Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/iZhNWta2oBBqBTFJ95s_PMc7QCs.roa
File: iZhNWta2oBBqBTFJ95s_PMc7QCs.roa (raw, json)
Hash identifier: 8rY14wBKFYgM1dpsy1/ErREsNctjESH7r6cLhYWALa0=
Subject key identifier: 89:98:4D:5A:D6:B6:A0:10:6A:05:31:49:F7:9B:3F:3C:C7:3B:40:2B
Certificate issuer: /CN=eb06b60431d6c27a81d88b9d08304cba9c881433
Certificate serial: 01856D5CFD6DA6FEDE9295A617BE0373E580
Authority key identifier: EB:06:B6:04:31:D6:C2:7A:81:D8:8B:9D:08:30:4C:BA:9C:88:14:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wa2BDHWwnqB2IudCDBMupyIFDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/iZhNWta2oBBqBTFJ95s_PMc7QCs.roa
Signing time: Sun 01 Jan 2023 12:44:48 +0000
ROA not before: Sun 01 Jan 2023 12:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:fd:6d:a6:fe:de:92:95:a6:17:be:03:73:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb06b60431d6c27a81d88b9d08304cba9c881433
Validity
Not Before: Jan 1 12:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89984d5ad6b6a0106a053149f79b3f3cc73b402b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:84:d4:43:69:b4:2d:f9:dd:6e:59:f3:84:
79:4a:b0:ff:8e:49:61:a7:ea:13:f0:97:60:e4:2d:
81:3c:c1:fc:dc:c7:5f:d6:e7:30:a2:4b:6c:fa:b2:
eb:24:d8:e6:e5:14:06:e3:02:a8:f6:4c:21:15:65:
06:31:24:b4:67:87:02:4d:c2:e3:87:21:ff:e9:be:
3a:86:cd:15:c1:dd:1e:72:88:90:50:31:99:a7:0b:
74:13:4c:4d:81:0f:94:9d:1d:c2:07:e4:62:c2:c8:
26:20:bc:47:d9:40:31:04:bd:dc:73:ea:cb:93:f0:
52:6e:0e:31:03:06:10:ab:b5:f8:5f:6d:70:60:da:
ca:dd:bb:87:12:df:2c:a0:8a:08:75:c2:2b:8b:e8:
43:19:f2:3c:56:2e:ee:92:5c:d1:6f:cf:f1:9e:f2:
0b:3a:45:f1:1f:47:77:92:55:19:a8:0a:79:38:9f:
ac:4c:31:09:5e:91:f1:cc:96:5b:e0:1d:d2:a8:e8:
5f:50:1b:97:5c:b9:12:08:1c:65:5c:08:95:73:de:
be:67:0e:7a:ce:ee:5f:e9:67:bb:7e:23:32:75:17:
6b:40:c5:8c:e0:f3:e0:c7:f2:92:99:a2:ee:55:53:
1b:d2:da:b8:0d:61:36:e9:ac:ff:40:38:d8:60:6f:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:4D:5A:D6:B6:A0:10:6A:05:31:49:F7:9B:3F:3C:C7:3B:40:2B
X509v3 Authority Key Identifier:
keyid:EB:06:B6:04:31:D6:C2:7A:81:D8:8B:9D:08:30:4C:BA:9C:88:14:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wa2BDHWwnqB2IudCDBMupyIFDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/iZhNWta2oBBqBTFJ95s_PMc7QCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.227.0/24
Signature Algorithm: sha256WithRSAEncryption
42:99:54:8d:f5:25:9b:41:ce:12:79:f7:20:58:36:dd:4f:ce:
06:4a:ce:bc:c5:16:c0:3c:c6:78:6b:be:f0:4b:6a:c6:bd:d2:
87:3d:b0:a1:7d:99:41:e9:2f:8a:9c:07:e1:90:b8:e6:84:79:
47:3d:2a:9e:d7:b9:58:23:53:d3:8c:cc:3e:57:a1:1e:42:48:
8f:a9:b8:2b:33:75:4d:c6:d1:f0:4c:94:47:11:3e:00:3a:34:
6c:63:62:59:37:c9:f0:ab:7b:c2:8d:79:82:c2:43:b7:ab:40:
c3:06:da:ae:7e:59:c8:9f:7e:29:42:3c:d0:d1:dc:e9:9c:12:
9b:48:bd:36:20:62:25:63:02:bf:bf:a8:86:1c:b3:68:2d:be:
1a:ab:0e:bc:43:a3:09:16:63:0e:cd:f9:3a:78:e8:95:bd:dc:
ea:bc:ea:e6:2f:92:14:97:73:a5:58:a8:17:48:25:cc:f9:92:
0c:29:2e:94:44:97:f7:29:dc:25:d9:86:17:52:2e:77:22:e4:
ff:86:94:5f:d0:ec:a8:cd:2a:d4:e0:c5:dc:a6:58:91:b1:36:
fd:f3:cf:57:9f:be:08:cc:3c:da:6a:fc:4b:df:91:7b:44:b7:
b9:2c:c4:18:7c:14:f5:5b:0b:19:ea:c5:9c:68:c6:65:1b:50:
16:e5:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 11:17:24 2023 by rpki-client on console-fra.rpki-client.org