Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/RenKaCfXcVBdoM5xiZFDggIt3BU.roa
File: RenKaCfXcVBdoM5xiZFDggIt3BU.roa (raw, json)
Hash identifier: rfLmqNca9WIb8U3Pd716MBd57oBINhmafCEUYz/3G8k=
Subject key identifier: 45:E9:CA:68:27:D7:71:50:5D:A0:CE:71:89:91:43:82:02:2D:DC:15
Certificate issuer: /CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
Certificate serial: 03BB67EE
Authority key identifier: 18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/RenKaCfXcVBdoM5xiZFDggIt3BU.roa
Signing time: Sat 01 Jan 2022 12:03:54 +0000
ROA not before: Sat 01 Jan 2022 12:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25133
IP address blocks: 91.105.206.0/24 maxlen: 24
91.105.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62613486 (0x3bb67ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
Validity
Not Before: Jan 1 12:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45e9ca6827d771505da0ce7189914382022ddc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:c6:67:1b:0d:35:40:87:a1:bf:a2:b7:78:
4d:34:c1:aa:2f:54:9a:92:03:b3:d1:ad:a9:06:98:
94:b4:72:0c:59:82:3f:2d:ad:48:d9:64:3c:80:1e:
04:14:ae:0a:c1:6d:35:be:8f:21:57:1e:03:5b:94:
41:0f:76:3b:82:2e:62:14:77:df:56:27:bb:40:39:
45:84:8b:0f:73:d0:8f:14:98:18:7d:09:b5:e2:8f:
31:b3:d3:bf:8c:60:c8:93:a3:fb:0d:72:13:1d:4c:
31:58:b3:c1:7c:78:4c:2a:39:da:24:8f:6a:d4:db:
7d:e2:db:4b:aa:10:89:ee:1d:56:c8:b9:be:ff:9b:
29:e1:da:28:df:79:7e:b1:26:79:d5:38:88:43:c6:
d5:11:37:43:c3:34:53:66:20:fa:aa:04:0b:6a:31:
72:2b:61:7a:10:52:97:d9:14:08:2e:ba:06:04:ea:
44:7c:ae:ce:6f:aa:a2:e3:a2:c1:65:31:8e:ec:17:
70:ab:b6:a1:20:9a:20:84:9a:a9:ff:f4:c1:53:4b:
ee:34:5c:a3:cc:19:da:36:44:64:dc:b6:cc:17:66:
a4:34:ce:a4:14:a7:56:13:7f:b6:a3:9e:7e:66:cd:
3f:72:67:e6:26:fb:f6:f2:d5:59:f9:11:b8:4a:13:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:CA:68:27:D7:71:50:5D:A0:CE:71:89:91:43:82:02:2D:DC:15
X509v3 Authority Key Identifier:
keyid:18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/RenKaCfXcVBdoM5xiZFDggIt3BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.206.0/23
Signature Algorithm: sha256WithRSAEncryption
92:4f:6f:27:73:bf:86:e6:72:41:e2:52:2a:1d:34:83:49:1f:
46:85:a9:fb:3d:28:a8:0d:ab:e1:d6:98:9e:aa:8e:70:b9:12:
f5:b9:bb:91:55:11:0e:a7:a7:bc:db:20:63:9b:2d:14:c2:34:
44:16:1f:e1:d3:e9:8b:5f:02:bb:ea:4c:02:c1:ab:f2:43:27:
4b:22:79:15:a9:2a:d5:9f:b9:57:5d:88:9e:b9:48:3f:d2:89:
61:a0:ae:2c:dd:9d:1d:ac:0d:ee:0c:f5:a1:7f:78:5c:98:e6:
b1:fa:41:ef:4b:c3:a0:2b:f7:55:71:f1:d7:be:91:e1:81:6a:
8d:3a:96:b2:79:36:de:dc:d5:39:3c:93:37:8d:80:8c:c4:25:
5e:a2:0b:25:07:9d:f4:ca:23:bd:48:65:cd:4b:2d:5b:f5:be:
2c:c2:ff:25:fb:56:d0:67:c8:47:1e:01:e0:f9:b3:11:a2:b4:
c5:48:e6:dc:44:44:a9:a4:67:5a:53:03:1e:ac:26:e9:94:b9:
f2:d3:43:18:0b:d1:a1:33:03:86:d8:ca:72:7b:25:94:ea:43:
fd:9b:08:d3:20:6a:db:4c:ad:09:b1:a2:cd:ad:2d:bb:db:4a:
63:aa:c4:52:7c:bf:8e:6e:ed:9c:30:de:ab:50:b9:32:79:e0:
d2:a4:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:31 2024 by rpki-client on console-ams.rpki-client.org