Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/64T4-clmiN8I6w_4lUvd0_MZ03Y.roa
File: 64T4-clmiN8I6w_4lUvd0_MZ03Y.roa (raw, json)
Hash identifier: mX6uB+jHzjgf3aVNjEtgXcTgior8eviBFcvvyvQ2IS8=
Subject key identifier: EB:84:F8:F9:C9:66:88:DF:08:EB:0F:F8:95:4B:DD:D3:F3:19:D3:76
Certificate issuer: /CN=19e699e256ec3be94726719b60f8ff414efeffe9
Certificate serial: CF063C
Authority key identifier: 19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/64T4-clmiN8I6w_4lUvd0_MZ03Y.roa
Signing time: Sat 01 Jan 2022 05:54:54 +0000
ROA not before: Sat 01 Jan 2022 05:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.236.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13567548 (0xcf063c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e699e256ec3be94726719b60f8ff414efeffe9
Validity
Not Before: Jan 1 05:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb84f8f9c96688df08eb0ff8954bddd3f319d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:4a:9e:09:5f:33:d4:76:25:b2:14:b3:cb:
d6:f0:aa:51:80:84:95:83:0a:08:37:72:9c:47:59:
f2:0f:4e:ee:bb:9f:4c:f9:ba:3c:ca:2e:d2:f2:c1:
14:c1:04:78:7d:68:6f:d8:2a:a1:63:cf:b2:bc:c1:
04:4f:b0:a3:85:a8:87:e3:b2:34:02:7b:aa:dc:04:
5a:56:2a:ee:56:5b:5c:ce:88:6c:61:d8:b8:86:a4:
d4:77:cf:51:8c:90:c2:de:be:d2:fe:50:00:a5:0a:
aa:35:5d:07:98:02:6f:81:06:f9:d4:a9:27:82:e8:
62:be:41:7e:06:75:6e:a6:d1:9d:94:b4:9e:05:3a:
4b:f3:87:8d:68:c9:ca:64:f5:61:bc:b6:06:2d:29:
d1:8d:78:71:a2:9d:20:59:ec:fd:fc:d0:35:ff:b6:
97:f4:64:25:8b:6a:1c:e5:d1:91:69:10:f4:0b:f0:
7b:e6:b7:90:57:1d:00:04:68:b9:f2:be:1c:fe:0e:
41:4d:bd:62:fc:39:b3:85:89:2d:23:dd:6c:0a:f9:
e6:13:ff:79:70:70:4d:12:20:f5:89:a3:15:0a:d8:
34:cd:8f:8a:5a:36:a9:f0:f8:62:d1:e7:54:56:c1:
b4:05:52:bb:b0:73:1a:b1:80:60:f8:31:92:87:7c:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:84:F8:F9:C9:66:88:DF:08:EB:0F:F8:95:4B:DD:D3:F3:19:D3:76
X509v3 Authority Key Identifier:
keyid:19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/64T4-clmiN8I6w_4lUvd0_MZ03Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b3:78:3d:52:37:70:2d:91:fa:fa:28:c9:5c:5a:62:c6:9d:
97:d0:22:3f:18:bd:2c:07:b7:81:91:b4:c5:ab:14:f0:7c:32:
38:92:c0:6f:63:f3:0f:5b:2d:71:b6:ad:62:b8:b3:98:d1:c3:
51:b7:70:9c:3f:cb:15:99:e7:0e:58:c2:8f:b8:3d:b4:27:03:
4b:d7:ce:01:b1:d2:1e:aa:f0:ba:46:35:07:54:46:aa:94:c1:
fd:1d:47:a8:13:40:4d:92:af:4d:4e:3c:51:38:a9:bd:64:6a:
50:d3:ff:ff:41:b5:9f:56:69:e9:dc:da:3e:a5:f2:3e:e4:74:
65:72:ce:9b:bc:a0:b7:f2:10:01:76:ba:3d:6b:2e:da:6e:45:
bf:89:6b:6c:2d:4a:7d:59:4e:89:15:b0:8d:f3:1c:ec:5f:72:
a7:2f:a0:a0:8b:25:0e:fb:96:49:c4:82:1e:7f:08:a5:bb:dc:
e5:a0:11:5e:f8:37:28:29:5a:f8:55:94:d1:a8:ef:11:06:ab:
b2:c6:8c:d3:01:f7:1e:f5:11:83:35:e6:9b:d7:29:cb:32:f8:
b0:8a:fc:f2:08:86:55:e1:a2:9a:0d:c1:ce:53:98:92:ba:ce:
78:7b:5e:5b:3b:60:e5:a0:6e:f6:8b:01:e5:61:9c:2a:72:82:
c4:c3:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org