Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c98273-d3b4-4e0c-b498-525154ccc0ee/1/A2aXzHQ9Y1rkGhd1yNpN2JvVF20.roa
File: A2aXzHQ9Y1rkGhd1yNpN2JvVF20.roa (raw, json)
Hash identifier: 787o+A09Y7mhZwqIM7FqfFi0QeferWfs255dNManyfE=
Subject key identifier: 03:66:97:CC:74:3D:63:5A:E4:1A:17:75:C8:DA:4D:D8:9B:D5:17:6D
Certificate issuer: /CN=7000f91b88e3d69a064df12d6ebaf295d12e4c6a
Certificate serial: 01856D5CFCECE3A6B73BC9FF8329E6ACEAB5
Authority key identifier: 70:00:F9:1B:88:E3:D6:9A:06:4D:F1:2D:6E:BA:F2:95:D1:2E:4C:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAD5G4jj1poGTfEtbrryldEuTGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c98273-d3b4-4e0c-b498-525154ccc0ee/1/A2aXzHQ9Y1rkGhd1yNpN2JvVF20.roa
Signing time: Sun 01 Jan 2023 12:44:48 +0000
ROA not before: Sun 01 Jan 2023 12:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 91.223.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:fc:ec:e3:a6:b7:3b:c9:ff:83:29:e6:ac:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7000f91b88e3d69a064df12d6ebaf295d12e4c6a
Validity
Not Before: Jan 1 12:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=036697cc743d635ae41a1775c8da4dd89bd5176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a2:7b:62:58:3d:51:6f:78:14:33:51:17:63:
9c:25:a8:f9:84:70:35:68:7c:12:1e:88:d8:6a:3f:
75:41:9d:20:b5:40:c0:da:f1:e6:52:b8:d6:21:87:
a5:c8:b3:0c:a4:2e:77:e3:51:da:9c:c9:ea:89:6f:
64:cb:9a:0f:a4:34:45:34:af:10:b8:f2:0a:aa:5e:
33:a2:d3:f2:37:0e:68:aa:70:16:f2:ec:ca:b9:a8:
2e:a1:c7:6e:dc:5b:be:72:ce:8d:31:97:1d:ce:0d:
88:20:a7:ba:9b:8a:ca:05:80:87:6a:d0:06:e6:cb:
02:94:b4:e9:80:c8:67:57:ae:ff:a2:0c:1b:5e:dd:
79:0e:d4:ed:c8:90:99:c1:c1:54:31:bd:c1:89:0a:
60:72:15:38:1f:8e:f3:52:5f:74:b6:8e:8b:19:2f:
49:e3:bf:f0:3c:0e:05:b7:5c:87:10:ef:07:31:1d:
a4:ac:f6:95:8d:af:41:4e:a4:9d:43:22:cd:eb:94:
28:1e:4c:e1:96:6a:7c:08:21:45:45:c6:19:b7:f2:
ee:fd:51:dc:9e:2a:e6:23:46:3c:7b:98:7f:82:8e:
44:12:40:5c:bc:9d:9b:c7:b9:cd:e0:30:a3:50:6d:
8c:2a:29:01:8e:44:8b:91:7e:83:49:69:7c:9b:90:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:97:CC:74:3D:63:5A:E4:1A:17:75:C8:DA:4D:D8:9B:D5:17:6D
X509v3 Authority Key Identifier:
keyid:70:00:F9:1B:88:E3:D6:9A:06:4D:F1:2D:6E:BA:F2:95:D1:2E:4C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAD5G4jj1poGTfEtbrryldEuTGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c98273-d3b4-4e0c-b498-525154ccc0ee/1/A2aXzHQ9Y1rkGhd1yNpN2JvVF20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c98273-d3b4-4e0c-b498-525154ccc0ee/1/cAD5G4jj1poGTfEtbrryldEuTGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.61.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:64:6a:71:1a:c5:f9:f4:af:75:e3:04:91:19:f9:1e:eb:94:
3c:cf:20:26:ee:9f:19:3d:85:2a:5b:7a:1a:29:84:07:8f:4e:
d2:ee:85:26:1c:5a:f6:3e:fe:f6:d7:3d:c7:1f:10:17:51:f7:
84:fe:97:18:01:3a:ac:63:5f:54:a0:0a:f9:79:6e:b8:a3:38:
5a:40:ef:73:d0:ae:64:d0:09:a3:55:26:10:4b:fc:5c:33:cd:
70:18:db:4c:a1:3c:04:a2:c0:1d:71:3c:98:f2:ae:b2:7d:96:
ac:d5:6b:e2:fe:88:5f:fc:e4:dd:da:5b:82:bd:66:aa:e7:b0:
57:a8:aa:b9:6c:0d:32:31:55:31:64:f4:3b:2b:86:e5:60:93:
b9:12:bd:65:62:52:67:de:17:67:2a:63:41:8f:43:55:da:1c:
09:f3:5e:af:aa:f0:57:67:22:26:a9:99:8f:86:d3:a3:db:36:
d5:b8:e4:39:f9:e7:7f:2d:11:db:dd:1b:51:c5:c0:40:67:11:
9f:24:a8:12:bc:64:aa:0a:9e:d4:df:ba:d8:69:16:4d:eb:dd:
a0:26:70:4c:6e:c6:4f:4b:ac:f8:aa:22:ec:92:47:90:8c:64:
a8:44:cc:f0:1a:af:05:5f:ba:9a:45:f1:c9:8b:76:92:c1:f1:
3e:eb:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:20 2024 by rpki-client on console-ams.rpki-client.org