Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/Xw-NPvZLpAAuyCs7v6nwZDhQ1Hc.roa
File: Xw-NPvZLpAAuyCs7v6nwZDhQ1Hc.roa (raw, json)
Hash identifier: dj9OPb5A0wavf6LOes3KfDsZokJnjIdli08poXxR5mw=
Subject key identifier: 5F:0F:8D:3E:F6:4B:A4:00:2E:C8:2B:3B:BF:A9:F0:64:38:50:D4:77
Certificate issuer: /CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
Certificate serial: 018B01062D8AEB2736F8DC317F5074B9637F
Authority key identifier: 22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/Xw-NPvZLpAAuyCs7v6nwZDhQ1Hc.roa
Signing time: Thu 05 Oct 2023 18:07:43 +0000
ROA not before: Thu 05 Oct 2023 18:07:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 91.242.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:06:2d:8a:eb:27:36:f8:dc:31:7f:50:74:b9:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
Validity
Not Before: Oct 5 18:07:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f0f8d3ef64ba4002ec82b3bbfa9f0643850d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:ee:58:31:03:f4:5e:94:84:bc:43:1a:00:
b0:0f:b6:47:39:1d:ea:b2:67:85:b2:20:66:a1:6c:
1a:d2:51:a8:a6:60:41:86:67:5a:36:ac:df:f7:1b:
f9:36:3a:13:c1:43:08:81:70:5f:b1:7b:41:f3:67:
3e:fe:78:e1:e0:b2:43:4d:41:20:cc:a0:65:00:25:
76:a4:a3:8c:52:ee:14:51:ba:16:44:79:1c:4a:35:
f3:ed:fd:1d:a3:ef:dd:02:35:85:f4:29:53:ae:33:
03:86:a6:c4:e6:ab:4e:bc:72:0d:d5:6b:85:51:4d:
cf:96:5b:2e:64:de:9b:1e:bd:bf:54:c5:6a:f4:a0:
a1:43:b3:90:d1:00:c3:f8:a7:41:56:c8:38:84:4e:
25:a6:02:88:a1:c6:7a:22:09:c1:80:30:9e:96:bf:
86:f9:b1:ea:38:5d:c0:5d:c7:87:46:72:c6:8f:7f:
8b:5f:87:a5:de:ba:e7:bd:d0:ce:8f:2b:ad:b1:f8:
72:64:71:66:7e:ec:95:18:9f:69:21:5e:1d:0e:ac:
72:df:5a:09:1e:d2:ac:2a:07:c2:5c:3d:f7:8b:d8:
1e:8a:7a:ae:b1:56:7b:f6:41:4d:ec:32:ec:83:35:
40:9f:45:1f:87:40:e1:86:09:15:8f:d3:e2:ec:b4:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:8D:3E:F6:4B:A4:00:2E:C8:2B:3B:BF:A9:F0:64:38:50:D4:77
X509v3 Authority Key Identifier:
keyid:22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/Xw-NPvZLpAAuyCs7v6nwZDhQ1Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/ImvMD4ezL3S4ONwfJNKOWCP2D_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.246.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1b:79:c9:1b:51:3c:14:ed:ec:f8:b6:ff:16:6e:9b:71:5f:
6d:db:c2:fa:95:1d:59:8b:e2:13:f6:76:4c:f5:82:b6:a5:f3:
3b:39:68:0d:ff:b4:00:12:d4:4d:a4:15:dd:e6:08:f9:1b:20:
d9:f2:d4:82:8c:6c:1c:f9:29:51:28:3f:b6:9a:f2:50:89:45:
b8:19:6b:9d:55:c9:ac:eb:a4:9b:a7:cd:d9:8c:64:61:7b:56:
b0:ad:ff:6b:bc:9c:3b:eb:a4:9f:3d:fd:09:03:87:aa:2d:ee:
06:7d:cf:fc:35:df:72:ee:a2:4e:ca:81:d2:1e:c7:12:d1:fa:
ee:8b:fe:51:a0:35:e2:eb:71:a0:82:0d:a1:29:78:be:a9:3d:
59:b7:a2:38:86:e1:b8:be:f3:98:f8:23:a5:76:6c:41:d9:5a:
d6:55:e1:54:da:9d:5c:f8:01:f8:78:96:10:c3:5c:35:a4:6e:
62:cb:9e:5a:f1:77:4c:f6:f2:88:8f:c9:63:7b:73:db:a6:2c:
a3:da:53:78:99:20:4b:cd:90:12:89:bd:33:79:7f:92:3f:97:
53:eb:a4:8e:9d:e7:da:ab:48:d4:e0:cb:a3:ea:99:aa:8c:a0:
8a:a8:f2:76:f5:53:5d:59:07:e5:69:da:83:29:69:f0:35:38:
a8:f3:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 13:01:02 2023 by rpki-client on console-fra.rpki-client.org