Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/eChBboV5aRNOWs45wwN9IgkivcQ.roa
File: eChBboV5aRNOWs45wwN9IgkivcQ.roa (raw, json)
Hash identifier: LpH/f0x/Ds3s2UbeJ5li4+Nz8kMKbcYjTYcRNeZdsr8=
Subject key identifier: 78:28:41:6E:85:79:69:13:4E:5A:CE:39:C3:03:7D:22:09:22:BD:C4
Certificate issuer: /CN=19e699e256ec3be94726719b60f8ff414efeffe9
Certificate serial: D2FACA
Authority key identifier: 19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/eChBboV5aRNOWs45wwN9IgkivcQ.roa
Signing time: Sat 01 Jan 2022 05:54:56 +0000
ROA not before: Sat 01 Jan 2022 05:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210027
IP address blocks: 91.236.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13826762 (0xd2faca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e699e256ec3be94726719b60f8ff414efeffe9
Validity
Not Before: Jan 1 05:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7828416e857969134e5ace39c3037d220922bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:5e:2d:56:80:8f:c2:fa:59:6c:00:62:d5:
30:4c:1c:40:e8:a0:a5:29:60:36:44:55:0b:24:bb:
4f:e3:fd:69:6a:87:9f:7a:9c:03:74:29:8e:31:ab:
09:96:02:3b:9c:d4:d6:71:f1:17:61:2c:22:ef:d7:
fe:5e:19:93:e5:be:91:b4:fb:39:e4:1d:73:81:41:
95:d2:d4:53:80:fd:10:d9:3c:7f:c1:8a:c7:35:63:
70:b9:dd:67:eb:69:98:1b:4a:42:08:bf:2c:ec:f1:
f4:ca:69:70:af:f5:e9:2e:9b:12:99:bf:8e:de:f2:
35:74:3d:0b:91:70:6b:d7:04:2a:44:e0:93:51:70:
4b:bc:05:5b:bc:a9:8b:df:1b:60:78:7e:ec:99:94:
ab:21:d0:f5:47:70:1d:49:99:3b:15:b8:07:72:a9:
36:4c:6e:13:0f:29:33:b2:f8:6e:f3:5a:5e:53:1a:
00:82:fb:fd:9b:4d:cc:f0:ce:0f:b5:0c:6a:4f:aa:
bc:60:4b:47:85:d8:4c:bd:a4:b8:04:dc:27:63:c0:
65:34:a7:77:4d:a8:c8:41:fc:69:c0:43:31:51:65:
cb:90:b7:34:b5:74:4d:f9:89:98:92:84:b8:a6:f3:
46:97:37:2b:07:65:46:1c:06:7e:0f:49:11:e5:af:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:28:41:6E:85:79:69:13:4E:5A:CE:39:C3:03:7D:22:09:22:BD:C4
X509v3 Authority Key Identifier:
keyid:19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/eChBboV5aRNOWs45wwN9IgkivcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.195.0/24
Signature Algorithm: sha256WithRSAEncryption
73:cc:e1:2c:7e:3d:9d:0e:31:ba:64:03:33:74:6a:d4:78:b7:
c6:2f:ac:b0:a5:d2:ad:ea:27:25:5b:b0:25:ca:a0:79:66:50:
aa:25:19:e8:c5:76:21:b3:25:d3:ba:24:c8:3f:a8:eb:ec:a0:
8f:99:42:b2:89:74:15:ce:fb:a7:a4:82:59:ba:3d:13:b4:90:
d3:8a:77:25:7e:96:25:dc:6a:50:34:92:ac:1b:71:ed:c5:19:
7a:a6:b2:32:70:34:b5:7a:e0:2f:48:4f:e9:c5:22:81:70:28:
61:e0:43:da:a5:2f:57:a1:31:b0:49:dc:f5:73:dd:62:38:31:
3a:f1:fd:eb:20:03:c1:88:6c:c7:fd:18:45:9a:53:d4:e8:f7:
f0:43:4a:2e:8a:ff:f6:d7:2a:89:ad:c2:0a:2f:65:df:98:dd:
9f:66:97:17:11:c5:c8:a3:13:30:54:a1:2b:f5:e3:a1:da:17:
35:be:36:1b:5d:cd:41:8a:f2:36:58:fa:4c:45:98:ac:97:4a:
17:55:88:6b:3a:33:cb:82:b5:fb:24:e3:9d:53:81:ee:ae:86:
97:e6:36:2f:af:38:6e:67:b3:f6:4b:78:dd:cd:dc:10:47:85:
e5:62:33:88:dc:0a:fd:66:f9:2d:6d:55:b3:91:38:c2:09:85:
44:9c:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org