Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UXYcAYbVj4FN3A0axa8F6fHv9x4.roa
File: UXYcAYbVj4FN3A0axa8F6fHv9x4.roa (raw, json)
Hash identifier: CJMB1A9lQfgoNTkdr6ze1TqcSrOsT+fByAKzmYeED50=
Subject key identifier: 51:76:1C:01:86:D5:8F:81:4D:DC:0D:1A:C5:AF:05:E9:F1:EF:F7:1E
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0316D0DC
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UXYcAYbVj4FN3A0axa8F6fHv9x4.roa
Signing time: Sat 01 Jan 2022 07:53:56 +0000
ROA not before: Sat 01 Jan 2022 07:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 91.199.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51826908 (0x316d0dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jan 1 07:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51761c0186d58f814ddc0d1ac5af05e9f1eff71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:cd:3b:b1:67:64:62:9c:a7:71:e4:f5:d1:
59:5a:8b:fb:d5:b9:01:b1:96:c9:b5:2a:69:a1:1a:
a6:34:27:10:73:a6:11:d9:2d:cb:0e:c6:e3:ac:98:
5e:d0:6f:0b:19:34:a4:8f:45:66:c6:5d:95:be:b1:
5c:68:b6:e5:b4:2a:c6:78:87:27:e6:72:48:38:46:
9a:0c:a7:64:77:46:62:62:79:f7:30:db:fc:67:43:
0f:ba:6d:69:b9:36:d4:74:48:48:32:8e:48:e6:16:
db:04:77:74:af:8c:79:b7:44:eb:97:37:b3:08:4d:
41:9b:1c:c1:b7:72:10:12:00:69:5c:22:46:ef:c3:
cb:7e:49:ae:de:a0:ea:f3:86:a1:62:3f:46:af:02:
f9:d0:1c:ba:a4:28:ea:62:45:45:70:ee:0f:a3:1d:
31:e2:b9:bb:90:f1:8e:ac:a5:79:1c:46:4e:b8:5d:
4e:6e:2d:ab:98:20:af:c0:1f:36:25:f9:2b:5d:2b:
9a:69:bd:07:d0:72:f7:86:e6:a6:cb:74:90:4d:a6:
67:ed:fc:da:8c:8e:21:35:93:a7:fe:14:9e:73:bd:
f5:a2:bb:a4:00:83:4f:e5:7b:2a:87:74:b0:a7:69:
ac:b9:ca:45:1e:19:66:d7:8f:a7:5f:d8:f1:ee:fa:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:76:1C:01:86:D5:8F:81:4D:DC:0D:1A:C5:AF:05:E9:F1:EF:F7:1E
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UXYcAYbVj4FN3A0axa8F6fHv9x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f8:89:83:41:94:d5:fb:8c:e2:0a:b0:55:48:4e:d2:96:84:
82:d0:e1:f0:78:40:e1:c5:85:6f:5b:d4:d1:f3:b2:59:8b:84:
8f:f9:7c:a2:84:88:d5:6a:15:e8:6f:95:13:b6:10:66:48:0d:
a0:dd:14:ca:bf:ac:1a:ce:af:6b:4e:ac:03:7d:e3:0c:b3:f0:
ca:f9:b3:de:3e:c8:74:fc:58:2d:10:e6:25:b1:b0:6c:cb:68:
e0:ef:b1:2b:93:7d:a7:ce:12:e2:1c:0a:6d:3c:40:52:b1:72:
a3:eb:76:2e:24:f5:15:e4:1c:eb:2c:9f:a4:20:49:7c:be:c6:
75:f3:b5:4e:f1:98:1c:44:2d:2c:f4:22:ef:b0:9a:0c:cb:b7:
c5:00:b2:35:bd:6c:48:a7:1b:ef:66:86:f0:3b:2f:34:09:a3:
be:ae:f8:29:37:90:c9:f9:f5:95:b0:8d:22:e7:f9:7c:db:2d:
48:8d:48:ff:5a:70:62:ea:c6:fe:68:ed:da:28:5b:f7:be:f7:
ca:cd:cb:40:36:16:ee:9b:4e:f3:c3:14:d9:2e:bb:cd:43:1f:
56:49:4f:80:27:40:ba:1f:a1:3a:30:91:d7:34:4e:fd:bc:fc:
d2:ef:bf:0f:e9:5b:93:20:47:36:f1:16:25:19:49:1e:39:de:
57:b6:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org