Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/196d22-8aed-49fd-8192-cbc05dd30bd9/1/gJEN9fpezyBaN46lGpRHrK88o5k.roa
File: gJEN9fpezyBaN46lGpRHrK88o5k.roa (raw, json)
Hash identifier: L3C929MFXGu9+5KYVIL23roCOpXUlgn1wBq/YW3N8qk=
Subject key identifier: 80:91:0D:F5:FA:5E:CF:20:5A:37:8E:A5:1A:94:47:AC:AF:3C:A3:99
Certificate issuer: /CN=1e38f7d1bf92bbabfd9451c51503b1d442fb954e
Certificate serial: 01856DE67A5502BBE9F125972249100DC987
Authority key identifier: 1E:38:F7:D1:BF:92:BB:AB:FD:94:51:C5:15:03:B1:D4:42:FB:95:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hjj30b-Su6v9lFHFFQOx1EL7lU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/196d22-8aed-49fd-8192-cbc05dd30bd9/1/gJEN9fpezyBaN46lGpRHrK88o5k.roa
Signing time: Sun 01 Jan 2023 15:14:59 +0000
ROA not before: Sun 01 Jan 2023 15:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47527
IP address blocks: 91.230.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:7a:55:02:bb:e9:f1:25:97:22:49:10:0d:c9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e38f7d1bf92bbabfd9451c51503b1d442fb954e
Validity
Not Before: Jan 1 15:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80910df5fa5ecf205a378ea51a9447acaf3ca399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:ff:25:b9:6e:ee:b7:bd:be:cd:6a:74:e2:
db:75:b4:c2:b0:e2:5a:eb:0b:1c:b8:c9:a6:f6:22:
45:18:d7:b3:a1:ef:72:22:da:71:7f:00:67:07:20:
36:38:a0:99:d8:d8:45:e7:07:f1:a4:e6:60:59:61:
e2:da:a6:fb:16:f4:1f:9f:39:9c:c9:81:49:50:43:
ad:d6:7a:35:a3:d2:eb:11:40:2a:aa:a8:ad:ec:a4:
8d:ca:53:91:9d:71:54:e8:69:d6:f3:3b:4c:1b:98:
c6:c7:5d:36:99:af:e3:76:2e:d4:fa:b8:56:91:df:
ef:30:51:96:52:eb:f3:04:af:58:b5:6d:b6:e8:ea:
ab:a8:c3:c3:9f:e2:56:33:68:d4:da:86:47:26:29:
f4:14:33:c9:d7:59:0f:68:af:bb:11:6e:2d:e4:03:
ae:82:63:15:6e:e9:24:39:e5:46:d0:9c:42:39:ba:
ea:06:00:fa:1c:71:0a:11:46:da:f1:fb:74:c7:40:
db:d4:aa:fb:a3:a0:d1:ad:99:56:b5:14:34:52:8d:
0d:92:b5:dd:ac:14:39:bb:3a:68:67:51:f8:5b:80:
da:49:14:b7:98:d2:dd:fe:87:1f:51:c9:06:93:54:
69:e2:52:ad:6a:36:5a:2e:92:0c:74:ec:df:a3:fd:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:0D:F5:FA:5E:CF:20:5A:37:8E:A5:1A:94:47:AC:AF:3C:A3:99
X509v3 Authority Key Identifier:
keyid:1E:38:F7:D1:BF:92:BB:AB:FD:94:51:C5:15:03:B1:D4:42:FB:95:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjj30b-Su6v9lFHFFQOx1EL7lU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/196d22-8aed-49fd-8192-cbc05dd30bd9/1/gJEN9fpezyBaN46lGpRHrK88o5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/196d22-8aed-49fd-8192-cbc05dd30bd9/1/Hjj30b-Su6v9lFHFFQOx1EL7lU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.239.0/24
Signature Algorithm: sha256WithRSAEncryption
74:44:33:ab:96:ba:5b:f0:c0:11:3c:da:e1:8e:9e:2f:08:df:
77:11:4e:57:ca:f1:50:de:70:6b:88:e8:fa:d6:c7:1a:f2:8b:
96:9d:4d:f6:90:ed:3c:7e:3f:a8:28:a6:ba:bb:8a:2d:d1:00:
eb:0d:b9:6e:54:60:d5:dd:ce:f5:fe:d4:24:34:b9:e1:06:ea:
d7:80:b4:c5:e1:69:ef:e8:a5:7a:65:27:ea:a8:2a:8e:a1:8e:
f9:f1:e5:30:14:5e:89:9a:39:eb:40:70:49:e8:50:b9:22:97:
c1:94:5c:f9:4c:60:93:df:77:0f:d4:a5:a9:91:69:a2:3d:9f:
8b:92:c8:37:de:13:f9:0f:c0:4e:79:1d:9c:03:16:f1:63:98:
66:0d:f5:06:61:c3:61:65:ab:1d:40:2e:16:73:bc:eb:d3:26:
02:fa:95:31:05:d1:97:2e:89:7f:1f:2c:39:85:3a:af:26:40:
bc:95:58:64:1e:94:a2:33:c3:91:74:3b:d1:4f:6e:bf:d6:00:
41:37:ad:b6:9c:04:ed:31:9c:80:82:5c:60:17:fc:bc:86:6f:
27:36:20:9e:e5:80:91:43:41:41:b4:a7:39:d6:0e:f0:a4:41:
20:fe:39:87:d8:08:46:5f:ac:99:63:31:ae:57:4f:a3:93:11:
4e:b3:ab:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 10:13:32 2023 by rpki-client on console-fra.rpki-client.org