Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e5582-b3dd-401e-995e-34b4791c237b/1/vOgjGQsyXsTOYGMLKwsJngs49PA.roa
File: vOgjGQsyXsTOYGMLKwsJngs49PA.roa (raw, json)
Hash identifier: +9SdnA30BUkoPl/fCbGRZ5QFVp3p0rVdTqUXjQDs5BY=
Subject key identifier: BC:E8:23:19:0B:32:5E:C4:CE:60:63:0B:2B:0B:09:9E:0B:38:F4:F0
Certificate issuer: /CN=fb628595b3d7fc465b77b93b2d2e072f4ff7403d
Certificate serial: 01856DCAE948D4FA667C867B63DFF31ED0AE
Authority key identifier: FB:62:85:95:B3:D7:FC:46:5B:77:B9:3B:2D:2E:07:2F:4F:F7:40:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2KFlbPX_EZbd7k7LS4HL0_3QD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e5582-b3dd-401e-995e-34b4791c237b/1/vOgjGQsyXsTOYGMLKwsJngs49PA.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e9:48:d4:fa:66:7c:86:7b:63:df:f3:1e:d0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb628595b3d7fc465b77b93b2d2e072f4ff7403d
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bce823190b325ec4ce60630b2b0b099e0b38f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:4f:b1:aa:cc:36:ea:02:88:d5:e5:6d:e8:
b5:a8:b5:e8:0c:3a:64:e0:c7:f0:26:43:44:24:65:
6b:b1:33:c8:56:89:00:b1:32:6a:6a:16:15:62:0c:
dc:cb:7b:b3:ab:1c:c7:d4:96:63:9c:c9:b8:c8:10:
be:1b:fb:7f:c9:2e:f1:b6:cb:04:47:64:b7:73:f1:
d7:64:7f:8f:fa:83:e4:11:72:a5:27:e4:bb:e5:eb:
c3:c8:f9:ef:0b:bc:fa:9f:c3:e2:b1:22:5e:44:a9:
5a:d5:7a:3e:41:d7:8e:0b:2d:0d:1d:e4:d3:dd:b7:
b2:0c:dd:bd:b2:0d:50:cc:2b:61:76:a9:4c:6c:53:
ff:d5:03:4c:7c:ce:49:d9:50:dc:a9:30:5a:ba:a7:
ce:d3:d3:21:b6:55:be:22:49:74:a1:f9:3b:ab:82:
f1:de:0f:51:70:21:f3:94:2e:7c:5e:e4:1d:00:0b:
a2:08:d5:61:1b:7d:2a:5d:8d:eb:ec:5e:e3:ca:81:
24:30:12:3a:cf:e8:0d:54:b5:54:aa:da:21:e5:31:
54:3a:d5:51:28:e8:1d:6d:3c:df:d6:dc:1f:0e:1a:
e1:17:9c:6b:6a:75:e5:16:e3:bf:e8:1d:34:fe:04:
a9:e2:05:34:19:03:3e:e7:64:d1:a4:29:19:6f:8c:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E8:23:19:0B:32:5E:C4:CE:60:63:0B:2B:0B:09:9E:0B:38:F4:F0
X509v3 Authority Key Identifier:
keyid:FB:62:85:95:B3:D7:FC:46:5B:77:B9:3B:2D:2E:07:2F:4F:F7:40:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2KFlbPX_EZbd7k7LS4HL0_3QD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e5582-b3dd-401e-995e-34b4791c237b/1/vOgjGQsyXsTOYGMLKwsJngs49PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e5582-b3dd-401e-995e-34b4791c237b/1/1-2KFlbPX_EZbd7k7LS4HL0_3QD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:39:7f:26:35:ec:80:b3:b3:f4:84:85:e0:43:02:72:e3:c8:
ae:13:4b:1e:18:a4:d4:d0:b5:42:ec:49:76:b3:ff:2a:24:82:
63:4d:7f:0d:85:2f:4b:1b:b4:fb:26:35:5a:b5:4a:73:85:25:
02:00:d2:3e:97:bd:a4:3c:37:ae:73:ba:0c:da:25:46:a9:08:
bc:e4:87:c6:fe:91:54:74:df:d8:2d:19:d4:31:bb:12:55:3f:
7d:57:6e:02:51:2a:e9:61:28:1e:3c:17:01:12:63:c4:8e:30:
e8:13:5a:b3:aa:2a:78:4e:8d:54:98:35:ac:99:f8:01:66:2e:
12:f2:f4:70:34:c3:7a:2d:fe:e6:a4:24:37:7c:ca:b0:45:8f:
d8:7e:a5:cd:01:8d:b9:56:9b:ab:a6:d2:25:a2:d0:de:f5:f9:
d6:67:33:f8:8e:fd:ea:f2:f1:33:73:19:78:f9:e1:9a:2c:4d:
ac:4a:8b:b2:0c:58:c5:15:ea:67:73:aa:ab:f5:fe:1b:b2:47:
5a:9f:a1:15:dc:3e:4a:6a:66:f9:ef:ab:bd:19:88:63:1d:aa:
8f:5c:29:a8:74:41:d1:3a:2f:bd:04:d5:6c:23:17:ef:07:45:
18:c6:3c:ab:6e:bb:3e:7d:71:d0:76:35:4e:c7:3a:72:53:2e:
75:50:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 15:00:10 2023 by rpki-client on console-ams.rpki-client.org