Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/hGh35jx-XLDeOpmZAoYO0At0-mA.roa
File: hGh35jx-XLDeOpmZAoYO0At0-mA.roa (raw, json)
Hash identifier: SSt5kPxN4g2ms1LoniasV0dC6qyjQut8PQ7QyWFBCBE=
Subject key identifier: 84:68:77:E6:3C:7E:5C:B0:DE:3A:99:99:02:86:0E:D0:0B:74:FA:60
Certificate issuer: /CN=4c65323aafa5f05036ee3091fd8b6b449c1017c3
Certificate serial: 010D5D
Authority key identifier: 4C:65:32:3A:AF:A5:F0:50:36:EE:30:91:FD:8B:6B:44:9C:10:17:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGUyOq-l8FA27jCR_YtrRJwQF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/hGh35jx-XLDeOpmZAoYO0At0-mA.roa
Signing time: Thu 03 Feb 2022 11:59:46 +0000
ROA not before: Thu 03 Feb 2022 11:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3232
IP address blocks: 91.216.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68957 (0x10d5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c65323aafa5f05036ee3091fd8b6b449c1017c3
Validity
Not Before: Feb 3 11:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=846877e63c7e5cb0de3a999902860ed00b74fa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:d4:f5:3a:d1:6c:78:a6:f1:52:8c:39:f5:
12:19:95:88:76:35:aa:1e:fe:5b:1b:9c:0a:a2:f7:
cf:6e:a6:14:ec:d4:71:2d:94:90:bb:3a:b7:2d:6b:
e0:a9:91:3c:85:75:0f:f6:45:a0:0c:ee:c4:bc:8f:
ba:b2:51:22:f8:97:cc:ba:45:47:4b:27:41:6e:47:
b1:85:9e:bc:0e:72:22:8c:a4:5c:c4:7b:3e:59:5f:
5d:3e:c7:a3:ba:f3:f4:21:03:65:bf:f4:eb:75:f7:
9c:87:c7:84:82:b8:58:d9:15:0c:61:70:de:5b:05:
e2:c7:87:03:c6:69:df:47:64:8c:03:d9:85:a9:c9:
56:bf:b4:78:1a:3b:41:83:bc:21:0d:1a:ef:d5:8f:
27:b1:d4:70:2a:ed:59:d7:5e:fb:06:4d:68:23:0b:
e7:08:a7:b0:60:22:98:c0:de:f6:d8:b9:ad:7d:13:
e0:77:86:ac:f9:bf:17:45:72:74:2d:38:d9:c5:95:
fd:50:18:cc:fa:f5:50:b1:b9:8e:74:8a:42:b7:b7:
45:97:8e:7e:60:5f:ad:96:3d:cd:fb:52:31:bf:f5:
11:c2:42:ba:36:b6:37:28:19:4b:2e:72:7d:7e:55:
0a:7a:24:7b:4e:c5:f3:10:46:69:f9:08:7a:10:f3:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:77:E6:3C:7E:5C:B0:DE:3A:99:99:02:86:0E:D0:0B:74:FA:60
X509v3 Authority Key Identifier:
keyid:4C:65:32:3A:AF:A5:F0:50:36:EE:30:91:FD:8B:6B:44:9C:10:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGUyOq-l8FA27jCR_YtrRJwQF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/hGh35jx-XLDeOpmZAoYO0At0-mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/TGUyOq-l8FA27jCR_YtrRJwQF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2b:01:fb:18:4e:7d:9a:51:88:14:76:e5:a9:5c:df:1f:a0:
b2:64:5d:2b:3f:22:2c:04:d2:73:86:c8:8f:65:73:c5:08:88:
fc:c9:e0:52:a4:e5:68:45:f5:30:32:7f:df:90:48:ca:f5:0f:
30:1e:41:05:0f:63:b3:f0:f5:4f:bc:01:d6:5a:a8:05:b0:29:
7a:ec:6a:51:33:8a:27:25:6f:35:24:bb:e0:74:06:5f:f0:50:
48:8f:83:1b:87:ce:f3:f6:a8:82:1f:5b:02:a6:9d:ea:57:0e:
4e:d1:a4:fe:af:a7:d5:85:3a:98:b7:cf:47:c1:94:7d:11:3f:
21:26:fb:78:44:24:d5:1a:82:92:3c:09:4c:49:52:93:85:b2:
13:35:a7:21:31:8d:32:44:b1:d6:ae:9f:06:0c:ad:ce:03:c9:
0c:08:11:34:ec:34:85:d3:c9:59:0b:5a:39:e9:aa:53:75:7a:
e0:7c:dc:53:0a:2a:b5:e3:cf:7d:63:b4:0d:32:73:4d:0a:0e:
3d:76:37:6b:a3:a4:dc:0f:ff:50:f0:31:48:1f:9a:6b:e0:6a:
58:8d:66:0d:83:2c:e0:8a:f7:71:fa:22:b3:32:f5:9c:c5:4d:
b3:97:df:9c:ed:54:47:9d:4f:20:c9:1a:99:0c:09:6c:dc:f9:
ac:d2:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:23 2024 by rpki-client on console-ams.rpki-client.org