Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/e30RmJq-5yCHHNM35T9oggWppcQ.roa
File: e30RmJq-5yCHHNM35T9oggWppcQ.roa (raw, json)
Hash identifier: wnj9KkvdyLLfAPIL0LW1fB7wrWjdgjwrPyBl4Q/xV5s=
Subject key identifier: 7B:7D:11:98:9A:BE:E7:20:87:1C:D3:37:E5:3F:68:82:05:A9:A5:C4
Certificate issuer: /CN=2564be81ecbc14d874027bf23b9dec3f7f2080eb
Certificate serial: 01882D6B1BC4E1B80537BA35692805240487
Authority key identifier: 25:64:BE:81:EC:BC:14:D8:74:02:7B:F2:3B:9D:EC:3F:7F:20:80:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWS-gey8FNh0AnvyO53sP38ggOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/e30RmJq-5yCHHNM35T9oggWppcQ.roa
Signing time: Thu 18 May 2023 05:52:54 +0000
ROA not before: Thu 18 May 2023 05:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205134
IP address blocks: 91.216.171.0/24 maxlen: 24
2a12:d9c0:1::/48 maxlen: 48
2a12:d9c0::/29 maxlen: 29
2a12:d9c0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:6b:1b:c4:e1:b8:05:37:ba:35:69:28:05:24:04:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2564be81ecbc14d874027bf23b9dec3f7f2080eb
Validity
Not Before: May 18 05:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b7d11989abee720871cd337e53f688205a9a5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:d3:65:37:28:9e:da:ed:93:20:dd:e8:a9:
c1:34:6a:7e:f2:8f:e3:50:f7:1d:61:9d:b3:bb:39:
66:9b:26:9e:ba:65:c5:b0:7f:33:9a:4a:18:f1:f8:
9f:50:d0:a3:6a:8b:20:55:bc:fa:13:1d:2e:12:08:
c3:e2:bf:a8:0d:6a:ff:f8:a7:ae:72:24:34:eb:e0:
41:6d:33:92:35:bd:63:30:d7:a8:f3:91:65:9c:6b:
6e:fd:81:69:ae:a2:76:b5:ec:75:fe:6b:f9:a4:a9:
f9:3c:b0:23:57:fa:15:49:6d:75:48:59:67:c3:d1:
18:a8:b4:23:e6:80:49:a6:ed:cf:9b:a6:5c:66:f5:
8f:56:58:e3:4e:65:65:b2:2f:b4:53:4d:25:9e:65:
0f:17:cc:74:f8:01:c2:75:98:2c:db:bd:7d:cc:51:
2b:ad:4a:90:47:7a:67:22:76:fd:a8:46:83:9b:ae:
41:39:0e:36:e1:48:43:66:43:ab:0c:e8:4d:5f:33:
79:82:9b:02:17:65:e6:04:fa:8e:48:7e:b9:72:66:
21:97:6c:fe:d9:d2:0a:a7:3f:9d:6c:bd:3b:24:0f:
74:24:8e:58:bd:d6:69:53:bc:55:07:e6:de:20:46:
22:57:06:74:9d:72:35:f4:58:23:4e:77:d6:60:2b:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:11:98:9A:BE:E7:20:87:1C:D3:37:E5:3F:68:82:05:A9:A5:C4
X509v3 Authority Key Identifier:
keyid:25:64:BE:81:EC:BC:14:D8:74:02:7B:F2:3B:9D:EC:3F:7F:20:80:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWS-gey8FNh0AnvyO53sP38ggOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/e30RmJq-5yCHHNM35T9oggWppcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/JWS-gey8FNh0AnvyO53sP38ggOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.171.0/24
IPv6:
2a12:d9c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:0f:0d:d6:74:f0:ff:c4:d8:f4:aa:56:8f:b4:d2:f9:28:5d:
a1:96:97:90:64:12:8d:ba:e5:4e:83:aa:9a:5b:d6:2d:19:85:
91:22:43:29:95:07:d9:49:a0:70:7f:e2:25:fd:e5:f3:b6:bc:
d2:db:79:a1:37:7b:d0:04:f8:15:a1:a6:7b:9a:62:eb:05:67:
e8:55:39:6c:0e:98:0f:1e:5f:aa:b1:b2:9d:4c:95:8a:89:11:
15:ce:0d:2b:97:97:30:08:7f:35:4b:b6:e2:10:9e:74:36:95:
56:8a:92:44:c0:7e:75:3e:4c:35:fa:61:37:fe:f4:7f:d1:95:
b3:c0:17:c0:95:10:f1:ae:94:ac:30:c0:80:90:d7:5d:5c:7e:
4b:a1:6b:0a:c7:a4:bf:6d:35:f8:51:16:7a:17:20:2e:9c:cf:
b1:5e:0a:fa:8e:20:f6:7b:2c:93:0d:7f:f6:61:3d:a3:c2:fa:
67:a4:69:95:ca:50:44:dc:b6:7c:51:39:36:e7:c5:30:b8:b4:
2f:a1:00:10:89:39:6e:a7:c8:16:48:a1:a4:10:fe:b9:b1:e2:
c8:9f:96:3b:d8:e9:9d:1a:64:9a:89:af:94:20:fa:51:c3:6f:
1f:8b:64:49:b2:e4:cb:94:8a:77:82:88:80:64:b1:b6:a2:33:
c2:b5:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:47 2024 by rpki-client on console-fra.rpki-client.org