Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/731d75-36a3-426f-9f19-5f854ea9a3ea/1/Gc63xGDqWF0_RKLmnGaObc0Hgo8.roa
File: Gc63xGDqWF0_RKLmnGaObc0Hgo8.roa (raw, json)
Hash identifier: wehQdLR3EpPyBPmvDP3IEzavq3c59rUGcPN4vvxjqUU=
Subject key identifier: 19:CE:B7:C4:60:EA:58:5D:3F:44:A2:E6:9C:66:8E:6D:CD:07:82:8F
Certificate issuer: /CN=6032293db02032728f309e22e4d509b041218cdd
Certificate serial: 0184151BAC6EE2D895BEF39E468B4DC5AA21
Authority key identifier: 60:32:29:3D:B0:20:32:72:8F:30:9E:22:E4:D5:09:B0:41:21:8C:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDIpPbAgMnKPMJ4i5NUJsEEhjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/731d75-36a3-426f-9f19-5f854ea9a3ea/1/Gc63xGDqWF0_RKLmnGaObc0Hgo8.roa
Signing time: Wed 26 Oct 2022 16:24:05 +0000
ROA not before: Wed 26 Oct 2022 16:24:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.233.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:1b:ac:6e:e2:d8:95:be:f3:9e:46:8b:4d:c5:aa:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6032293db02032728f309e22e4d509b041218cdd
Validity
Not Before: Oct 26 16:24:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19ceb7c460ea585d3f44a2e69c668e6dcd07828f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:07:0a:f0:c9:56:21:6c:31:28:9e:53:78:f4:
12:f1:33:de:a6:16:60:bc:4b:24:2e:3e:24:e0:7b:
d5:5d:d1:a7:19:71:35:87:92:e6:fa:53:ad:04:84:
ad:42:2c:3e:13:e3:7e:18:6e:c0:9b:1b:fa:04:d2:
df:c9:ef:11:38:37:b8:0d:76:0b:41:f8:02:25:45:
f3:2f:47:16:06:bf:cd:0e:7f:f5:02:cb:97:1b:09:
a5:13:79:86:f9:05:43:ec:53:0e:19:56:5e:c7:bc:
28:49:ef:dc:5f:55:88:5a:b6:77:0f:dc:15:85:72:
84:bd:1d:70:b9:2e:8b:03:ae:58:bf:4f:38:3e:7d:
7c:b1:c9:95:12:7e:d9:34:69:6e:72:2f:2b:19:80:
88:56:ca:94:30:7f:95:38:a3:61:ad:e0:a2:cd:2c:
a0:1e:f5:39:a8:e4:38:20:3a:00:1d:7c:1e:fa:a8:
55:a9:6d:56:1e:19:4e:57:c7:e3:9f:19:50:6e:34:
57:c3:b5:f7:f7:f3:d5:9d:60:3d:22:89:b0:15:c1:
de:13:4b:9c:b4:81:e6:2d:a6:fd:4b:58:ce:7b:76:
96:6b:e7:33:cd:91:14:57:80:08:77:98:ca:f5:0a:
01:33:27:b0:d0:89:6c:da:e8:07:cf:de:64:d2:9a:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:B7:C4:60:EA:58:5D:3F:44:A2:E6:9C:66:8E:6D:CD:07:82:8F
X509v3 Authority Key Identifier:
keyid:60:32:29:3D:B0:20:32:72:8F:30:9E:22:E4:D5:09:B0:41:21:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDIpPbAgMnKPMJ4i5NUJsEEhjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/731d75-36a3-426f-9f19-5f854ea9a3ea/1/Gc63xGDqWF0_RKLmnGaObc0Hgo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/731d75-36a3-426f-9f19-5f854ea9a3ea/1/YDIpPbAgMnKPMJ4i5NUJsEEhjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.198.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b9:1b:23:bf:a3:ae:13:94:9c:5f:52:81:a6:44:b7:42:b3:
35:6b:a9:9b:6e:6d:4a:34:44:a9:fd:98:9c:4a:ec:be:49:94:
6b:e9:79:d9:ff:f9:0f:17:f6:42:ed:81:05:c2:41:2f:39:79:
b6:70:83:35:a7:e7:04:fe:e8:d6:10:88:21:a4:3a:b5:68:1a:
48:46:98:36:1d:6f:09:83:3e:6b:73:a6:2c:ed:d3:81:55:6d:
18:aa:0e:56:63:e6:04:ce:66:44:fe:05:6a:4e:ec:a7:eb:f1:
3f:1e:2e:55:5d:a0:46:19:bf:d8:ec:8f:4b:b4:02:24:6f:1c:
2c:81:12:1e:2d:4b:51:3e:20:65:d8:54:bd:1b:5b:97:4f:5d:
15:ea:de:02:be:44:d7:f3:b5:77:5d:21:94:55:75:d9:d7:e8:
eb:d2:23:91:52:cb:d5:9d:3e:a0:38:e6:c3:5c:aa:79:90:87:
eb:05:a7:41:96:c4:05:5f:18:ca:ad:71:fb:f5:a1:bc:e0:48:
ff:7f:49:0f:a1:06:0b:f8:58:0e:e4:a0:72:fb:b6:c4:c1:93:
69:99:8f:f9:4f:25:10:19:40:71:1f:41:48:61:e6:8d:d9:c0:
7c:7e:06:a3:71:7b:15:85:95:1f:1e:f9:10:7d:20:eb:da:78:
cd:0a:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:47 2024 by rpki-client on console-ams.rpki-client.org