Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w4u8uwqNYiLARJ6kCkfW0-EBh1M.roa
File: w4u8uwqNYiLARJ6kCkfW0-EBh1M.roa (raw, json)
Hash identifier: wSEi21Sbn21+c2BbXVz8OaTPcs13qnjix3AJr2mXELc=
Subject key identifier: C3:8B:BC:BB:0A:8D:62:22:C0:44:9E:A4:0A:47:D6:D3:E1:01:87:53
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0181D72E5CD280193D666D47970F097A1FCF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w4u8uwqNYiLARJ6kCkfW0-EBh1M.roa
Signing time: Thu 07 Jul 2022 05:42:28 +0000
ROA not before: Thu 07 Jul 2022 05:42:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 91.198.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:2e:5c:d2:80:19:3d:66:6d:47:97:0f:09:7a:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 7 05:42:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c38bbcbb0a8d6222c0449ea40a47d6d3e1018753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:73:34:83:db:42:3f:2a:e6:8f:c0:06:0b:
a6:84:d3:1f:53:cd:d4:01:dc:42:14:06:26:e3:70:
28:09:7a:05:d6:42:1f:c2:45:05:43:d1:25:3f:ec:
b3:ed:5f:d4:dc:ab:7c:29:0d:da:3e:c1:00:de:97:
61:87:a2:5c:9b:3d:ae:fa:dd:63:4d:0c:bf:a8:cc:
4b:11:d4:fc:c4:fc:6d:b8:71:57:f8:7c:1a:a3:91:
c1:79:9f:4c:1a:f4:59:93:05:c0:2f:b0:50:60:cc:
08:72:80:bf:58:78:2c:89:93:21:34:01:eb:9d:dc:
4f:2d:76:9a:b4:12:ab:66:1e:6f:95:ae:4b:18:d9:
f7:a7:fc:49:2e:22:70:48:d3:36:e2:b4:9c:79:f4:
1b:55:2b:fa:49:5c:32:28:e5:b9:b6:9f:c1:c1:f1:
8b:0c:b4:75:b4:71:3a:12:da:c4:49:75:eb:dd:f7:
a7:48:bd:c9:5e:dd:54:25:08:31:04:2e:c7:97:5e:
7d:53:c1:ff:39:be:9f:35:06:f4:b0:ba:ba:38:77:
d7:18:89:60:74:27:28:b6:86:86:2f:da:8f:e4:7c:
80:c7:6f:da:38:cd:73:fe:4a:ba:9e:cd:a9:0d:26:
34:27:78:6f:e6:ba:37:9a:0b:6c:84:22:88:07:00:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8B:BC:BB:0A:8D:62:22:C0:44:9E:A4:0A:47:D6:D3:E1:01:87:53
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w4u8uwqNYiLARJ6kCkfW0-EBh1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.66.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:78:7a:e1:ec:13:12:62:4c:a6:25:b8:72:f5:71:cb:63:96:
3c:a9:82:88:60:bf:c5:ee:c7:6a:29:6f:30:01:b0:78:fc:b5:
7d:62:da:6e:cc:c7:36:fd:16:73:5e:e5:ed:cb:a3:99:c2:18:
dd:aa:df:56:f4:0c:d8:9f:11:40:fc:81:48:12:87:f8:73:80:
12:89:56:8d:d3:d5:87:08:2d:19:b2:a8:c4:16:f2:ae:de:f9:
29:51:9f:95:42:0e:24:9b:fb:55:42:fa:dc:d8:1a:41:d6:45:
89:7e:41:02:7e:cb:cf:a1:d5:74:5a:9c:d9:7e:9a:3e:c5:ac:
2c:5d:6c:e7:11:55:fb:09:d2:05:6b:2a:70:54:a7:d2:21:4a:
d0:07:62:cb:57:d7:9a:32:3c:ed:18:1a:50:2e:f2:cb:da:5a:
c6:40:e1:6d:c9:48:81:de:65:07:2c:e5:0e:29:e4:c9:5c:03:
0c:50:cd:32:e8:05:20:08:76:39:12:7f:65:53:99:9c:35:3d:
e2:3c:97:b9:7e:80:1b:7e:9e:75:0f:b8:7d:f9:c4:cc:7f:ce:
78:eb:4a:4f:d5:4b:76:ad:be:b5:78:f3:22:83:db:ad:aa:02:
59:ca:4f:41:9c:63:a9:2b:3d:81:d7:28:5a:ad:a2:6b:20:dc:
1c:b5:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org