Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/C3E0B3MTI_NjFH7b7GOwGgJETjA.roa
File: C3E0B3MTI_NjFH7b7GOwGgJETjA.roa (raw, json)
Hash identifier: GBI+5iQml58YwAvoktD0Dzak2pmc2VOvBij4Uw3nR7E=
Subject key identifier: 0B:71:34:07:73:13:23:F3:63:14:7E:DB:EC:63:B0:1A:02:44:4E:30
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04ECA6DD
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/C3E0B3MTI_NjFH7b7GOwGgJETjA.roa
Signing time: Fri 17 Jun 2022 07:30:44 +0000
ROA not before: Fri 17 Jun 2022 07:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204721
IP address blocks: 91.199.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82618077 (0x4eca6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jun 17 07:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b713407731323f363147edbec63b01a02444e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:f7:08:5c:44:d6:51:1f:f7:44:b7:d7:84:
76:83:ff:f8:4e:08:3f:ba:6e:2a:89:90:27:9d:1a:
81:2e:90:12:ef:2b:c1:3d:e8:e9:23:8a:bd:df:77:
af:89:c9:c7:2c:fd:ae:d1:59:a7:19:80:2a:fc:1a:
af:ef:dd:bb:54:22:6f:7d:66:12:b2:85:de:e7:bf:
9a:6f:38:4a:03:1a:85:35:4c:e2:a2:9c:af:58:ce:
22:5f:d9:f1:cd:cb:0c:a6:b6:9a:c0:1c:a3:d8:2a:
2c:f5:67:64:1f:b9:17:4f:b1:8c:98:ab:40:9e:f7:
4a:04:8d:d0:12:b5:70:42:3c:9c:c4:39:48:4f:5f:
87:06:50:ee:e9:43:a4:7c:97:fe:8a:89:10:6f:10:
92:05:03:a1:f0:df:14:31:65:57:11:ce:1e:87:38:
57:83:2d:ab:f2:1e:23:6f:4e:76:d8:48:fd:1c:6d:
42:71:dc:3b:1e:72:ed:c6:9c:34:0b:f0:ec:e1:da:
0f:30:d6:e4:2e:be:11:c4:a7:44:07:99:9c:ce:03:
d4:7c:8a:e7:78:15:15:7d:50:a7:ee:c8:8b:1f:38:
61:96:37:12:ef:f4:3f:dc:fb:04:92:7d:f0:95:fe:
9c:70:3a:5f:2d:43:0d:5f:cf:8f:57:f4:76:3b:14:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:34:07:73:13:23:F3:63:14:7E:DB:EC:63:B0:1A:02:44:4E:30
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/C3E0B3MTI_NjFH7b7GOwGgJETjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.172.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a4:7e:2c:8a:b6:c4:57:6e:dd:bd:94:f5:51:f4:5c:e7:3f:
f6:ad:8c:e3:c4:4c:1e:af:06:6f:9f:97:d7:e0:23:3c:95:00:
da:89:02:6a:99:45:98:5e:b6:e6:c8:d1:a4:b8:14:5b:28:22:
44:f2:88:0d:1c:52:28:aa:22:3d:04:cb:a3:b4:24:db:6c:10:
ac:9e:8a:d9:d8:86:42:30:d9:1b:eb:09:09:1d:66:31:d0:60:
b0:d6:76:1e:a7:b1:a4:5b:c8:bd:74:c1:4a:00:6b:08:1b:35:
99:83:cd:0c:9e:dd:52:15:29:0d:14:e2:8c:aa:79:35:8f:d6:
19:b4:bc:30:82:b7:95:3e:30:da:a3:a1:7b:5a:48:3c:af:fb:
7f:97:24:b5:4a:3e:8f:41:6b:91:24:23:a8:5b:90:fa:8e:a1:
d8:7e:2e:f1:03:a6:f0:03:69:cd:93:d5:71:39:a5:0e:01:1b:
bb:16:cd:0a:94:50:9f:71:34:1a:e3:73:97:91:53:84:92:0d:
aa:92:5b:f2:96:3a:de:56:58:ad:0c:ec:6b:2d:3e:c4:15:87:
b3:8c:eb:74:8e:92:72:f9:7f:a8:54:6d:03:46:64:6b:e4:dd:
10:18:b0:5f:70:79:4c:6d:7c:8b:0e:e0:6c:97:a1:99:e0:f6:
4c:5d:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org