Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/91Qb4riJsHPnkHZ5L9h-9jLeIXI.roa
File: 91Qb4riJsHPnkHZ5L9h-9jLeIXI.roa (raw, json)
Hash identifier: psZcNiT1v/pAS8n2W8H4QojPLdeWNkJWGcYgggxXxPM=
Subject key identifier: F7:54:1B:E2:B8:89:B0:73:E7:90:76:79:2F:D8:7E:F6:32:DE:21:72
Certificate issuer: /CN=6c86838aae16bc368182714fcb4f8eaf87c80fcf
Certificate serial: 54DD81
Authority key identifier: 6C:86:83:8A:AE:16:BC:36:81:82:71:4F:CB:4F:8E:AF:87:C8:0F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIaDiq4WvDaBgnFPy0-Or4fID88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/91Qb4riJsHPnkHZ5L9h-9jLeIXI.roa
Signing time: Sat 01 Jan 2022 03:51:39 +0000
ROA not before: Sat 01 Jan 2022 03:51:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 195.60.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5561729 (0x54dd81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86838aae16bc368182714fcb4f8eaf87c80fcf
Validity
Not Before: Jan 1 03:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7541be2b889b073e79076792fd87ef632de2172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:d3:00:a7:00:3c:7c:96:bd:98:e2:7a:4b:
a9:2c:ce:02:e4:9b:8b:3a:99:ce:0a:94:5d:c1:8d:
96:76:05:a2:de:f8:83:17:0d:6c:fe:3d:62:32:d7:
14:9c:20:60:cc:3a:ab:17:e0:24:b3:68:84:5c:d8:
b4:9f:3d:cc:be:23:e5:06:ed:49:f3:0f:f9:2f:41:
27:9c:3d:12:e9:2f:5a:2d:09:08:5e:db:13:97:22:
4b:2d:ea:e3:ca:30:99:52:9b:46:06:ed:f1:4c:f9:
1c:1b:21:c4:dd:51:7b:21:02:48:a7:fe:f5:84:32:
cd:2a:70:bc:99:a2:4a:0c:ae:b7:3b:47:d5:73:80:
22:5a:fa:98:98:9a:c7:ef:7b:76:6c:f3:9a:c4:b8:
8a:54:fc:0d:ee:00:2b:bd:db:9c:70:39:b9:7e:ab:
cd:0a:75:bf:52:f4:13:cf:fc:f8:44:78:8b:f7:ae:
70:8b:db:ca:6d:61:fe:f1:59:fd:89:c0:a7:1a:df:
fc:ff:72:4a:db:8e:ac:de:54:3f:da:22:ba:10:23:
c1:6d:e7:71:47:ce:8d:bd:48:3f:1f:9e:71:1e:93:
10:05:ee:74:ab:b3:1e:32:a8:9a:15:ad:06:78:8b:
59:ce:dc:ba:4d:a8:0e:e4:df:6f:41:dd:5f:93:f3:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:1B:E2:B8:89:B0:73:E7:90:76:79:2F:D8:7E:F6:32:DE:21:72
X509v3 Authority Key Identifier:
keyid:6C:86:83:8A:AE:16:BC:36:81:82:71:4F:CB:4F:8E:AF:87:C8:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIaDiq4WvDaBgnFPy0-Or4fID88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/91Qb4riJsHPnkHZ5L9h-9jLeIXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/bIaDiq4WvDaBgnFPy0-Or4fID88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.171.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:fb:90:74:af:c9:31:4c:ae:45:13:3e:c0:c1:52:43:cd:2d:
79:cc:3f:d6:ed:f3:6d:d3:75:5f:4f:e7:49:1e:1a:f8:7d:5f:
89:2f:26:1b:a5:27:70:10:8b:85:b1:fd:ef:ed:dd:61:ab:7e:
78:6e:a9:9f:0c:1f:32:41:db:29:9a:a0:29:05:94:16:73:1e:
98:b9:f4:88:f4:75:81:64:a1:21:a5:45:8b:98:1d:8f:3a:90:
74:94:2a:cb:9e:c9:16:c9:04:bb:b1:f5:13:e6:ba:ea:3d:8d:
2a:73:0a:d3:a5:e3:e9:cc:43:51:0d:e2:61:e1:bd:e7:21:f6:
19:d9:c3:40:0a:2b:c5:81:c3:fb:09:6d:ec:4b:6c:35:cd:72:
0e:d8:83:b6:a1:b4:1e:b0:b4:ec:f1:7c:97:79:30:f3:23:6b:
f7:f0:17:8e:6f:34:8f:ec:d7:a6:36:63:f5:e0:c8:7c:ac:2d:
c7:f5:28:be:37:89:56:cf:45:7d:b7:eb:64:1b:53:45:b7:5e:
5f:a1:c7:a7:98:10:39:56:a1:25:6f:f0:a9:d3:c6:19:47:04:
7c:3a:3d:5c:36:0b:bd:16:3d:d4:43:78:fb:3b:7c:3a:d2:d2:
29:e1:8c:37:41:da:0d:81:e6:d2:32:6b:77:f4:da:9a:3d:6c:
ce:1e:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:02 2024 by rpki-client on console-ams.rpki-client.org