Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Axe6JxK0V8D8cA3vxndGCF-xmg8.roa
File: Axe6JxK0V8D8cA3vxndGCF-xmg8.roa (raw, json)
Hash identifier: QHbVcxdxXFjf7rTTpNjtjMWb4C5DufjDwYZJXPArBaQ=
Subject key identifier: 03:17:BA:27:12:B4:57:C0:FC:70:0D:EF:C6:77:46:08:5F:B1:9A:0F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0473A5EA
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Axe6JxK0V8D8cA3vxndGCF-xmg8.roa
Signing time: Fri 06 May 2022 11:02:25 +0000
ROA not before: Fri 06 May 2022 11:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 91.198.66.0/24 maxlen: 24
147.78.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74687978 (0x473a5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 6 11:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0317ba2712b457c0fc700defc67746085fb19a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:c2:01:32:3a:0d:b3:ef:07:0e:af:76:6d:
e9:25:1b:8f:5a:1e:e9:2f:9c:0a:f7:6d:0f:ac:53:
cc:58:96:3a:92:86:1d:de:21:e9:cc:d3:24:0b:c1:
95:e1:07:86:63:72:ca:94:a8:c2:b7:41:08:8c:b6:
11:4f:0a:54:3e:27:f6:44:4d:e7:92:e8:ab:fd:45:
7e:23:0b:ae:d5:bf:d7:ae:76:83:64:b1:80:b4:c4:
7b:4f:7c:8f:ac:37:ae:63:4c:b2:90:f9:53:3a:37:
08:c3:26:4d:21:cc:e5:f3:45:28:0b:9c:51:2c:01:
2c:dd:31:bd:b5:d4:63:73:b5:8a:85:cc:46:a2:06:
31:62:58:52:d5:85:f8:99:fb:4b:55:16:72:3f:d0:
aa:91:2c:9b:ad:9c:c0:86:79:4e:66:d6:18:11:58:
06:54:16:bc:97:0d:ef:7f:28:83:a3:5a:12:58:74:
34:1b:8b:68:6e:62:fa:47:3c:7c:25:dc:15:42:4f:
43:00:f7:f3:06:70:fe:c5:df:7e:4c:3c:1d:c1:6e:
d9:28:8e:e0:dd:23:c4:d1:5a:ac:60:b7:2a:19:9e:
3d:7d:8b:11:e0:5a:dd:9e:32:87:2f:be:4a:cb:f7:
9f:f5:ab:b7:b7:f1:e4:8d:cf:af:42:aa:c3:eb:2c:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:BA:27:12:B4:57:C0:FC:70:0D:EF:C6:77:46:08:5F:B1:9A:0F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Axe6JxK0V8D8cA3vxndGCF-xmg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.66.0/24
147.78.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:13:b6:97:7c:c6:9c:51:83:e0:12:3c:a3:34:11:47:4b:66:
45:61:a0:d6:67:4b:df:08:80:41:30:26:bf:45:7c:1e:30:78:
2f:dd:80:ee:29:b6:ce:a5:60:fc:12:ec:b8:24:0c:9b:76:01:
96:5c:9a:73:d4:1f:77:47:52:94:b1:03:c1:dc:29:f2:df:e5:
a7:d5:ba:d0:78:37:6e:7c:af:21:cc:33:5b:9a:de:2e:5d:58:
bd:a3:a0:d6:98:7b:a8:78:d5:1d:cf:2e:0c:f9:4a:d8:91:a5:
7d:0f:8d:24:88:f1:4a:67:0c:f8:0e:a1:e5:4b:7b:be:33:5d:
68:14:a9:fc:68:f2:46:a0:07:d4:cb:90:c5:b0:64:f0:19:87:
18:b3:e8:7e:63:85:94:dd:d3:ed:5c:e4:24:e8:23:61:4e:f5:
42:a6:e2:91:93:b6:d9:40:41:89:76:12:01:da:33:63:55:2f:
6c:98:31:07:48:25:9b:18:4c:17:a8:36:c3:57:7a:83:70:2b:
14:ca:c3:f7:64:48:38:d9:f1:7d:44:d7:a1:f5:af:f2:a5:26:
9d:b6:ab:41:aa:ad:53:fb:08:e7:6e:e9:fc:88:e9:bb:b1:37:
6b:4b:c6:cb:fc:08:72:4c:dd:cf:7e:66:73:95:2c:33:15:f8:
3f:30:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org