Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/J_YiJUfq_wxG6JtSMxeNcH7qpJg.roa
File: J_YiJUfq_wxG6JtSMxeNcH7qpJg.roa (raw, json)
Hash identifier: ccQ51YdUGfIOH0OMp0K6yB7GOJctIIBN+UH8iUP/M8I=
Subject key identifier: 27:F6:22:25:47:EA:FF:0C:46:E8:9B:52:33:17:8D:70:7E:EA:A4:98
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 047CD1AD
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/J_YiJUfq_wxG6JtSMxeNcH7qpJg.roa
Signing time: Mon 09 May 2022 09:49:01 +0000
ROA not before: Mon 09 May 2022 09:49:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140057
IP address blocks: 91.206.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75289005 (0x47cd1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 9 09:49:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27f6222547eaff0c46e89b5233178d707eeaa498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:51:43:51:03:1f:1e:5e:8a:3a:a5:44:23:
72:8e:00:79:01:1a:da:e0:20:3d:f9:09:7b:2a:5e:
b6:fd:bd:47:92:35:c2:01:0b:5a:0b:be:c1:ae:d4:
02:1f:86:18:a7:48:c0:5c:33:45:c6:19:56:a1:04:
da:68:96:0d:44:63:66:fa:3b:a1:53:02:4c:f2:53:
86:a8:6c:10:22:28:08:77:29:d8:b7:c5:37:ae:54:
c5:53:7f:d8:4b:3d:30:ea:bb:bb:4e:14:3f:18:62:
ed:d4:79:1c:9e:d8:2b:22:c6:ca:20:ff:39:cd:7f:
a1:0b:15:68:fe:a2:15:2d:17:50:1c:5a:b7:a5:31:
60:df:ea:63:d7:d6:af:dd:27:50:ed:6e:31:fd:42:
cf:14:f3:a2:f8:90:fd:9e:bd:f0:db:dc:5c:14:73:
34:40:78:47:3e:95:ab:96:e3:0b:6a:20:6a:d7:7c:
b7:57:ad:d1:b5:92:fb:f7:ef:c8:19:b6:95:f7:73:
9e:ac:24:8c:bc:3e:23:dc:32:1e:56:8f:23:2c:65:
fc:e7:ef:c8:6d:82:54:e3:65:aa:11:1f:5b:e4:3e:
a2:bd:1f:e7:87:98:40:e3:68:d1:e7:fa:42:62:1b:
15:28:86:58:91:a7:75:dc:7e:0f:9e:1d:dc:ab:06:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:22:25:47:EA:FF:0C:46:E8:9B:52:33:17:8D:70:7E:EA:A4:98
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/J_YiJUfq_wxG6JtSMxeNcH7qpJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c9:f7:f5:44:72:5c:7f:eb:31:10:d7:11:04:38:68:87:10:
01:f7:70:a7:3d:50:6f:d1:43:32:2f:3a:99:de:bb:70:70:a8:
6d:8f:eb:29:d4:2f:e0:8b:d4:f6:82:d6:a0:9c:4f:cc:29:e9:
80:81:7c:23:20:9a:a2:47:8c:70:2f:97:cd:2f:43:7c:5e:0a:
e7:b3:bb:99:bf:b4:da:53:f9:e8:bd:9a:41:3c:96:09:97:99:
eb:82:dd:80:01:30:b7:27:c4:fe:b1:72:f1:35:43:b2:9b:38:
74:08:d1:7f:25:34:79:20:83:68:71:65:fa:b2:a6:15:84:7c:
37:a0:0d:75:dc:b4:4d:7a:4f:08:d5:93:49:36:ab:43:cf:c1:
19:52:aa:99:90:07:5c:4a:a4:99:90:2f:9f:0d:7f:89:07:b2:
0a:a4:70:b9:6d:af:b4:3f:f3:69:f5:c0:fc:38:58:e8:01:7d:
38:97:b7:23:d4:ae:cc:56:d3:6f:79:0c:12:76:b5:b8:84:6b:
96:95:51:73:72:c9:0b:2c:36:d5:b4:05:56:ce:02:de:9b:96:
fa:4a:ee:af:91:b5:00:0c:87:4c:a7:21:63:5a:b5:63:16:f6:
6a:4d:13:99:56:65:8e:d0:0f:e5:d8:07:be:86:f3:d9:34:8d:
8b:e5:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org