Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/36d4d3-d080-437c-b7d4-1ceb5e22a0a9/1/9KhCp3cspfBqybGCsie6ZBH5Mq8.roa
File: 9KhCp3cspfBqybGCsie6ZBH5Mq8.roa (raw, json)
Hash identifier: Y/MyGMhUJGOuyC7iP8DHUDYEMaxeiJEiz5rgbKnEpjQ=
Subject key identifier: F4:A8:42:A7:77:2C:A5:F0:6A:C9:B1:82:B2:27:BA:64:11:F9:32:AF
Certificate issuer: /CN=5b2e6a6544448d26073916ca88c4375e4ba79d2e
Certificate serial: 02674C15
Authority key identifier: 5B:2E:6A:65:44:44:8D:26:07:39:16:CA:88:C4:37:5E:4B:A7:9D:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy5qZUREjSYHORbKiMQ3XkunnS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/36d4d3-d080-437c-b7d4-1ceb5e22a0a9/1/9KhCp3cspfBqybGCsie6ZBH5Mq8.roa
Signing time: Sat 01 Jan 2022 13:07:37 +0000
ROA not before: Sat 01 Jan 2022 13:07:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197648
IP address blocks: 91.223.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40324117 (0x2674c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2e6a6544448d26073916ca88c4375e4ba79d2e
Validity
Not Before: Jan 1 13:07:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4a842a7772ca5f06ac9b182b227ba6411f932af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:c2:7a:a2:01:17:de:20:dc:d5:fa:7f:09:
e3:7e:57:54:5c:98:44:bc:de:71:6e:9f:9e:10:42:
f1:85:95:39:9c:31:4a:0d:75:aa:c0:14:d6:e9:b2:
84:93:2c:c1:b6:4e:89:ed:50:14:8b:03:1b:e1:55:
ec:e3:b6:cf:c5:9a:48:81:af:7c:c5:7f:99:3d:ea:
72:18:9b:9f:b3:62:e6:77:98:0f:8a:70:20:c9:64:
11:d1:9b:d5:57:48:35:5e:72:cd:8e:ed:1c:25:86:
75:92:5b:39:08:b0:a1:92:d2:ae:a5:39:ef:0b:90:
6d:2e:20:5f:8a:20:61:ae:73:92:35:48:7b:22:87:
b9:a6:8f:b0:57:47:e5:b4:3d:b5:a7:e3:65:ba:56:
ff:8a:8d:4a:ea:6c:af:a8:9b:04:9b:c4:fb:33:6d:
23:17:0e:76:f6:94:59:48:19:80:6a:f3:25:7d:3c:
1e:c4:82:64:12:ae:f6:ba:48:1b:74:f5:ac:28:bb:
c7:06:b1:4e:63:26:11:d6:27:bb:c3:52:f1:54:1d:
e1:8a:24:3a:5e:b0:76:7e:d4:73:1c:57:05:f2:eb:
06:9b:aa:ed:95:b3:5f:b9:a2:77:51:f3:21:8c:be:
42:01:23:c6:17:9a:a9:8e:6e:fe:f7:21:36:06:69:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A8:42:A7:77:2C:A5:F0:6A:C9:B1:82:B2:27:BA:64:11:F9:32:AF
X509v3 Authority Key Identifier:
keyid:5B:2E:6A:65:44:44:8D:26:07:39:16:CA:88:C4:37:5E:4B:A7:9D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy5qZUREjSYHORbKiMQ3XkunnS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/36d4d3-d080-437c-b7d4-1ceb5e22a0a9/1/9KhCp3cspfBqybGCsie6ZBH5Mq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/36d4d3-d080-437c-b7d4-1ceb5e22a0a9/1/Wy5qZUREjSYHORbKiMQ3XkunnS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.208.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b8:bb:b3:38:38:b7:32:c2:2f:04:2f:f8:51:01:3c:36:c4:
2a:28:bd:6e:79:b8:c6:b1:2d:22:56:e8:05:aa:12:1b:2a:bf:
c5:21:c7:bf:52:da:97:33:cc:8b:24:5b:79:78:3d:58:a6:28:
27:cc:2e:88:84:00:1a:e7:fd:1c:0b:98:36:80:93:6c:76:a0:
86:bf:0e:65:46:83:0c:f1:1d:f6:d1:91:23:11:2e:43:ee:c6:
42:89:e6:f4:50:cb:af:db:cd:a0:23:23:1a:23:e4:a5:f8:9d:
92:65:3d:72:ea:1c:f3:af:3f:63:f7:b6:e6:c1:28:78:e6:19:
0b:c5:c4:b9:fb:29:80:fd:c6:d2:d8:44:51:39:f2:cf:90:30:
7b:ab:f8:cb:16:16:91:e6:42:f9:e7:17:7c:43:90:4a:eb:b1:
48:1d:36:b4:2c:b8:62:64:09:dd:99:b8:4e:5c:f8:30:fb:95:
fa:ef:4c:a4:21:99:cf:2f:58:81:90:ea:88:2b:4c:83:3c:f3:
b7:7a:9f:25:b8:5b:e3:40:89:76:22:44:ad:df:5d:3f:59:2a:
ad:1b:eb:c5:96:db:51:8b:c0:11:0e:a5:50:72:e4:ec:96:65:
9c:06:be:22:12:9c:c0:ca:6b:72:31:b9:e0:4e:c4:18:b9:d3:
bb:d7:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:29 2024 by rpki-client on console-fra.rpki-client.org