Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b03f7b-7e71-436d-9a25-c987d935d603/1/aezv9uwG5h-TKkJaIoaNk-H3oZA.roa
File: aezv9uwG5h-TKkJaIoaNk-H3oZA.roa (raw, json)
Hash identifier: nr/Lf5iOvhcGH0PnF+eofrER0ND98n547mNJ2b8cLrg=
Subject key identifier: 69:EC:EF:F6:EC:06:E6:1F:93:2A:42:5A:22:86:8D:93:E1:F7:A1:90
Certificate issuer: /CN=0f838e340904bb939ec4394cb543698dac80cc01
Certificate serial: 01882086786CE176E5B9D55957C50874289B
Authority key identifier: 0F:83:8E:34:09:04:BB:93:9E:C4:39:4C:B5:43:69:8D:AC:80:CC:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4OONAkEu5OexDlMtUNpjayAzAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b03f7b-7e71-436d-9a25-c987d935d603/1/aezv9uwG5h-TKkJaIoaNk-H3oZA.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 91.246.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:78:6c:e1:76:e5:b9:d5:59:57:c5:08:74:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f838e340904bb939ec4394cb543698dac80cc01
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69eceff6ec06e61f932a425a22868d93e1f7a190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:5b:59:83:2a:00:d4:42:34:93:3d:ad:8f:
5c:aa:86:69:d5:cb:ec:80:5c:b6:3e:05:63:7d:b0:
32:10:76:10:da:f8:d8:23:29:a1:32:d6:da:a2:f2:
06:6b:5c:d8:58:c9:42:3e:dd:b9:08:40:4b:50:56:
4a:62:72:9c:31:75:fd:a3:a6:63:a0:45:70:67:4c:
89:cd:8e:68:b7:42:c1:a2:62:4d:5b:40:d1:11:a1:
b2:95:92:61:0d:72:77:59:47:e5:65:8c:7b:c5:19:
08:2f:b6:74:6a:cb:91:b8:fa:4d:be:79:55:f0:f3:
b6:37:a2:cc:cd:ae:0a:b3:f4:7c:bf:81:c5:df:79:
75:56:37:80:72:e1:99:5e:2f:b6:b6:f0:47:33:70:
ec:ac:d3:23:ee:44:5b:4e:90:23:3e:79:2a:f3:00:
f7:ee:9d:e7:dc:c2:23:f6:51:87:29:e9:b0:6d:d5:
68:e6:9d:dc:92:b4:ac:15:16:c0:c5:d8:d0:50:17:
c6:c9:7b:8f:44:ec:27:3e:16:2e:34:27:9a:c2:75:
99:6e:a4:42:31:78:f3:b0:10:dc:21:3e:df:1d:aa:
ba:0f:b2:ea:88:7a:0b:d9:69:c5:c7:7e:1b:1a:af:
1a:3d:97:fe:03:90:3d:2f:28:59:b6:3f:6b:4e:62:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:EF:F6:EC:06:E6:1F:93:2A:42:5A:22:86:8D:93:E1:F7:A1:90
X509v3 Authority Key Identifier:
keyid:0F:83:8E:34:09:04:BB:93:9E:C4:39:4C:B5:43:69:8D:AC:80:CC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4OONAkEu5OexDlMtUNpjayAzAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b03f7b-7e71-436d-9a25-c987d935d603/1/aezv9uwG5h-TKkJaIoaNk-H3oZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b03f7b-7e71-436d-9a25-c987d935d603/1/D4OONAkEu5OexDlMtUNpjayAzAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c4:1f:1e:ec:79:a3:38:67:0c:69:c8:51:c5:ce:b6:4c:b5:
06:3c:e2:00:5e:83:f4:71:ff:34:4e:7a:0d:b7:37:a1:3b:3e:
bf:84:98:27:7c:f3:74:76:98:61:ee:b2:7f:bc:94:63:87:bd:
26:c3:9a:6f:6c:8d:6c:a0:42:f6:2d:0a:ef:be:6a:4d:22:ca:
54:c4:29:ff:68:8d:f1:a5:e1:cd:72:da:c2:b4:1f:5c:10:83:
e5:e4:63:d2:a2:e3:0b:d8:16:6e:5c:fb:38:f7:71:bb:99:a9:
7f:44:a6:fa:a0:a7:ed:36:db:fc:6a:7a:a0:37:ad:37:36:07:
eb:c0:ab:d9:02:41:0a:eb:bf:30:a9:11:71:38:a6:30:4d:1d:
5a:42:4d:96:aa:0d:63:78:08:8f:cf:d7:5f:e2:46:4c:9b:56:
fa:3b:42:5b:dc:fb:3d:0f:41:27:fb:2c:2e:4a:ce:0a:53:a8:
b4:b5:34:a0:af:d1:88:21:f9:80:db:06:1f:dc:95:d0:5c:ba:
97:f8:d8:50:c6:86:08:dc:b8:b1:63:b0:39:c3:ae:99:d9:dc:
da:46:c2:e5:f8:d6:36:84:ba:e2:4b:f7:d6:68:ce:97:73:1f:
76:b2:68:1d:1f:7a:15:73:ec:aa:45:ab:91:0a:80:4a:49:09:
19:de:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 15:54:06 2023 by rpki-client on console-fra.rpki-client.org