:bd:21:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Validity
Not Before: Nov 12 08:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15155b699baed82c570d66f8b79ff9e7e9c5e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:86:2d:4a:3f:34:0e:16:a9:d2:70:a9:a9:
a1:e2:13:61:79:1f:04:56:1a:04:42:6b:9c:48:9d:
f2:a4:bf:99:ce:b2:81:85:d7:5c:d3:8c:93:3c:18:
85:d6:e1:49:37:e1:1d:90:36:c0:e3:49:54:ef:8e:
c5:41:18:58:a5:12:94:ca:63:70:1d:2f:7e:3d:78:
a5:e6:80:f3:15:99:6f:d9:6c:e3:a5:84:4e:0a:d9:
bd:39:b4:e8:a7:bd:c1:eb:6c:36:53:a5:45:ab:e9:
bf:b6:8a:f9:a4:35:bc:2f:99:f6:87:74:f0:fc:0c:
67:ed:98:d2:be:fb:82:13:68:85:69:72:22:fc:b9:
0d:ad:c6:ba:37:5c:71:96:ab:0c:23:79:bb:c7:bd:
eb:b3:65:8a:3e:33:e0:c5:88:48:7f:0e:77:f0:98:
06:db:cc:d4:a4:86:fc:5b:72:ca:74:e5:74:38:fb:
af:98:92:3d:8e:46:3e:70:ea:af:97:dd:ca:38:e0:
36:d7:a6:d1:04:af:76:f4:3f:0f:47:51:d8:f1:84:
d1:02:7c:41:30:df:02:d2:ae:5e:70:c5:bc:21:bb:
3c:01:ae:5e:9c:8d:5a:ec:15:47:f7:4e:af:5f:53:
ee:dd:81:09:89:54:7d:6f:43:bb:82:e1:50:bf:a0:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:15:5B:69:9B:AE:D8:2C:57:0D:66:F8:B7:9F:F9:E7:E9:C5:E4:DC
X509v3 Authority Key Identifier:
keyid:40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/FRVbaZuu2CxXDWb4t5_55-nF5Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:40:6d:91:45:e2:f1:b1:19:15:e0:c0:fe:76:91:74:92:5d:
b8:f0:d7:5a:07:2f:de:17:0b:1e:9e:c2:f0:f2:d5:33:d0:9f:
06:80:f5:6d:af:66:39:3a:93:63:54:a6:88:65:70:56:91:62:
dc:16:f0:19:38:d1:c1:b0:b4:92:18:48:65:d6:39:b8:5c:11:
cb:58:23:15:8f:50:1b:44:79:c0:69:81:2f:c5:74:41:b9:46:
18:a3:97:19:59:d2:7e:db:f4:be:43:5b:c6:26:e6:98:81:89:
39:82:df:9a:70:30:7e:6c:f1:1f:a9:c8:fd:bd:52:be:92:ad:
14:e7:43:f9:6c:44:7b:99:7d:2a:22:72:10:80:2e:c5:55:f1:
e9:98:ef:11:03:60:a0:2e:c7:bc:36:17:fc:cb:65:d1:3e:d0:
42:74:53:b2:fc:00:c9:15:c3:a6:00:19:e9:ee:f4:31:1a:37:
3d:e7:b5:61:fc:39:e6:98:9b:46:eb:ae:a6:0a:84:bf:ec:e2:
4c:43:82:9c:dc:b8:f8:c6:b5:1e:e8:9d:e5:6f:81:f2:31:2f:
95:8f:42:ef:2e:22:ff:de:5f:43:d3:e1:d3:e5:36:d7:b1:bc:
09:b3:a5:50:92:cd:a9:8a:2f:d2:2a:fd:55:88:05:0d:db:d7:
a8:66:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 18:09:03 2024 by rpki-client on console-fra.rpki-client.org