Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/UrCD0O-vOSGhGBCcB_JF_UkPTa8.roa
File: UrCD0O-vOSGhGBCcB_JF_UkPTa8.roa (raw, json)
Hash identifier: iStMq/IW2YFeE8BeCIiHKTOYue7QRfr7RZMHrozoUXA=
Subject key identifier: 52:B0:83:D0:EF:AF:39:21:A1:18:10:9C:07:F2:45:FD:49:0F:4D:AF
Certificate issuer: /CN=103bb42a126d6fd13d6a736b6a9e41b4f4c31e68
Certificate serial: 022156
Authority key identifier: 10:3B:B4:2A:12:6D:6F:D1:3D:6A:73:6B:6A:9E:41:B4:F4:C3:1E:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDu0KhJtb9E9anNrap5BtPTDHmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/UrCD0O-vOSGhGBCcB_JF_UkPTa8.roa
Signing time: Fri 10 Jun 2022 09:53:02 +0000
ROA not before: Fri 10 Jun 2022 09:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51808
IP address blocks: 91.220.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139606 (0x22156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103bb42a126d6fd13d6a736b6a9e41b4f4c31e68
Validity
Not Before: Jun 10 09:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b083d0efaf3921a118109c07f245fd490f4daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:6c:6f:5a:19:ac:8b:be:27:8a:2e:59:68:
5d:33:e6:ac:c9:3e:c7:4a:a2:24:f8:ec:cb:93:40:
03:d3:c1:73:ab:f0:c2:e2:e1:99:1b:52:fe:50:05:
41:02:de:e9:ba:81:7f:8e:bf:63:ce:e2:63:ee:b8:
4a:07:c5:97:b4:46:c5:98:c2:99:12:33:e5:23:ac:
d5:5a:20:68:fd:ba:27:9a:b0:8b:7a:5f:10:10:61:
a6:35:c3:cf:a2:85:bd:ce:fc:ea:32:c9:46:3b:09:
42:24:42:2d:da:3b:b1:1e:26:b9:86:21:3b:20:e1:
7a:de:f2:df:1e:7c:62:60:a2:73:dc:27:16:7a:2e:
80:f7:8f:e5:80:b1:16:6e:d7:e4:e0:ad:3c:ca:80:
79:ab:57:ca:e6:fd:f0:fa:76:39:56:7b:d0:15:78:
b8:cd:cd:ad:42:68:f8:27:ed:98:d2:89:d0:22:73:
2b:6e:dc:a1:88:26:2e:40:54:7a:fb:5c:66:44:12:
59:e4:f6:af:c6:73:a8:05:ed:3e:12:1a:e5:e2:fa:
60:4e:81:92:bb:6e:33:df:73:df:0c:f3:b7:39:6a:
08:b9:db:53:50:6b:39:94:4b:04:62:6a:59:41:41:
57:b8:73:16:43:97:28:4e:0c:52:38:fc:59:05:72:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B0:83:D0:EF:AF:39:21:A1:18:10:9C:07:F2:45:FD:49:0F:4D:AF
X509v3 Authority Key Identifier:
keyid:10:3B:B4:2A:12:6D:6F:D1:3D:6A:73:6B:6A:9E:41:B4:F4:C3:1E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDu0KhJtb9E9anNrap5BtPTDHmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/UrCD0O-vOSGhGBCcB_JF_UkPTa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/EDu0KhJtb9E9anNrap5BtPTDHmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.121.0/24
Signature Algorithm: sha256WithRSAEncryption
29:37:c0:ba:d4:f7:96:b0:e9:40:5d:f8:fa:6a:f4:9c:bf:bd:
e3:82:52:8e:59:62:61:4a:83:05:b3:93:21:86:13:fc:3b:a5:
90:47:c2:7e:d5:64:e5:f1:4b:fe:0f:ee:b4:61:8b:6a:c8:d2:
d3:0e:af:b1:b4:65:93:df:e7:1f:64:e6:c9:c1:0b:b9:0e:17:
af:2b:32:4a:df:46:64:8e:a5:f7:0b:d4:fd:2b:c8:e7:de:0d:
d4:8e:8a:32:61:18:f5:f2:81:88:47:3a:2b:88:b0:68:80:13:
0f:5b:7d:77:80:4a:9a:9b:fb:00:d7:5c:b7:1c:56:7e:06:e2:
7f:87:d9:b1:aa:4b:b0:7b:df:f1:dc:63:c2:ad:ad:50:9f:e1:
ef:5d:04:3f:94:b9:a5:8d:cb:c2:c6:dc:29:07:c2:32:99:f2:
26:39:c8:3b:76:ab:31:f0:2b:49:72:b0:1a:2f:ec:e3:5b:5e:
2c:6b:75:5b:6b:29:00:5c:45:34:09:04:01:4d:7f:f6:17:f0:
d6:fd:9b:ac:ce:7d:85:a2:ff:07:00:2d:df:78:e0:3d:6f:99:
d9:a0:73:67:68:bc:30:8d:dc:fa:20:f8:08:24:ae:4f:47:fb:
8b:46:3a:74:c5:e1:aa:ba:8a:27:68:b2:87:82:a8:a8:06:d4:
b2:66:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:21 2023 by rpki-client on console-ams.rpki-client.org