Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/CXjVC61_fQmGANQRZvphzN9gJF0.roa
File: CXjVC61_fQmGANQRZvphzN9gJF0.roa (raw, json)
Hash identifier: cxkVwi1K3nb+FftlEjZKU0Bn5ATO523RTlfRWnBo8ac=
Subject key identifier: 09:78:D5:0B:AD:7F:7D:09:86:00:D4:11:66:FA:61:CC:DF:60:24:5D
Certificate issuer: /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial: 01856D13E403DFF34A75B3120C6927304650
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/CXjVC61_fQmGANQRZvphzN9gJF0.roa
Signing time: Sun 01 Jan 2023 11:24:58 +0000
ROA not before: Sun 01 Jan 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47689
IP address blocks: 64.187.208.0/23 maxlen: 24
91.193.114.0/24 maxlen: 24
2a06:a340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:e4:03:df:f3:4a:75:b3:12:0c:69:27:30:46:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
Validity
Not Before: Jan 1 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0978d50bad7f7d098600d41166fa61ccdf60245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:3b:c2:a2:42:30:f8:7c:b3:27:e7:c9:ad:
5c:7a:de:a1:10:64:a7:3c:c3:ba:68:15:55:18:1f:
04:a1:a9:46:32:bc:a2:8a:7e:a9:ea:f5:3a:34:f2:
24:dc:cd:53:31:eb:f1:1b:b9:4f:e2:90:c9:0a:f2:
c6:d1:b7:78:be:5c:88:28:19:10:6e:ca:b7:f1:67:
ef:77:21:98:5a:17:21:f1:a3:30:9d:d3:fd:eb:0a:
bd:2e:35:94:54:14:fe:f8:72:eb:50:4a:ed:1e:db:
83:32:4d:04:88:c3:e1:ba:6f:2d:ec:53:dd:08:43:
28:5b:ee:7b:66:02:b8:83:3f:d3:23:34:8e:bb:42:
1a:05:7a:31:db:6b:5c:0a:6c:88:ab:fb:37:57:51:
ef:0f:f0:5a:50:ca:2a:53:b0:2c:d9:98:77:5b:1a:
88:7e:36:f9:79:e3:41:9b:f9:1d:ec:bc:57:26:25:
a8:ae:55:77:c1:d1:27:c3:cd:35:5b:6e:46:a3:cf:
f9:2c:35:f4:fa:66:b7:32:d3:49:d8:8b:ab:16:84:
be:bb:48:99:4e:b7:93:89:b3:24:6f:2c:27:f6:43:
76:91:71:db:be:5f:62:91:63:b9:dc:3e:be:51:3d:
c1:9d:a7:65:48:a4:73:be:db:88:cf:de:54:f1:c5:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:D5:0B:AD:7F:7D:09:86:00:D4:11:66:FA:61:CC:DF:60:24:5D
X509v3 Authority Key Identifier:
keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/CXjVC61_fQmGANQRZvphzN9gJF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
ac:0f:37:ec:59:17:2f:3b:5f:15:43:21:ac:24:4f:f5:83:0d:
0a:d4:bf:75:03:e7:93:fc:63:23:bc:9f:c6:3a:98:63:fa:5a:
32:1f:65:03:c7:28:22:54:7a:6c:8b:e3:03:e0:20:88:c2:a2:
52:4d:e0:68:ef:fd:12:24:40:72:f1:5e:40:87:4c:40:96:40:
74:06:8e:d5:0f:47:91:2b:b5:34:41:65:2a:3d:bd:3b:61:7a:
eb:a7:d1:98:1e:7d:2d:51:1a:06:9b:f8:81:ab:95:39:1b:07:
b4:90:f0:4a:4e:e5:1f:f6:4b:4f:2e:85:7e:85:6a:17:d5:25:
e9:12:6e:8a:41:4d:34:f3:14:18:3e:0f:80:f7:f8:f3:a7:40:
d0:a7:f6:9d:e8:08:b4:a2:be:92:98:0f:70:a9:b7:df:26:68:
fb:f1:f1:99:01:6d:89:84:4f:47:ef:77:c8:65:bc:3e:0a:0d:
b2:53:1a:ad:8f:61:45:e1:d0:7c:e7:c4:0d:fc:be:e8:28:cb:
f6:f9:f3:ae:4a:ab:2f:a2:9b:fc:51:85:74:a5:26:9d:f8:06:
0d:60:6b:f3:af:bc:75:1c:12:35:9e:04:a5:26:f7:12:73:4e:
d1:be:15:b0:3a:28:a6:4c:77:73:8a:0a:3c:22:1a:72:64:89:
84:60:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:07 2024 by rpki-client on console-ams.rpki-client.org