Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9f1909-2190-4c1e-b74d-f0aa454f204a/1/h-Lc1tsOEO-d5IR7YpeEutRBs8k.roa
File: h-Lc1tsOEO-d5IR7YpeEutRBs8k.roa (raw, json)
Hash identifier: J2UPtgWXmq6RwSp/wD2u2Av9uKA/GOeWjyfamEKjQbk=
Subject key identifier: 87:E2:DC:D6:DB:0E:10:EF:9D:E4:84:7B:62:97:84:BA:D4:41:B3:C9
Certificate issuer: /CN=542c9e90e8ed1919c941fd6a2538e9f12021f372
Certificate serial: 0181F465173ECC296D784A79CEF77AA6AA26
Authority key identifier: 54:2C:9E:90:E8:ED:19:19:C9:41:FD:6A:25:38:E9:F1:20:21:F3:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCyekOjtGRnJQf1qJTjp8SAh83I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9f1909-2190-4c1e-b74d-f0aa454f204a/1/h-Lc1tsOEO-d5IR7YpeEutRBs8k.roa
Signing time: Tue 12 Jul 2022 21:51:14 +0000
ROA not before: Tue 12 Jul 2022 21:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:17:3e:cc:29:6d:78:4a:79:ce:f7:7a:a6:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542c9e90e8ed1919c941fd6a2538e9f12021f372
Validity
Not Before: Jul 12 21:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87e2dcd6db0e10ef9de4847b629784bad441b3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:8f:3a:60:a8:78:48:64:26:ea:4a:cc:fd:
16:c6:b1:7e:fe:6e:1c:81:1f:ca:db:1b:c5:1e:03:
59:5e:15:a5:9d:c4:da:dd:f4:87:c7:2e:56:ec:66:
92:a4:0e:8a:f3:41:57:41:53:49:03:43:30:11:e3:
b2:bc:eb:6d:8b:67:e9:39:70:85:33:dd:e6:be:cb:
93:7b:78:83:95:5f:ac:de:2b:99:17:75:b3:48:03:
35:b4:47:30:94:a6:45:03:46:90:d7:36:85:e5:6c:
af:9d:60:6d:62:c8:96:3c:00:ea:54:54:09:6a:9e:
e6:27:1e:c7:d6:e9:cf:15:86:88:b2:8f:01:46:28:
40:d9:6c:52:2b:48:98:20:32:ed:49:bb:32:de:12:
32:b4:85:b7:63:44:2a:ab:97:28:6c:aa:19:64:26:
55:fd:ad:a5:06:d2:79:60:5a:69:e2:8a:83:68:54:
8f:de:c2:43:f9:9f:9f:0d:54:7b:35:33:56:cc:00:
ce:46:1b:f2:3b:65:c6:15:a1:10:3e:8e:0d:22:34:
5c:e0:78:08:3e:28:79:55:3b:2a:5a:b3:11:25:b8:
63:62:4a:64:1e:a4:43:ce:df:37:e3:93:d8:f2:5c:
06:90:e4:54:48:84:98:97:7b:6e:80:de:8c:0d:76:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E2:DC:D6:DB:0E:10:EF:9D:E4:84:7B:62:97:84:BA:D4:41:B3:C9
X509v3 Authority Key Identifier:
keyid:54:2C:9E:90:E8:ED:19:19:C9:41:FD:6A:25:38:E9:F1:20:21:F3:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCyekOjtGRnJQf1qJTjp8SAh83I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9f1909-2190-4c1e-b74d-f0aa454f204a/1/h-Lc1tsOEO-d5IR7YpeEutRBs8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9f1909-2190-4c1e-b74d-f0aa454f204a/1/VCyekOjtGRnJQf1qJTjp8SAh83I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.238.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:df:01:3c:20:cb:8a:38:4f:5c:db:6f:fb:50:38:b3:a6:4e:
1f:73:13:1f:22:19:38:f3:9a:be:12:a5:f2:fa:2c:65:fd:af:
61:41:a5:3a:fe:c2:69:71:52:d3:2f:45:9a:4b:23:dc:5d:13:
bd:78:dc:9f:20:dd:9c:ad:97:00:f1:2f:04:9c:8d:a6:84:39:
4b:10:9c:fd:bd:c4:b6:7a:ae:af:10:c7:36:4a:65:f7:87:34:
1a:ad:7f:96:e4:8e:dc:48:bb:ee:0c:0d:cd:45:0c:9d:34:85:
bc:96:cb:31:62:9d:27:ce:f5:dd:45:9b:2e:9d:0b:c3:0a:f8:
31:84:04:7b:fb:9e:6f:8c:de:20:50:9f:34:c4:ee:98:a1:84:
dc:4a:43:b1:90:00:59:80:35:6e:7e:42:1c:fa:7d:63:fd:11:
01:56:d9:67:46:c4:84:83:98:41:a9:16:d7:92:9d:f5:48:09:
e9:ae:a4:2b:ca:2f:e4:91:bc:d3:a7:f4:ab:d5:3f:5c:ba:7e:
c5:25:5c:95:af:da:5f:88:57:68:a9:f0:de:32:d5:55:8c:99:
d3:a2:e7:7f:55:e4:d4:ca:b1:23:a9:58:d2:5c:11:fb:d0:21:
07:2d:35:bb:4e:b8:97:de:1a:27:1b:e8:58:57:b7:af:5b:c4:
7f:46:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:14 2024 by rpki-client on console-ams.rpki-client.org