Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/aDs1PRg3U1M4NZ2zw5HZhUgg6Hg.roa
File: aDs1PRg3U1M4NZ2zw5HZhUgg6Hg.roa (raw, json)
Hash identifier: dAkh+x2R9wILhisF7BSEoRPclDhrwluyEwTDpVP9F3U=
Subject key identifier: 68:3B:35:3D:18:37:53:53:38:35:9D:B3:C3:91:D9:85:48:20:E8:78
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03C1C722
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/aDs1PRg3U1M4NZ2zw5HZhUgg6Hg.roa
Signing time: Wed 02 Mar 2022 09:10:34 +0000
ROA not before: Wed 02 Mar 2022 09:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.199.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63031074 (0x3c1c722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 2 09:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=683b353d1837535338359db3c391d9854820e878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:13:ee:1c:6f:87:05:8a:52:ed:bb:64:f9:22:
9a:a5:5b:e3:9e:87:98:01:99:81:25:11:e3:e6:52:
c5:41:e4:0b:02:34:6d:45:d2:5a:ad:81:bd:7d:e5:
0c:4c:06:97:f2:04:1e:5e:3a:c5:17:0d:43:39:77:
36:b9:de:b3:70:7a:25:3f:5a:d8:6e:fb:3d:27:a8:
ab:6f:5f:f9:16:10:de:60:1a:96:cc:5c:b2:06:5d:
aa:09:3b:bc:e1:f9:3e:15:6b:08:ae:59:13:98:bb:
09:d5:bc:dc:38:71:09:1b:8d:6a:a1:2c:b2:c7:1e:
11:2e:8d:39:09:a6:a5:9b:1b:ae:b5:ac:e0:bc:64:
72:01:7a:64:b2:fe:b4:45:6f:02:ad:f3:18:48:fc:
73:91:ea:07:27:9b:09:3a:72:e7:23:dd:f2:95:c0:
4d:93:24:91:b0:be:f3:dd:58:fd:e4:3d:c3:99:37:
cb:5f:c0:da:51:3b:74:5c:49:a3:0c:4f:c1:ea:aa:
ee:90:5c:c5:53:14:26:a4:c9:32:d3:c6:3f:5a:f0:
2e:13:a7:63:05:b0:57:ce:a3:a2:72:14:24:2d:78:
b6:16:33:a3:0c:56:ec:21:6e:7f:6e:e3:f5:ab:7c:
37:ae:d4:66:c5:c3:f0:46:39:6a:5f:64:a9:a0:87:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3B:35:3D:18:37:53:53:38:35:9D:B3:C3:91:D9:85:48:20:E8:78
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/aDs1PRg3U1M4NZ2zw5HZhUgg6Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:08:24:df:5d:e8:46:79:f5:29:01:bb:15:bf:32:cd:53:ba:
7d:c7:fc:a8:1d:a7:fe:59:20:30:8d:39:cc:17:47:c5:82:9f:
c4:f9:2f:2b:f9:0e:2e:d8:0f:11:e8:f7:d8:17:38:27:d9:13:
80:87:c7:e0:e2:ea:56:d7:71:e7:49:3e:d2:5c:8a:55:0b:7f:
49:55:67:e9:83:e8:24:81:28:f9:ed:dd:fb:33:75:66:3f:79:
21:79:f8:e7:8c:9e:8e:34:ae:c9:a0:48:f6:e3:60:a3:3c:99:
57:ca:f0:a7:12:69:e8:d4:c1:d7:18:a8:45:68:18:64:5c:50:
f4:f9:5d:1a:f9:2f:f2:8f:7b:05:cd:31:3d:97:f5:a7:e5:a0:
43:a2:f3:43:e0:56:f4:54:42:9a:06:21:6c:53:3b:32:36:b1:
ed:cf:26:1f:5b:63:43:6d:da:4b:78:29:a8:71:f7:20:b4:cd:
f5:28:fc:92:85:8f:79:4f:10:39:33:42:a1:9b:5f:91:a9:a9:
51:59:ff:cb:77:d5:87:d5:ec:d4:eb:5f:50:0c:c4:38:82:13:
b5:54:80:57:d8:e4:54:58:23:e1:94:dc:9b:3a:d2:11:03:04:
4b:61:d4:4e:59:45:ad:52:32:83:9b:77:0a:67:e2:c1:88:64:
1f:b4:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org