Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/_hFCgzgloTANq_zt9ETGMPpE8LU.roa
File: _hFCgzgloTANq_zt9ETGMPpE8LU.roa (raw, json)
Hash identifier: CAp6pL61n54wsr/CV5bpPtZqjzvQNRADehTUcSmOkKw=
Subject key identifier: FE:11:42:83:38:25:A1:30:0D:AB:FC:ED:F4:44:C6:30:FA:44:F0:B5
Certificate issuer: /CN=11cb9604dc2f1ae59e17892f5bbebe102f62ab33
Certificate serial: 0C427374
Authority key identifier: 11:CB:96:04:DC:2F:1A:E5:9E:17:89:2F:5B:BE:BE:10:2F:62:AB:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EcuWBNwvGuWeF4kvW76-EC9iqzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/_hFCgzgloTANq_zt9ETGMPpE8LU.roa
Signing time: Sat 01 Jan 2022 05:56:38 +0000
ROA not before: Sat 01 Jan 2022 05:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57576
IP address blocks: 91.189.11.0/24 maxlen: 24
91.189.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205681524 (0xc427374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11cb9604dc2f1ae59e17892f5bbebe102f62ab33
Validity
Not Before: Jan 1 05:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe1142833825a1300dabfcedf444c630fa44f0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:24:23:d1:02:db:d9:a5:88:02:df:d3:3e:
0e:eb:5f:09:c1:1a:1d:5f:05:d1:f6:75:0b:7c:fc:
ac:1e:a4:8b:04:0d:8a:a0:d6:98:8d:f1:5a:ee:1f:
fb:26:54:31:ce:ae:7f:09:df:d4:96:dd:01:74:79:
bf:7e:fd:27:6b:4c:8c:c6:b9:63:b7:b8:e9:1d:a8:
62:86:9e:89:4e:f9:ab:29:d5:a3:2f:8c:27:2b:03:
98:39:92:1e:c3:08:3f:4b:11:67:a1:88:73:fa:b6:
2e:eb:6c:8c:fe:83:30:96:98:26:24:2d:08:11:57:
de:12:ff:20:25:db:2c:64:1f:18:7b:81:a3:13:33:
9a:0a:b6:ba:ca:51:d1:23:c7:cb:cb:69:d8:f3:6e:
fc:a7:85:01:69:1a:cb:89:e6:63:5b:b5:36:be:fd:
f5:a9:39:22:65:54:4b:44:d8:d4:52:0b:1d:73:08:
27:a9:64:60:83:68:a5:3a:0c:d4:98:a2:86:7e:16:
6d:7c:13:5b:55:f8:e6:58:9a:d5:db:79:08:3d:1a:
38:10:47:31:fb:32:20:10:9d:25:ca:86:a1:3f:1f:
67:13:23:10:18:9c:45:e4:24:59:7b:02:43:be:0e:
ec:7d:7b:dd:61:17:09:63:12:f0:03:b4:24:97:65:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:11:42:83:38:25:A1:30:0D:AB:FC:ED:F4:44:C6:30:FA:44:F0:B5
X509v3 Authority Key Identifier:
keyid:11:CB:96:04:DC:2F:1A:E5:9E:17:89:2F:5B:BE:BE:10:2F:62:AB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EcuWBNwvGuWeF4kvW76-EC9iqzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/_hFCgzgloTANq_zt9ETGMPpE8LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/EcuWBNwvGuWeF4kvW76-EC9iqzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.11.0-91.189.15.255
Signature Algorithm: sha256WithRSAEncryption
b7:4c:4d:25:c1:44:61:99:7a:d9:f6:95:41:88:44:8c:d7:69:
83:04:4d:4a:bb:0a:b6:5f:50:3e:17:20:8a:c7:61:d9:56:53:
f7:cd:c2:01:d8:f6:e5:d6:86:5e:b5:32:74:ce:52:19:d2:a5:
07:7c:e2:ba:94:40:61:b2:ba:25:07:f7:28:88:06:9f:15:e9:
d6:89:09:dd:7a:92:91:65:0d:b5:b0:e1:1a:83:1c:6e:ee:be:
c0:1a:79:e0:fb:d6:ac:f3:bf:55:74:cd:71:e0:31:19:0d:77:
df:73:b1:3e:e5:e6:27:fe:89:3e:6a:58:1e:31:1e:60:83:1c:
64:58:05:1c:9e:63:55:9a:61:c3:86:f6:76:d4:7f:d4:0a:87:
ba:19:97:51:70:14:ae:0b:62:fd:7a:62:42:ae:04:2b:37:8e:
5a:5e:2d:05:17:04:5f:50:d0:65:08:a3:0e:83:ef:f8:b6:69:
a4:41:4a:00:61:90:14:07:72:49:1b:68:b7:fa:1d:42:41:c5:
3b:70:b8:b4:bb:ae:54:9c:93:c3:b8:b2:ee:0a:59:76:20:bd:
87:aa:bb:13:22:9c:50:b1:58:d6:b9:13:e1:e0:19:db:7d:2e:
a0:13:93:2f:97:08:83:71:f0:f0:28:a7:b7:dd:c9:08:f1:b5:
6e:28:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:54 2023 by rpki-client on console-fra.rpki-client.org