Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/bZtv6RWTKY6VxlSrD88z7s5BADM.roa
File: bZtv6RWTKY6VxlSrD88z7s5BADM.roa (raw, json)
Hash identifier: wbbaLQCsXpZ8gbVwFtctlzgAMg+GYxav1LAwx89rM78=
Subject key identifier: 6D:9B:6F:E9:15:93:29:8E:95:C6:54:AB:0F:CF:33:EE:CE:41:00:33
Certificate issuer: /CN=7971511116a533bd6aaf4217d4dfc3f3e0cb4978
Certificate serial: 01882086B3C68779D0E6E1298AD9CD50C541
Authority key identifier: 79:71:51:11:16:A5:33:BD:6A:AF:42:17:D4:DF:C3:F3:E0:CB:49:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXFRERalM71qr0IX1N_D8-DLSXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/bZtv6RWTKY6VxlSrD88z7s5BADM.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 91.247.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b3:c6:87:79:d0:e6:e1:29:8a:d9:cd:50:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7971511116a533bd6aaf4217d4dfc3f3e0cb4978
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d9b6fe91593298e95c654ab0fcf33eece410033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:71:7a:65:ee:74:fa:eb:83:0e:c7:f3:49:
da:35:a3:4c:4a:2c:9f:4d:ca:4b:6b:28:77:b2:ea:
9a:4a:c5:7a:a9:1b:14:ae:e3:d0:65:1c:bc:88:f8:
29:87:36:fe:b1:10:e6:f1:86:21:4c:16:33:a0:aa:
26:1f:69:1e:67:b0:30:47:69:79:ca:be:0b:b3:74:
10:4b:8f:6b:df:5e:5c:38:5f:4f:87:fc:6f:d7:12:
37:a2:d3:73:56:82:a0:4c:9e:37:29:b6:d7:57:f7:
97:85:61:9b:a8:d4:60:c6:e3:ab:2c:7a:5c:c2:57:
60:f1:d1:8f:d9:00:7c:be:64:cb:18:fe:32:b4:ce:
f9:dc:ae:23:b7:87:d1:46:37:c0:f0:16:62:a8:b7:
d4:1e:4c:88:3f:1b:92:a7:fc:d7:a2:70:e5:98:04:
4b:f1:3a:ae:68:5c:3d:2f:b5:d2:55:ec:61:da:2f:
6b:32:45:e3:e1:6e:c7:bf:7c:2c:18:8a:7f:83:ba:
1d:e2:6e:2a:f6:1b:7d:0b:7b:a6:5e:86:cf:ed:3d:
13:58:e2:a3:16:a4:53:23:2f:42:ef:e9:a7:74:28:
6d:0b:71:62:bc:57:76:2d:c5:75:21:bc:f1:a5:b1:
2b:18:e6:bb:80:c6:b3:c1:4b:fd:c1:d9:9b:cd:f6:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9B:6F:E9:15:93:29:8E:95:C6:54:AB:0F:CF:33:EE:CE:41:00:33
X509v3 Authority Key Identifier:
keyid:79:71:51:11:16:A5:33:BD:6A:AF:42:17:D4:DF:C3:F3:E0:CB:49:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXFRERalM71qr0IX1N_D8-DLSXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/bZtv6RWTKY6VxlSrD88z7s5BADM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/eXFRERalM71qr0IX1N_D8-DLSXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.191.0/24
Signature Algorithm: sha256WithRSAEncryption
48:86:c4:b9:a0:d5:b6:8f:53:62:22:83:fe:9e:f8:21:4e:21:
91:81:f4:73:ce:92:80:6c:2b:7e:db:05:97:1c:ac:77:ce:2e:
b6:83:e1:30:7d:9d:ba:de:cd:ae:9e:2b:8d:f2:85:b5:bc:74:
75:9d:bc:d4:d8:3a:ef:d9:5b:1e:f3:ac:52:08:32:94:29:4e:
0d:6f:a2:d1:df:6c:e1:6c:48:76:4d:88:02:0d:a6:35:9e:28:
ae:90:9b:ed:95:9b:0f:4f:73:b2:f3:af:e4:ac:0f:99:65:a3:
ca:9e:8f:ac:6f:e6:bc:c1:86:21:1a:2c:ec:3d:0e:e8:dc:30:
c5:55:b3:e6:af:cf:9a:c3:60:0d:b6:2f:28:3b:bf:b8:8b:55:
4d:bb:88:70:24:af:06:ff:32:ba:20:45:84:67:cc:0e:ab:e1:
5a:e0:36:6e:4e:cc:8f:b3:40:86:b9:73:96:e5:a2:f6:4a:47:
ee:ad:b9:e3:29:37:63:7b:7b:5f:7b:3e:28:27:93:c0:56:53:
bb:4d:0f:6e:09:fa:6f:6a:1a:d7:e4:f9:41:36:9d:e5:72:c2:
6c:8f:23:10:dc:27:fa:31:96:ba:5d:57:21:0a:ce:cf:97:dd:
09:3e:18:73:d4:bf:45:8e:ca:21:87:cf:c3:78:87:ef:f6:36:
f5:db:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:04 2024 by rpki-client on console-ams.rpki-client.org