Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d9835e-6e6d-440a-9345-119e679ae2ad/1/FoSFCl9FfzBVBVzpkbmFi7JqOfc.roa
File: FoSFCl9FfzBVBVzpkbmFi7JqOfc.roa (raw, json)
Hash identifier: 21N8f4CEzuXzRKfJgijB/9VOxe0w3PWWj345PcwWHCk=
Subject key identifier: 16:84:85:0A:5F:45:7F:30:55:05:5C:E9:91:B9:85:8B:B2:6A:39:F7
Certificate issuer: /CN=0f9ab86fdfd4f124d572cad50b2cf00b67a7e3f3
Certificate serial: D279A8
Authority key identifier: 0F:9A:B8:6F:DF:D4:F1:24:D5:72:CA:D5:0B:2C:F0:0B:67:A7:E3:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5q4b9_U8STVcsrVCyzwC2en4_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d9835e-6e6d-440a-9345-119e679ae2ad/1/FoSFCl9FfzBVBVzpkbmFi7JqOfc.roa
Signing time: Sat 01 Jan 2022 08:04:17 +0000
ROA not before: Sat 01 Jan 2022 08:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50236
IP address blocks: 91.231.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13793704 (0xd279a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ab86fdfd4f124d572cad50b2cf00b67a7e3f3
Validity
Not Before: Jan 1 08:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1684850a5f457f3055055ce991b9858bb26a39f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:31:d6:ab:6a:5d:f0:be:fb:72:ad:5a:ed:
94:fe:bb:43:82:27:e7:40:76:74:55:0b:28:69:78:
80:25:54:06:f7:91:35:8a:7b:e8:80:4c:29:ed:3c:
94:ba:4c:55:d1:ad:48:17:b1:3d:dc:a7:12:f8:71:
f7:ca:f1:cf:d6:80:d0:e4:b3:c0:6d:7b:74:98:4d:
5c:85:76:d9:a0:65:f2:ac:0f:7f:e7:20:b4:e5:1d:
42:b9:44:5b:3f:6a:54:fb:58:64:77:98:68:c0:58:
e6:ee:92:2b:0f:29:4a:f1:4b:bc:47:88:c5:c2:3d:
48:e5:8f:fa:3a:59:53:08:a5:53:3f:77:8d:47:05:
f2:9b:e3:71:9d:30:d8:c8:ef:f1:e6:de:38:b9:62:
0c:39:ef:41:95:80:e9:34:53:8f:30:3c:63:0e:fa:
d2:3b:ec:c4:57:62:30:08:06:62:a8:23:03:5c:6b:
50:89:9b:af:e0:40:85:c6:74:45:94:fe:8f:0b:88:
28:f9:75:e7:39:51:e0:f8:ec:1a:07:1b:76:55:9d:
a8:0b:75:e9:63:19:d3:3c:7d:5c:d7:dd:a3:da:75:
76:3a:5f:d2:72:4a:72:1b:ca:22:02:c0:47:41:2c:
3d:cb:c0:fc:40:65:5d:6e:47:dd:01:f6:50:37:63:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:85:0A:5F:45:7F:30:55:05:5C:E9:91:B9:85:8B:B2:6A:39:F7
X509v3 Authority Key Identifier:
keyid:0F:9A:B8:6F:DF:D4:F1:24:D5:72:CA:D5:0B:2C:F0:0B:67:A7:E3:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5q4b9_U8STVcsrVCyzwC2en4_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d9835e-6e6d-440a-9345-119e679ae2ad/1/FoSFCl9FfzBVBVzpkbmFi7JqOfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d9835e-6e6d-440a-9345-119e679ae2ad/1/D5q4b9_U8STVcsrVCyzwC2en4_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.182.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:1d:e3:74:75:83:3a:28:65:80:0b:7f:8f:2c:fe:09:57:4e:
ce:f2:5f:97:2a:e2:1e:9e:fb:3c:fc:7b:39:ef:01:04:4b:a5:
86:1f:86:75:36:26:ea:c7:a4:8a:35:a1:5b:73:ad:67:c0:6e:
2e:a6:32:9b:2c:84:c2:67:c4:b6:ab:8e:5c:39:54:63:96:de:
b4:cb:16:0c:dc:59:09:b7:b8:a8:41:b0:2b:a6:a9:44:a8:ac:
69:b7:37:d1:bf:5c:d1:88:d5:bb:a6:71:73:21:92:15:d5:0f:
48:4f:9d:b8:d4:cf:b5:06:8c:94:10:c3:69:3c:fd:70:28:dc:
bf:db:6a:6a:71:c0:cd:8f:1a:3f:a1:44:47:b3:89:63:d4:92:
9b:24:67:f9:e1:59:40:b8:5a:ab:62:ea:c3:9f:3c:06:0c:b8:
5b:70:03:4c:8c:f4:36:7e:0e:7e:d4:03:89:68:10:b4:c2:a3:
05:bf:35:f8:41:2d:15:2b:47:bd:07:37:56:15:c0:16:00:33:
1a:27:2e:67:a0:b4:b8:95:18:67:82:3b:40:31:89:99:ec:4a:
f5:ce:ec:3f:58:99:bd:52:50:ed:cf:48:5d:a0:8e:37:c7:fb:
f8:28:75:c6:4d:cb:18:69:62:4d:4c:6f:ce:d2:50:a8:a3:22:
96:36:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:15 2023 by rpki-client on console-fra.rpki-client.org