Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0e1391-0678-4b7e-b3e9-5a71bcd27ad2/1/kZYngNBoAbuYq384phnydonvvyk.roa
File: kZYngNBoAbuYq384phnydonvvyk.roa (raw, json)
Hash identifier: Iraajmggvzp/7nvoiCr6dgrDvat0S7dY5KneIgrdRfo=
Subject key identifier: 91:96:27:80:D0:68:01:BB:98:AB:7F:38:A6:19:F2:76:89:EF:BF:29
Certificate issuer: /CN=f9565cd231e1881c3f14638c5b744a287f1ec208
Certificate serial: 0185711E303053E344B43770991057A899B2
Authority key identifier: F9:56:5C:D2:31:E1:88:1C:3F:14:63:8C:5B:74:4A:28:7F:1E:C2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VZc0jHhiBw_FGOMW3RKKH8ewgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0e1391-0678-4b7e-b3e9-5a71bcd27ad2/1/kZYngNBoAbuYq384phnydonvvyk.roa
Signing time: Mon 02 Jan 2023 06:14:41 +0000
ROA not before: Mon 02 Jan 2023 06:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51688
IP address blocks: 91.220.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:30:30:53:e3:44:b4:37:70:99:10:57:a8:99:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9565cd231e1881c3f14638c5b744a287f1ec208
Validity
Not Before: Jan 2 06:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91962780d06801bb98ab7f38a619f27689efbf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:cd:d3:ea:31:4b:d9:c8:a6:34:ef:3b:a1:
f3:b1:40:67:8e:43:58:1e:f3:ae:d2:56:74:cb:37:
55:b0:6e:2c:0c:2d:12:fb:7f:17:8b:d4:94:23:5f:
d2:37:9e:41:70:10:9a:e8:82:20:87:b8:c1:a2:eb:
1b:c6:82:9d:ae:23:bc:e4:cf:9e:5c:be:6d:9b:0b:
e9:de:4b:87:e5:0c:5a:60:23:b1:91:f3:24:be:80:
29:bf:fc:ea:1a:58:dd:8d:6c:04:90:a3:4f:03:ed:
4b:99:01:e9:89:b0:58:13:be:4c:75:31:af:3d:94:
2f:e4:9b:f4:65:eb:c9:33:73:50:a3:c4:2f:95:c3:
01:39:e7:16:78:e0:d8:cd:fd:87:53:6b:1e:a5:01:
4b:40:08:1b:8e:e0:f8:2e:ba:d3:5f:40:10:9d:4a:
95:80:e2:c2:ef:f6:46:fa:bb:6d:33:57:e6:ee:84:
aa:b7:a9:ff:de:b7:67:c1:4f:5f:02:25:1c:b4:6b:
08:1a:2b:20:33:7b:20:40:89:7f:af:c4:50:9a:25:
10:52:32:b2:f4:03:76:91:41:71:28:4f:ee:ad:1a:
78:aa:d7:db:1f:a3:59:2e:31:59:83:a5:20:e1:25:
0c:d4:21:5d:66:7f:0d:7a:bd:ae:8b:23:16:34:b0:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:96:27:80:D0:68:01:BB:98:AB:7F:38:A6:19:F2:76:89:EF:BF:29
X509v3 Authority Key Identifier:
keyid:F9:56:5C:D2:31:E1:88:1C:3F:14:63:8C:5B:74:4A:28:7F:1E:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VZc0jHhiBw_FGOMW3RKKH8ewgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0e1391-0678-4b7e-b3e9-5a71bcd27ad2/1/kZYngNBoAbuYq384phnydonvvyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0e1391-0678-4b7e-b3e9-5a71bcd27ad2/1/1-VZc0jHhiBw_FGOMW3RKKH8ewgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.40.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1d:4b:49:37:22:d4:01:72:af:71:ce:0b:bf:02:4c:ce:b8:
7a:4f:43:18:1e:3d:3a:b8:bf:de:75:57:2e:57:7e:2b:94:d7:
6e:3a:50:e2:dd:d6:a8:bc:36:38:8f:b2:02:71:d6:f8:b9:d3:
b7:c0:21:48:4c:09:0d:80:29:60:a9:ff:91:1f:83:80:8e:cd:
82:29:27:9c:0b:03:3d:6d:1f:41:5f:38:08:0e:22:83:b4:2e:
ba:cc:2e:0e:91:c2:80:28:78:92:de:39:44:4b:c3:40:1c:ec:
cd:ed:82:bf:66:ee:b4:a7:19:a3:fc:35:f4:d6:b5:47:09:86:
42:a4:c8:b1:a7:64:07:a6:41:9f:32:98:e6:28:3e:52:56:62:
bb:9b:79:dd:98:39:f4:95:14:9a:6a:17:87:cd:f1:eb:03:25:
04:0c:e3:2e:9d:64:50:22:76:c0:de:c0:a4:a7:f6:64:78:03:
ed:3a:22:f4:41:e2:62:18:76:f4:14:36:c6:48:ea:8e:87:66:
07:3a:18:40:31:ad:09:a2:b9:3b:9c:68:f6:fc:b7:fd:ef:b5:
3d:b5:79:09:bb:34:e5:8e:25:1c:0b:51:e2:06:9f:42:84:0d:
53:46:e1:df:55:82:a5:c5:be:f1:28:fa:a6:4b:ca:51:94:40:
33:8a:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 06:57:28 2023 by rpki-client on console-ams.rpki-client.org