Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/336e73-1ce2-4454-afb1-896d7f09665e/1/qOBFFdLN92FYFkLHZ0Q9M3LyTeY.roa
File: qOBFFdLN92FYFkLHZ0Q9M3LyTeY.roa (raw, json)
Hash identifier: Eyu1pFvlnDwkz1xc4q7d1CA6JJf4+DzAO+ukz/rkPYs=
Subject key identifier: A8:E0:45:15:D2:CD:F7:61:58:16:42:C7:67:44:3D:33:72:F2:4D:E6
Certificate issuer: /CN=eb90df0af2f1e7682290966f802ac381d4f19965
Certificate serial: 671C8C
Authority key identifier: EB:90:DF:0A:F2:F1:E7:68:22:90:96:6F:80:2A:C3:81:D4:F1:99:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65DfCvLx52gikJZvgCrDgdTxmWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/336e73-1ce2-4454-afb1-896d7f09665e/1/qOBFFdLN92FYFkLHZ0Q9M3LyTeY.roa
Signing time: Sat 01 Jan 2022 01:57:00 +0000
ROA not before: Sat 01 Jan 2022 01:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213006
IP address blocks: 91.212.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6757516 (0x671c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb90df0af2f1e7682290966f802ac381d4f19965
Validity
Not Before: Jan 1 01:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8e04515d2cdf761581642c767443d3372f24de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:ca:d5:b3:c7:99:a7:02:e3:9b:0a:a7:9a:
d5:27:9d:31:ed:f8:01:3b:7e:ba:75:2a:d5:bb:38:
56:24:83:e3:d4:95:e9:6c:5e:30:a1:fb:57:ee:f2:
07:5c:7c:fc:7d:dc:cc:73:c4:4d:8a:cf:28:e9:26:
65:af:5f:17:17:e3:bc:d2:5b:da:6d:21:c4:c6:2d:
ef:11:00:59:46:76:0c:79:9f:1d:72:49:b4:61:b8:
a3:f2:a3:12:f0:38:e6:23:57:c1:44:f3:24:99:47:
67:7c:a6:aa:47:d2:6d:cf:87:53:12:29:63:f3:f0:
f7:6e:84:54:86:4d:56:2a:c6:3b:ee:4f:72:70:a2:
3a:d7:d0:01:0f:a0:a1:da:cf:e2:59:1a:0a:8b:ee:
7f:9d:86:b4:32:a1:0d:5a:c8:b9:e8:6b:97:e7:5a:
61:ff:98:68:67:7f:02:c4:97:6f:36:77:cc:fc:01:
2d:d0:9f:65:b8:3b:02:35:3d:4d:e4:a1:9a:8d:97:
63:7d:8d:8d:cb:94:76:5a:81:91:55:50:6b:9e:d1:
2b:fd:4b:1e:65:27:66:92:d2:e8:7c:4d:ae:09:d6:
ee:ec:4b:e6:22:4f:21:16:10:3e:7d:20:3f:93:93:
75:d3:95:1a:34:30:f2:60:00:aa:0c:68:c7:01:58:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:45:15:D2:CD:F7:61:58:16:42:C7:67:44:3D:33:72:F2:4D:E6
X509v3 Authority Key Identifier:
keyid:EB:90:DF:0A:F2:F1:E7:68:22:90:96:6F:80:2A:C3:81:D4:F1:99:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65DfCvLx52gikJZvgCrDgdTxmWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/336e73-1ce2-4454-afb1-896d7f09665e/1/qOBFFdLN92FYFkLHZ0Q9M3LyTeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/336e73-1ce2-4454-afb1-896d7f09665e/1/65DfCvLx52gikJZvgCrDgdTxmWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2e:4f:62:b2:39:a5:a2:54:fd:b6:d9:b9:a4:a7:71:f0:66:
d8:f1:60:11:93:75:41:49:32:2d:8a:36:1e:c2:49:96:ab:51:
47:fc:ba:be:20:af:05:b0:62:c0:e3:29:32:c1:96:e3:b8:e5:
04:f8:a2:2c:79:fc:eb:e8:6c:8b:ac:3d:ec:3b:9c:05:82:5b:
1e:c5:15:b1:91:38:d7:e7:eb:07:c5:da:bd:b2:dd:2e:45:b8:
1f:ff:b6:9c:27:da:9f:37:cf:56:2d:59:ac:f5:01:8b:eb:8e:
c4:96:02:ff:9c:09:e4:bd:3a:a0:90:0f:71:f0:31:7e:0c:5a:
8c:36:eb:41:a8:88:c0:c7:a1:1f:a6:a0:03:29:dd:c2:34:6a:
e1:28:b0:e3:1e:c5:0f:88:13:44:42:56:7f:d4:1d:90:f3:d7:
64:37:1d:d0:81:d8:9f:ad:6e:18:45:df:10:c5:99:b8:4f:fc:
99:47:ef:61:b0:ed:90:19:66:b2:0a:d4:a6:23:35:30:e8:c8:
8c:5b:37:39:e2:97:71:6a:22:3b:f2:c2:b4:0f:43:eb:d2:cb:
ae:78:25:30:c0:f2:c0:17:1a:ad:d0:72:1a:f6:ff:74:1d:fc:
67:d8:f4:9b:6b:48:19:e8:6e:c0:32:b4:c0:ce:77:64:9b:e3:
5e:5a:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:11 2023 by rpki-client on console-fra.rpki-client.org