Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/pRkqTj0c7LUXTrlEHKkCrc2OL6k.roa
File: pRkqTj0c7LUXTrlEHKkCrc2OL6k.roa (raw, json)
Hash identifier: 1cRkbD+yvkq/n8P4W1l9K5oLPthqW8t+WW7h76tBE+0=
Subject key identifier: A5:19:2A:4E:3D:1C:EC:B5:17:4E:B9:44:1C:A9:02:AD:CD:8E:2F:A9
Certificate issuer: /CN=99f6d817186ac902829802cc8deff5b84c63718e
Certificate serial: 01856C010CE2970D1DC74BF34B582EE47E02
Authority key identifier: 99:F6:D8:17:18:6A:C9:02:82:98:02:CC:8D:EF:F5:B8:4C:63:71:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfbYFxhqyQKCmALMje_1uExjcY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/pRkqTj0c7LUXTrlEHKkCrc2OL6k.roa
Signing time: Sun 01 Jan 2023 06:24:46 +0000
ROA not before: Sun 01 Jan 2023 06:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.246.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:0c:e2:97:0d:1d:c7:4b:f3:4b:58:2e:e4:7e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6d817186ac902829802cc8deff5b84c63718e
Validity
Not Before: Jan 1 06:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5192a4e3d1cecb5174eb9441ca902adcd8e2fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:5c:2b:f6:c1:59:a3:86:b9:18:d4:3f:0f:
29:1b:49:e6:95:05:61:8e:80:72:86:3c:e5:ce:d9:
d2:4a:d6:b9:73:f3:f6:e3:09:18:91:12:91:21:5f:
f7:a6:69:4e:c6:c1:8d:38:2f:af:78:ef:83:7b:df:
2b:84:5e:75:fd:ed:0b:82:00:6e:99:de:f6:72:45:
47:b3:d3:ae:84:6a:29:2e:18:64:91:25:ae:84:f1:
1e:54:c4:7c:e7:85:80:49:0f:f6:24:37:a3:a7:32:
1e:54:f7:0a:d5:d2:f4:e6:a1:1a:87:2e:46:01:1d:
7c:f7:a9:d5:a4:c9:6c:b3:e2:21:21:0c:7b:5f:cf:
4a:45:43:9e:f7:78:04:bc:22:33:4f:0f:2d:e1:1d:
c7:9e:db:cb:ac:a4:9d:36:e3:50:30:ad:5b:c1:b9:
1a:78:44:d1:bb:7a:19:43:4b:fd:43:65:5d:81:c9:
14:03:96:fb:00:8a:5b:b2:f9:d5:2b:5e:f0:eb:30:
f9:2a:e3:72:6d:04:df:e4:52:83:f8:fc:4f:d0:31:
c5:12:67:8e:8a:de:ed:a6:50:71:78:f5:f1:2a:08:
43:57:28:09:ec:1a:bb:3d:2f:15:3f:a5:f7:b9:88:
82:4c:20:5e:4a:fe:4d:a3:03:1b:01:fa:a5:66:7a:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:19:2A:4E:3D:1C:EC:B5:17:4E:B9:44:1C:A9:02:AD:CD:8E:2F:A9
X509v3 Authority Key Identifier:
keyid:99:F6:D8:17:18:6A:C9:02:82:98:02:CC:8D:EF:F5:B8:4C:63:71:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfbYFxhqyQKCmALMje_1uExjcY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/pRkqTj0c7LUXTrlEHKkCrc2OL6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/mfbYFxhqyQKCmALMje_1uExjcY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.62.0/24
Signature Algorithm: sha256WithRSAEncryption
af:59:ff:d7:96:15:4f:85:26:bb:94:cf:ab:19:15:cc:9e:d4:
33:7c:7b:a1:19:f7:f7:8d:b4:87:9e:f9:1c:6d:6f:aa:cb:f3:
e5:cc:97:1f:e0:91:50:f0:bf:7a:03:ed:f9:df:5c:61:d1:17:
de:56:ed:b3:e0:42:f4:cb:01:cc:c6:87:c9:21:62:b7:dc:88:
14:d1:a6:91:7c:5c:52:3d:a9:0d:59:fe:a6:33:77:83:45:f4:
32:e1:bb:bb:53:6a:27:77:65:1b:e0:02:45:68:aa:ed:dc:00:
a5:fb:83:3c:41:ac:09:52:b5:30:b1:a5:e0:2a:85:e4:83:4f:
92:b0:67:ce:61:24:8f:42:a7:60:07:1b:d9:cc:85:9b:ec:92:
f2:cc:3c:3c:22:62:e8:6f:b3:f7:28:d9:88:a9:53:a2:7b:41:
15:2a:34:15:b4:95:34:1d:bc:36:f1:fb:63:e1:52:67:0e:b0:
c2:a2:5c:d8:e2:27:bb:7d:09:31:26:18:e9:f6:8e:50:62:c3:
d8:7f:58:51:5f:08:90:45:a0:ac:d7:2d:8e:d0:23:e0:80:13:
34:d7:a8:48:49:e2:28:8f:41:f2:c7:ea:39:91:78:cf:f7:53:
91:5a:07:51:5f:87:6b:ae:7a:5a:18:7b:dd:4e:ca:6b:87:f3:
a8:19:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:29 2024 by rpki-client on console-ams.rpki-client.org