Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/xSrqgLgKjfLfL9jlefdVkIaUfCU.roa
File: xSrqgLgKjfLfL9jlefdVkIaUfCU.roa (raw, json)
Hash identifier: U15hwxHfPtc6L2xoNioG5u+Tq6eLonitLvz/XaLKftE=
Subject key identifier: C5:2A:EA:80:B8:0A:8D:F2:DF:2F:D8:E5:79:F7:55:90:86:94:7C:25
Certificate issuer: /CN=b811f8ce6dd0cc480f097540563920aea3d66396
Certificate serial: 018755927A519E2D0A10BD350D8C4C67A3D1
Authority key identifier: B8:11:F8:CE:6D:D0:CC:48:0F:09:75:40:56:39:20:AE:A3:D6:63:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/xSrqgLgKjfLfL9jlefdVkIaUfCU.roa
Signing time: Thu 06 Apr 2023 07:57:55 +0000
ROA not before: Thu 06 Apr 2023 07:57:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.205.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:92:7a:51:9e:2d:0a:10:bd:35:0d:8c:4c:67:a3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b811f8ce6dd0cc480f097540563920aea3d66396
Validity
Not Before: Apr 6 07:57:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c52aea80b80a8df2df2fd8e579f7559086947c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:85:f1:37:b5:02:61:13:31:fe:b5:b4:47:
81:15:f9:15:64:a4:8c:ee:18:16:e2:ce:89:81:0a:
31:7f:37:7d:13:84:85:c8:12:8c:fc:a9:8e:2f:00:
65:25:8c:0a:04:1d:48:81:1d:36:dd:64:38:0a:f6:
db:71:c3:ef:85:35:63:19:6d:41:74:da:21:ae:72:
e3:10:f4:ef:8f:ad:2c:f3:41:db:cd:b2:6c:f6:83:
87:b8:a5:4b:ec:1b:3e:00:b8:06:79:af:5e:9c:cc:
aa:17:3b:5f:02:49:07:dd:df:c3:77:43:05:74:71:
4d:c6:19:83:60:ef:9d:88:8e:04:4e:bf:d8:86:6d:
4a:88:d5:45:d4:d3:cd:fa:6c:cf:64:bb:c6:32:0a:
26:2e:6e:a9:3c:97:12:63:a1:7d:60:61:2d:64:62:
b4:1e:74:ed:a6:20:88:f2:6f:f2:a2:ab:b4:90:86:
41:f8:33:79:c9:eb:e7:fa:3b:98:61:67:40:a9:5b:
dc:9f:aa:03:6c:70:70:b2:54:fa:e4:e4:38:29:40:
34:c1:e0:4c:14:bf:ec:17:51:72:a8:d1:46:b1:4b:
e4:9c:27:83:78:f8:2f:2c:bd:25:b8:cd:45:4f:ab:
ba:1a:cd:ab:5d:02:89:a9:f2:90:5e:d4:61:05:ca:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:EA:80:B8:0A:8D:F2:DF:2F:D8:E5:79:F7:55:90:86:94:7C:25
X509v3 Authority Key Identifier:
keyid:B8:11:F8:CE:6D:D0:CC:48:0F:09:75:40:56:39:20:AE:A3:D6:63:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/xSrqgLgKjfLfL9jlefdVkIaUfCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fd:21:b3:cb:76:a1:e8:93:a7:89:fc:6c:8a:b1:97:6a:8b:
94:15:dd:91:42:de:0f:45:59:b2:39:f5:ef:b8:c1:10:6f:c7:
e4:96:bb:0d:97:3e:88:7a:c6:eb:28:aa:26:ad:13:eb:36:8f:
0d:af:f2:9a:5c:67:25:40:a1:00:27:e0:f9:53:9f:66:9c:ec:
74:de:e3:9b:0e:05:a9:9a:4d:05:8f:ce:4d:85:81:bc:f7:d6:
0d:86:b6:f2:99:dd:46:33:14:e3:36:fd:77:3e:cf:54:97:6e:
bf:ae:78:f9:4e:38:61:bf:7c:54:2f:02:2c:28:26:27:5b:38:
19:86:ef:86:5c:8b:7f:93:50:fe:80:a7:ba:f9:f1:eb:84:72:
44:7a:a1:9e:a2:48:2b:3c:a5:de:56:96:0f:46:e4:74:43:9e:
a3:36:91:be:b0:3f:b8:b6:41:28:3f:91:4f:02:00:a7:e4:51:
91:2c:31:83:90:27:7c:5a:e7:65:79:a1:d1:bf:fa:63:37:8a:
1f:8d:08:bb:0d:e2:96:8b:6a:a8:2f:0a:69:1f:54:f5:63:df:
ab:95:4a:d6:61:ab:ef:c9:ca:ed:a9:4e:20:b8:98:03:71:25:
7f:2b:b5:02:bf:fb:62:8d:33:7a:03:8c:c6:a7:c5:d5:38:72:
b1:a6:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:42 2024 by rpki-client on console-fra.rpki-client.org