Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/CBavqTZW900jgr3SSb_uq9stSz8.roa
File: CBavqTZW900jgr3SSb_uq9stSz8.roa (raw, json)
Hash identifier: mUVDlq5K5WWC9ZmSdkV+3n8z+BVx4Yo94wGCW1G2iSA=
Subject key identifier: 08:16:AF:A9:36:56:F7:4D:23:82:BD:D2:49:BF:EE:AB:DB:2D:4B:3F
Certificate issuer: /CN=3cd1576ac22b740da6aaf32537fe3197cf802c1f
Certificate serial: 0611342B
Authority key identifier: 3C:D1:57:6A:C2:2B:74:0D:A6:AA:F3:25:37:FE:31:97:CF:80:2C:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNFXasIrdA2mqvMlN_4xl8-ALB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/CBavqTZW900jgr3SSb_uq9stSz8.roa
Signing time: Sat 01 Jan 2022 02:53:30 +0000
ROA not before: Sat 01 Jan 2022 02:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44932
IP address blocks: 91.228.132.0/24 maxlen: 24
91.228.132.0/23 maxlen: 24
91.228.133.0/24 maxlen: 24
91.229.46.0/23 maxlen: 24
91.229.46.0/24 maxlen: 24
91.229.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101790763 (0x611342b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd1576ac22b740da6aaf32537fe3197cf802c1f
Validity
Not Before: Jan 1 02:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0816afa93656f74d2382bdd249bfeeabdb2d4b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:57:70:52:4a:86:5c:67:00:71:2e:a7:0f:
c2:35:2d:8b:24:c4:c2:40:87:9d:ed:1e:e0:e8:b9:
48:2a:c3:3d:78:a7:32:27:67:49:73:36:58:18:0b:
d5:7b:84:c5:89:60:f8:59:b8:bb:94:ab:3b:dc:80:
ba:b5:8c:42:cc:cc:e1:9d:14:94:56:36:b1:40:d7:
c9:af:f4:01:bf:1e:bb:75:72:78:c7:cd:6c:a6:61:
74:bc:4e:ca:56:23:00:29:c8:f5:5a:45:33:d9:9b:
0a:3a:7e:0c:80:50:32:ae:32:2c:f8:fa:25:5e:f1:
03:3c:a1:7b:66:c6:a9:69:41:58:49:11:12:66:3a:
f7:72:b1:28:2e:05:4f:68:ad:68:64:1e:5b:6a:88:
58:c9:e1:53:bb:8d:56:3f:43:4e:d3:c3:e7:3d:5f:
c1:ec:8e:8c:33:25:76:59:71:91:e1:2f:a2:f2:97:
32:5d:0d:ec:d5:32:1f:54:c3:a3:88:09:38:21:d2:
3f:29:67:7c:7c:45:66:21:24:d4:e5:8e:86:56:7d:
af:07:14:1d:a8:6f:ef:0e:cc:89:ac:07:89:77:ae:
31:65:4c:8a:1f:64:f7:5b:a2:53:bd:90:3a:c0:40:
5e:a5:b4:26:79:e2:f1:94:02:99:bb:42:2e:54:fc:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:AF:A9:36:56:F7:4D:23:82:BD:D2:49:BF:EE:AB:DB:2D:4B:3F
X509v3 Authority Key Identifier:
keyid:3C:D1:57:6A:C2:2B:74:0D:A6:AA:F3:25:37:FE:31:97:CF:80:2C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNFXasIrdA2mqvMlN_4xl8-ALB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/CBavqTZW900jgr3SSb_uq9stSz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/PNFXasIrdA2mqvMlN_4xl8-ALB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.132.0/23
91.229.46.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:25:0d:d3:a8:a2:d3:ed:ce:7e:d4:98:67:f1:00:15:88:03:
9f:13:61:cf:74:a3:fc:d7:da:99:05:a8:e5:e7:da:25:4b:b3:
24:d0:90:27:4b:82:1c:e4:50:5a:40:bf:63:7f:09:ec:e5:d2:
61:92:13:a5:85:be:96:ad:31:95:25:4c:4e:50:da:f2:52:28:
92:d9:69:31:5c:1e:73:18:55:7a:ce:f5:f4:66:f6:57:a9:ab:
a3:09:b5:b0:38:7d:91:19:e3:a4:3f:48:97:f6:d2:30:65:77:
e7:d6:6c:02:ee:62:23:e1:42:6c:75:2c:ee:7c:21:1e:87:3f:
00:af:37:44:6e:65:d9:04:9c:3f:3e:48:d8:26:19:83:22:70:
ad:7b:7f:a1:7b:ae:9a:99:46:33:f2:95:7c:05:ec:42:29:2f:
39:2a:e3:64:f5:68:3b:9a:8c:01:52:88:4b:46:de:c1:fd:40:
75:36:f4:d4:a7:7e:ac:dc:1c:29:e8:2b:21:c8:85:2e:0c:a8:
40:66:aa:03:0a:5b:29:c9:83:28:bf:34:bb:15:cd:fe:d2:e9:
b7:df:d5:c7:2f:a8:54:5a:1b:dd:be:ca:bd:10:22:b9:d3:32:
28:fc:c8:3c:f9:33:50:a6:52:8d:bb:11:20:66:eb:bb:ad:c4:
74:6e:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:58 2024 by rpki-client on console-ams.rpki-client.org