Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b2VDvaHX3G_K1vyHKfsPUvtoLpo.roa
File: b2VDvaHX3G_K1vyHKfsPUvtoLpo.roa (raw, json)
Hash identifier: 85lDUIZcq3S/FuOQyWKDUv6+B0ad+d9vfowGTKvRxo0=
Subject key identifier: 6F:65:43:BD:A1:D7:DC:6F:CA:D6:FC:87:29:FB:0F:52:FB:68:2E:9A
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183797898B776E6EEDB5A97AAAA5A116A92
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b2VDvaHX3G_K1vyHKfsPUvtoLpo.roa
Signing time: Mon 26 Sep 2022 11:04:49 +0000
ROA not before: Mon 26 Sep 2022 11:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6894
IP address blocks: 91.206.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:78:98:b7:76:e6:ee:db:5a:97:aa:aa:5a:11:6a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 26 11:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f6543bda1d7dc6fcad6fc8729fb0f52fb682e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:c3:0c:b1:d3:38:c7:44:d4:1f:f8:d9:87:
9a:ab:76:dd:1a:b6:2a:91:94:ee:0d:5b:56:d2:d0:
0c:9b:ec:be:41:b0:0f:cd:6e:80:d6:81:ed:d2:57:
6c:e7:c8:66:7a:db:e0:ba:90:99:3f:d3:ff:46:b2:
67:20:01:e8:7d:3f:98:fb:cd:18:60:7b:b4:36:ed:
1a:81:34:54:d3:43:af:a7:4d:05:04:3f:87:83:30:
57:f5:cc:d1:1a:ad:1a:fd:85:aa:30:8b:4b:37:63:
a4:12:5f:0c:1c:2f:bf:ba:32:58:08:8b:2c:8b:c6:
4a:74:dd:09:db:65:d5:81:18:4f:bd:a3:5f:27:7a:
ca:2d:0c:7d:c6:da:f1:da:c1:2f:ec:b5:99:f9:8e:
5d:28:76:10:4f:b9:96:22:dc:b0:35:53:b0:f1:67:
7b:88:2f:b1:cb:b2:8e:90:84:7b:56:d0:41:54:c6:
bc:9f:e9:d6:27:46:d4:e1:b4:07:3c:2e:3a:92:c1:
a3:0f:9b:28:b9:c2:58:da:ac:f5:b3:98:64:e4:58:
e1:cf:29:b5:82:00:a6:ae:0c:3b:f9:50:73:ef:96:
6f:69:63:b0:c0:12:32:2e:a4:68:3f:cf:c3:48:7b:
47:94:fe:30:43:66:0d:81:ae:8d:50:66:4f:30:12:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:43:BD:A1:D7:DC:6F:CA:D6:FC:87:29:FB:0F:52:FB:68:2E:9A
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b2VDvaHX3G_K1vyHKfsPUvtoLpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2a:fe:f4:41:40:87:ea:88:c7:a9:ca:8b:57:56:1e:24:52:
84:7b:98:ae:59:e6:79:1b:f8:23:67:2e:61:0e:86:dc:3c:01:
65:6b:0e:f7:f7:b4:28:81:97:55:60:88:f6:a0:ce:45:86:26:
99:41:3c:4d:02:de:8f:0b:c4:f8:8f:ac:89:17:68:6f:7f:2d:
e9:5f:87:67:32:08:de:86:4e:df:db:ec:5f:6d:d7:be:fb:b1:
3a:7c:2a:dc:b0:d1:bc:7e:6c:93:e7:f4:6a:40:45:ed:e2:1b:
ae:0d:3f:ef:81:7f:15:4e:fd:fd:16:af:50:28:11:4f:1e:91:
d3:d1:15:cd:a8:30:ec:a1:99:8c:f7:f2:35:8c:cc:24:b1:28:
99:2b:66:cd:87:0b:98:aa:b8:6e:cf:6d:de:0d:0f:ec:78:12:
20:ce:57:32:7c:fc:3c:1f:3d:4f:f9:34:ec:ba:62:20:0d:d6:
35:d6:18:85:9c:b8:19:0d:e1:33:6f:1f:55:82:e6:39:eb:ad:
6a:20:ef:0e:58:43:ab:78:be:44:81:5d:b2:93:cd:35:02:77:
fc:44:45:d2:b9:94:28:51:9e:25:12:83:c0:be:63:91:ec:de:
6a:aa:10:cb:b0:01:65:7e:27:02:62:8f:f9:ae:4a:46:43:6e:
8b:aa:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org