Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4b17a6-43c1-4e79-a81b-f5688468c048/1/VUN1_83zoZB1MeWEY_GQGGr2yr0.roa
File: VUN1_83zoZB1MeWEY_GQGGr2yr0.roa (raw, json)
Hash identifier: vXyer9OduOxzu29k00xqmfOnba7AHMVA0WzCgNa56t0=
Subject key identifier: 55:43:75:FF:CD:F3:A1:90:75:31:E5:84:63:F1:90:18:6A:F6:CA:BD
Certificate issuer: /CN=0c6816514565b93be255e087b9ba0b04832211c1
Certificate serial: 01856FC2558B50ABC61C63104D6DA1582DFB
Authority key identifier: 0C:68:16:51:45:65:B9:3B:E2:55:E0:87:B9:BA:0B:04:83:22:11:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgWUUVluTviVeCHuboLBIMiEcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4b17a6-43c1-4e79-a81b-f5688468c048/1/VUN1_83zoZB1MeWEY_GQGGr2yr0.roa
Signing time: Sun 01 Jan 2023 23:54:44 +0000
ROA not before: Sun 01 Jan 2023 23:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203684
IP address blocks: 91.199.9.0/24 maxlen: 24
91.199.18.0/24 maxlen: 24
91.199.30.0/24 maxlen: 24
91.199.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:55:8b:50:ab:c6:1c:63:10:4d:6d:a1:58:2d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6816514565b93be255e087b9ba0b04832211c1
Validity
Not Before: Jan 1 23:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554375ffcdf3a1907531e58463f190186af6cabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:8a:8b:79:ed:c4:15:f8:44:49:33:0a:aa:
29:ba:d7:c0:da:59:a6:72:1d:01:6c:86:7f:89:d7:
0d:52:8a:43:2a:b6:18:2e:f4:02:6a:f1:9d:e8:8e:
67:8e:97:aa:fa:08:25:f0:4f:a4:ab:8a:04:8f:0a:
57:2b:6f:03:3b:32:fc:d2:79:58:1a:96:d1:2f:3f:
a2:1a:55:ad:af:4f:d1:5e:60:69:81:af:cb:95:c9:
34:30:5b:4b:91:92:39:d2:f7:57:44:75:fe:ed:d5:
a3:cf:ad:29:02:ee:cc:b7:b7:96:ad:de:aa:9d:73:
91:b4:87:92:7c:a7:1f:6f:6e:f1:90:a0:49:c7:f0:
31:49:6c:97:4d:7d:54:e1:89:54:83:6c:2f:e0:14:
55:c2:d1:67:c7:95:bb:a5:38:8a:40:8c:b9:94:e0:
ad:9c:e1:54:da:1c:d0:90:6c:ec:dd:cd:6d:b5:d8:
f8:df:15:1d:de:19:e8:2f:86:dc:c7:01:3d:90:c7:
97:d3:bb:2f:55:04:aa:20:c7:88:92:d0:98:7d:84:
cd:36:b4:75:33:09:03:ac:7c:c3:99:a2:2d:95:88:
ae:24:c4:5d:24:3c:27:78:91:61:67:73:d9:5b:8c:
f9:f3:d6:9e:6c:40:f5:15:31:f1:cf:ad:ef:b3:a6:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:75:FF:CD:F3:A1:90:75:31:E5:84:63:F1:90:18:6A:F6:CA:BD
X509v3 Authority Key Identifier:
keyid:0C:68:16:51:45:65:B9:3B:E2:55:E0:87:B9:BA:0B:04:83:22:11:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgWUUVluTviVeCHuboLBIMiEcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4b17a6-43c1-4e79-a81b-f5688468c048/1/VUN1_83zoZB1MeWEY_GQGGr2yr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4b17a6-43c1-4e79-a81b-f5688468c048/1/DGgWUUVluTviVeCHuboLBIMiEcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.9.0/24
91.199.18.0/24
91.199.27.0/24
91.199.30.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fa:01:e4:2e:a6:b9:9c:10:f4:30:cd:dc:95:2f:77:57:0c:
59:6c:4e:44:2d:7c:12:73:ac:60:f3:76:ce:f7:39:14:69:62:
30:27:cc:9c:4d:fc:c4:4f:70:2a:9e:ff:1f:83:43:1c:14:6c:
a6:4e:be:1c:33:d2:04:29:8a:7e:eb:dc:68:42:56:30:54:f1:
ff:38:f2:b7:40:be:a2:9b:e5:b7:97:0c:44:df:be:bf:46:76:
e0:a7:1e:77:f1:eb:2d:d1:a3:84:95:56:ef:c9:69:b2:cf:fc:
51:92:6b:62:41:16:d2:eb:2f:0e:88:10:1e:f2:55:f2:41:b4:
8e:d3:8a:a4:5b:79:8a:9f:b8:c9:5c:04:86:d1:7e:f3:b9:d2:
22:cb:e2:fb:c7:01:23:13:b2:c5:91:87:59:15:23:f7:53:d8:
58:b3:e0:50:f3:28:19:ac:d0:3f:a5:87:ac:4a:68:ce:6f:ae:
88:76:a8:be:15:69:2b:ae:63:f6:8d:f2:1e:69:75:d2:88:c9:
5a:95:b5:77:e3:03:ba:09:1f:c2:4e:15:91:18:21:1d:f1:61:
92:eb:02:93:da:b1:bf:2b:3e:84:56:bf:ad:a1:3c:76:68:76:
9a:ba:b8:69:9d:a8:72:76:92:35:26:38:03:6c:7f:b3:65:5b:
15:b7:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 11:40:54 2023 by rpki-client on console-ams.rpki-client.org