Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/bDv6MUl0mI5JjH1DxZ6kckOg118.roa
File: bDv6MUl0mI5JjH1DxZ6kckOg118.roa (raw, json)
Hash identifier: jIwNLgksiPuLVdJaLaLgdhg+M+WhmBCykg4WXyUpAcI=
Subject key identifier: 6C:3B:FA:31:49:74:98:8E:49:8C:7D:43:C5:9E:A4:72:43:A0:D7:5F
Certificate issuer: /CN=11cb9604dc2f1ae59e17892f5bbebe102f62ab33
Certificate serial: 0C424C69
Authority key identifier: 11:CB:96:04:DC:2F:1A:E5:9E:17:89:2F:5B:BE:BE:10:2F:62:AB:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EcuWBNwvGuWeF4kvW76-EC9iqzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/bDv6MUl0mI5JjH1DxZ6kckOg118.roa
Signing time: Sat 01 Jan 2022 05:56:38 +0000
ROA not before: Sat 01 Jan 2022 05:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34310
IP address blocks: 91.189.9.0/24 maxlen: 24
83.142.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205671529 (0xc424c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11cb9604dc2f1ae59e17892f5bbebe102f62ab33
Validity
Not Before: Jan 1 05:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c3bfa314974988e498c7d43c59ea47243a0d75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:a2:8e:9a:d6:e2:0f:b9:ea:a0:29:52:55:
5a:8b:46:22:36:fc:4c:28:96:3e:69:46:1b:61:c6:
0b:52:9f:11:26:b6:5a:4c:00:0a:4a:1b:92:ba:bb:
33:c2:b2:1b:19:fe:c3:c7:f9:07:56:c8:69:e7:71:
7a:a6:e8:a6:60:af:23:ce:17:66:45:51:00:db:e6:
62:a3:7c:b6:14:20:35:b5:95:8d:79:4d:8b:2b:6d:
54:e1:6b:5b:fb:7f:47:d3:99:b8:19:dc:8e:37:da:
71:da:bd:fc:f0:c9:0b:a1:ed:92:bb:69:f3:6e:e8:
dc:5b:92:aa:46:9b:8a:cb:9d:b7:ef:05:d1:f9:69:
83:f3:a5:c4:0b:03:d9:b0:07:13:78:9b:a4:b6:0b:
fe:10:01:e5:3a:d3:10:bc:b0:42:ca:47:71:85:08:
6d:e9:c1:5d:b9:97:6d:4e:4d:53:0b:98:65:82:7f:
55:95:b8:6a:7d:34:78:29:41:c9:07:0e:cd:d2:49:
79:b4:af:d0:d4:be:45:a3:ea:c9:b6:79:92:33:62:
53:98:a5:46:c0:20:71:59:23:67:27:3f:4a:1a:44:
d2:27:97:dd:e6:44:8a:5b:56:7f:5c:d9:05:0a:1f:
5c:70:88:b3:3a:51:70:06:66:ec:89:77:33:bd:28:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3B:FA:31:49:74:98:8E:49:8C:7D:43:C5:9E:A4:72:43:A0:D7:5F
X509v3 Authority Key Identifier:
keyid:11:CB:96:04:DC:2F:1A:E5:9E:17:89:2F:5B:BE:BE:10:2F:62:AB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EcuWBNwvGuWeF4kvW76-EC9iqzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/bDv6MUl0mI5JjH1DxZ6kckOg118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/EcuWBNwvGuWeF4kvW76-EC9iqzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.88.0/21
91.189.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:19:8c:8f:ce:15:1e:6a:dd:f9:40:4c:26:af:6f:02:89:35:
bb:e2:90:f2:23:68:af:4d:16:83:fe:01:a5:73:45:c9:93:65:
1c:95:5d:da:76:45:1c:4e:27:48:0e:cf:75:16:83:61:b8:6c:
d9:5a:7f:e2:4a:da:75:9b:ce:38:61:57:9b:4c:74:23:37:d2:
01:a3:fe:3e:21:9d:90:78:b2:5c:5a:c9:7d:9f:3b:02:a9:5d:
ab:e5:da:71:2b:e3:53:f1:2e:2b:34:01:d0:13:9b:b0:f2:4b:
b1:dd:70:3b:71:de:fe:c3:5d:8e:15:f0:02:a6:b9:38:14:79:
a6:43:5a:6f:e8:8d:26:d8:44:88:11:14:b9:81:30:7a:02:1b:
12:79:f0:a3:34:ac:10:17:05:6d:88:7d:be:48:4e:7a:5a:88:
3b:73:c7:56:f9:22:45:44:c5:0f:0a:f4:84:bf:ae:c4:b5:5d:
b5:66:74:b1:5d:da:ca:2d:c5:98:81:a4:d8:f7:8b:bc:ae:2e:
03:63:10:ad:3e:dd:c7:8e:da:b5:e3:fe:c4:25:93:27:18:e5:
34:09:4c:ab:06:6d:a1:db:2e:e7:7b:62:c8:35:e1:b9:ba:ed:
af:83:d6:b3:39:c9:63:8a:a0:c7:6d:ef:70:56:8d:05:a5:c4:
ea:b2:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:51 2024 by rpki-client on console-ams.rpki-client.org