Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/ls6Pjw__nVNpBB_3O9ACxymzsII.roa
File: ls6Pjw__nVNpBB_3O9ACxymzsII.roa (raw, json)
Hash identifier: a3ldp1WRmMH2z5+c0z2bJcbZPDQPq5it4oYYIcz2T50=
Subject key identifier: 96:CE:8F:8F:0F:FF:9D:53:69:04:1F:F7:3B:D0:02:C7:29:B3:B0:82
Certificate issuer: /CN=19e699e256ec3be94726719b60f8ff414efeffe9
Certificate serial: D205DF
Authority key identifier: 19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/ls6Pjw__nVNpBB_3O9ACxymzsII.roa
Signing time: Sat 01 Jan 2022 05:54:55 +0000
ROA not before: Sat 01 Jan 2022 05:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 91.236.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13764063 (0xd205df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e699e256ec3be94726719b60f8ff414efeffe9
Validity
Not Before: Jan 1 05:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96ce8f8f0fff9d5369041ff73bd002c729b3b082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:f0:17:e2:4e:a7:13:11:1f:51:92:17:44:
54:df:dd:b1:c9:0a:80:7c:f2:ea:5c:54:7c:8e:3c:
4e:48:72:da:fd:3b:1d:62:0a:c2:aa:e5:7b:e3:7d:
d4:fa:99:2c:73:f4:ef:72:96:a0:c1:c4:3d:7d:b4:
fb:f6:95:e0:0c:ae:bc:5f:f9:7a:bb:07:49:1d:bd:
af:38:87:0c:67:a2:7f:11:9e:e3:8e:7e:5f:a0:9a:
57:f9:6d:0a:07:ac:8a:cd:fb:8d:35:91:e2:ee:f5:
ca:51:16:98:b7:3c:7e:04:02:a2:57:9e:f7:51:2b:
d8:75:ec:14:7c:86:ae:fc:8d:df:37:16:b0:0c:3c:
65:55:06:6c:9f:cc:b0:ec:77:35:67:d3:93:2f:bd:
a4:12:0e:f0:66:86:b5:9a:ac:f7:62:c8:9e:a7:72:
e0:4d:c3:f2:47:ea:46:23:23:1d:bf:e4:9f:1d:83:
11:6b:aa:10:c3:8b:c6:10:a2:b3:52:9f:8d:1d:01:
7d:70:7f:00:de:0f:b7:dd:05:72:29:ae:4e:bc:53:
c3:12:bd:1b:cc:00:4c:60:4a:18:44:61:e6:34:52:
44:60:1a:74:20:a7:41:c3:e2:34:5e:9d:9d:b5:3a:
97:da:4e:94:9b:d5:ae:41:96:25:33:e1:84:a1:e4:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:8F:8F:0F:FF:9D:53:69:04:1F:F7:3B:D0:02:C7:29:B3:B0:82
X509v3 Authority Key Identifier:
keyid:19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/ls6Pjw__nVNpBB_3O9ACxymzsII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.195.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0f:d2:cb:76:05:51:79:93:17:a7:40:ac:67:ce:ae:33:13:
1c:66:4a:09:8f:76:3a:f5:68:d1:8b:e9:9e:fa:f2:b6:ac:e2:
e1:e6:dc:3a:6a:fd:1d:e9:1e:a0:96:d6:ef:10:4c:80:45:b9:
cf:0d:19:83:b1:9c:9e:0e:b1:5f:09:47:aa:11:56:1f:e1:51:
0e:a4:c8:f8:e3:cd:0d:b0:3a:e4:2c:b5:23:69:1c:dd:cc:53:
ea:97:44:b2:8c:54:75:61:51:b0:de:ed:5e:8d:04:c6:17:d2:
94:67:ce:5e:ac:ef:8b:11:9e:e0:7d:ac:b6:c1:17:a3:82:33:
ec:f8:41:88:c3:52:f2:28:e5:c6:a1:6c:8e:a6:b2:ed:d8:f2:
32:5b:95:75:57:08:63:c8:d1:e6:15:b4:c9:e0:ae:85:9c:bb:
23:7c:fa:58:d9:63:05:15:2e:48:e7:fa:7b:d2:2e:8a:65:cf:
3f:f2:d2:64:c0:66:89:40:f3:5c:ed:d6:fd:e4:df:2f:aa:8c:
71:eb:c3:49:f1:6f:9a:1a:21:de:b1:b5:54:72:da:19:9d:02:
28:16:09:b9:31:62:9b:2e:ef:e6:66:3e:dc:32:73:35:f0:f6:
d9:f7:91:da:8b:b5:6b:6b:2d:9c:17:65:89:34:90:b0:d5:83:
a2:41:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:17 2023 by rpki-client on console-fra.rpki-client.org