Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/868e9b-e143-4e57-867a-43ee37032079/1/paDN2PmgYKcb350Z0_sMLlP3wlw.roa
File: paDN2PmgYKcb350Z0_sMLlP3wlw.roa (raw, json)
Hash identifier: TP/L6S6Qdbi1BcN9RNDCuuyEzTQ5C+wp72OWgXSS0P8=
Subject key identifier: A5:A0:CD:D8:F9:A0:60:A7:1B:DF:9D:19:D3:FB:0C:2E:53:F7:C2:5C
Certificate issuer: /CN=52227117bea639cbc897fc31e764a3495fb401c2
Certificate serial: 018326EB6D30FF96DA0B040EDCDEC712D264
Authority key identifier: 52:22:71:17:BE:A6:39:CB:C8:97:FC:31:E7:64:A3:49:5F:B4:01:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJxF76mOcvIl_wx52SjSV-0AcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/868e9b-e143-4e57-867a-43ee37032079/1/paDN2PmgYKcb350Z0_sMLlP3wlw.roa
Signing time: Sat 10 Sep 2022 10:21:46 +0000
ROA not before: Sat 10 Sep 2022 10:21:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 91.221.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:eb:6d:30:ff:96:da:0b:04:0e:dc:de:c7:12:d2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52227117bea639cbc897fc31e764a3495fb401c2
Validity
Not Before: Sep 10 10:21:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5a0cdd8f9a060a71bdf9d19d3fb0c2e53f7c25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:bf:31:34:de:c6:f4:d3:df:29:34:6b:22:
75:d5:0e:88:fe:68:0d:5a:df:e7:f9:a3:62:f6:6a:
c3:9e:80:a3:09:0e:b6:72:77:70:57:b7:be:39:87:
e6:42:70:ef:a6:8a:4d:27:c0:6d:7b:10:58:e6:ad:
aa:56:af:34:c8:5c:6c:13:dd:86:6b:36:97:7b:90:
01:f6:60:aa:92:0b:b3:9f:97:bc:df:52:65:13:e3:
32:71:b4:23:4d:31:ad:eb:61:41:3a:bb:5c:95:7c:
fd:0d:09:9e:49:56:2b:c2:2f:c7:e6:d1:67:6b:94:
5a:6b:8f:a5:8a:26:76:44:66:52:cd:5f:d2:cf:0c:
93:d3:1a:e8:54:12:0d:d9:52:d9:0c:b7:c3:3d:d4:
56:62:15:ec:eb:ae:b3:c8:ed:01:90:b5:82:df:18:
b1:57:f8:d2:4e:f6:32:8e:f3:68:7c:f5:70:dc:0c:
89:95:0d:3d:12:98:47:08:b4:25:55:96:1a:db:f4:
c7:48:46:5a:d8:56:3f:80:26:24:af:d8:b2:b3:98:
c1:42:21:12:88:6a:1d:a7:8d:1c:b3:bb:8e:30:e0:
ce:c2:8f:02:55:e9:51:07:1f:3f:da:f6:8b:ee:9f:
2b:08:29:9e:f6:1d:74:5a:15:21:81:63:0b:c4:7b:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:CD:D8:F9:A0:60:A7:1B:DF:9D:19:D3:FB:0C:2E:53:F7:C2:5C
X509v3 Authority Key Identifier:
keyid:52:22:71:17:BE:A6:39:CB:C8:97:FC:31:E7:64:A3:49:5F:B4:01:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJxF76mOcvIl_wx52SjSV-0AcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/868e9b-e143-4e57-867a-43ee37032079/1/paDN2PmgYKcb350Z0_sMLlP3wlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/868e9b-e143-4e57-867a-43ee37032079/1/UiJxF76mOcvIl_wx52SjSV-0AcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.81.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e4:6a:88:d0:8b:d7:ff:36:af:17:ad:85:c4:dd:35:d8:be:
0c:73:b2:c7:9d:04:4d:7f:0e:e5:c8:84:f0:c8:ee:21:56:d8:
59:fa:8d:51:82:40:a1:34:67:1b:88:6e:36:27:63:98:5e:01:
23:31:bb:54:df:85:51:40:72:98:af:2a:2e:6c:e4:e6:19:ed:
70:6c:99:6e:2b:27:5a:ec:53:9f:c2:a7:84:5e:1b:3d:78:64:
a5:6c:38:b6:ab:80:82:95:40:96:4a:51:65:09:d1:04:0c:65:
f4:cd:b0:78:84:50:d0:1b:8e:e7:bc:3f:4f:9d:0c:5f:5c:c8:
ec:96:12:f4:d4:4a:fe:f7:34:e7:89:4b:1e:f2:fc:66:fa:be:
38:96:c8:0f:a3:dc:29:42:d5:40:af:e9:7b:17:41:2e:0d:53:
08:e7:bd:bc:d0:6b:c8:30:5d:8c:24:c4:39:75:84:74:78:4d:
dc:58:73:d1:fd:2c:66:90:59:03:56:8b:80:c4:b6:8c:98:92:
f6:ce:2c:21:11:93:26:23:a9:03:2b:c2:74:7f:9b:92:60:cc:
40:8f:dd:96:8e:0d:8e:20:85:15:22:fb:1c:9b:86:80:d3:32:
2d:d4:1f:cc:54:5c:01:b8:4a:d1:d9:66:95:bc:0a:ce:cf:1a:
65:66:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:09 2024 by rpki-client on console-ams.rpki-client.org