Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/NPa7bS2OmmvQxn74af9ApHa6H1I.roa
File: NPa7bS2OmmvQxn74af9ApHa6H1I.roa (raw, json)
Hash identifier: SyOJlLKdcisrRr7ZX67JRmYrzDMM1cwW8ObFYFgUDp4=
Subject key identifier: 34:F6:BB:6D:2D:8E:9A:6B:D0:C6:7E:F8:69:FF:40:A4:76:BA:1F:52
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03FF1A1F
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/NPa7bS2OmmvQxn74af9ApHa6H1I.roa
Signing time: Fri 25 Mar 2022 14:50:17 +0000
ROA not before: Fri 25 Mar 2022 14:50:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.105.21.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67050015 (0x3ff1a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 25 14:50:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34f6bb6d2d8e9a6bd0c67ef869ff40a476ba1f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:66:28:a3:12:5a:5b:a5:67:d2:09:00:85:
3c:76:2d:7c:a0:56:ed:69:d5:8c:39:05:dc:83:0a:
d5:46:bb:63:fb:40:2c:66:c7:45:27:82:7e:a0:ed:
1f:46:86:66:e0:8d:80:a2:fe:ac:2e:20:cc:09:e3:
5c:31:9e:dc:50:30:d5:a0:d1:93:97:cb:b9:c9:7b:
15:71:c6:4e:92:53:a1:5b:0e:fb:f3:ff:e0:cd:0d:
62:26:eb:05:51:05:ce:f3:da:0d:f2:e7:86:c7:6a:
0a:9a:b1:15:83:6d:43:be:0f:f5:12:bc:c0:64:23:
90:eb:fb:83:f5:93:d5:3c:d4:f3:23:df:06:c3:03:
8a:dc:85:5f:73:a7:de:17:ba:ca:a1:ae:06:20:dc:
c0:f2:fe:98:a0:1d:b5:c7:5c:e1:ad:e8:72:4e:ab:
75:7a:81:27:ff:cd:fd:e2:30:ce:00:d9:f0:81:80:
c7:71:e0:17:29:c7:44:a6:70:60:c5:5c:ee:1b:1e:
d7:ad:3d:4a:87:7a:1e:f7:5d:b5:6c:75:4e:20:4c:
60:9f:49:e6:b5:3c:be:8f:62:f2:e6:44:bb:d1:e6:
06:39:f7:bb:46:55:73:17:c9:86:e3:88:4f:8a:23:
a4:85:c9:3f:ba:b4:1c:7b:50:53:4c:e0:8d:00:35:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:BB:6D:2D:8E:9A:6B:D0:C6:7E:F8:69:FF:40:A4:76:BA:1F:52
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/NPa7bS2OmmvQxn74af9ApHa6H1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.168.0/24
194.105.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4a:c1:6f:5d:44:2f:32:c0:ad:a5:a7:17:0f:2e:62:19:f8:
d2:60:b4:b8:c8:63:97:7d:08:ee:40:7a:14:a3:c6:03:60:d4:
53:6a:2c:c5:9e:8f:b0:e4:dc:a7:db:3f:56:62:e4:c7:a0:c2:
7c:17:e0:29:49:35:ab:44:e1:8c:b2:0a:5e:7f:4f:c9:c8:20:
3e:73:b6:a9:10:10:38:d7:d4:23:37:c7:ab:f5:96:aa:e1:5a:
e5:0a:39:c6:aa:6a:1e:bd:ce:ef:93:64:10:59:9c:24:3b:c3:
b1:c9:c5:2b:3a:4a:f6:ee:65:7e:b3:ab:70:c2:6e:d1:ff:2a:
4e:97:71:b6:a7:da:f7:65:ba:22:b6:06:c1:ce:4a:b3:b8:23:
b1:6d:ac:73:5f:0a:9e:7a:ee:2a:c3:90:66:22:b5:3b:7e:66:
00:2d:41:b7:18:59:b9:60:47:2e:e2:ff:d9:0c:99:e0:f7:57:
81:e2:18:45:ce:6d:00:5f:0c:b2:8d:7e:f0:93:a3:90:50:3d:
a5:8e:d7:58:f7:56:85:f8:ce:f9:e2:63:12:9a:37:9f:75:b1:
f4:c3:23:a0:af:55:bc:de:92:2c:38:99:87:c8:e0:a1:7c:06:
48:40:dc:8d:df:23:30:8f:52:9f:b5:eb:dc:3b:3c:34:b7:f8:
16:1e:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org