Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/Scez6hAbCNlw6Z8K0V7stp90oNU.roa
File: Scez6hAbCNlw6Z8K0V7stp90oNU.roa (raw, json)
Hash identifier: t93ghZ3M0LnvSVCLFw3Skzz5TXCY85a3oKXb42s0+wY=
Subject key identifier: 49:C7:B3:EA:10:1B:08:D9:70:E9:9F:0A:D1:5E:EC:B6:9F:74:A0:D5
Certificate issuer: /CN=6e74ab70b64491aafa269072b7b0ccfc05530926
Certificate serial: 037D9743
Authority key identifier: 6E:74:AB:70:B6:44:91:AA:FA:26:90:72:B7:B0:CC:FC:05:53:09:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnSrcLZEkar6JpByt7DM_AVTCSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/Scez6hAbCNlw6Z8K0V7stp90oNU.roa
Signing time: Sat 11 Jun 2022 12:27:02 +0000
ROA not before: Sat 11 Jun 2022 12:27:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 91.199.106.0/24 maxlen: 24
91.218.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58562371 (0x37d9743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e74ab70b64491aafa269072b7b0ccfc05530926
Validity
Not Before: Jun 11 12:27:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49c7b3ea101b08d970e99f0ad15eecb69f74a0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:af:b9:2b:20:ec:43:34:77:b9:a5:d8:c1:
66:8b:d8:68:d9:fb:8e:eb:4d:d5:2b:f1:c7:4b:13:
95:cc:4a:66:43:74:3a:e2:1f:bd:40:5d:25:d4:c2:
5a:26:74:7e:17:dd:a8:1f:1f:44:4f:4f:4c:da:98:
92:72:2e:fd:5f:63:1b:60:ac:be:67:8b:4d:8e:14:
d7:49:bb:96:52:df:2b:61:d8:27:a6:cb:54:37:7c:
66:34:50:6e:7b:0a:2e:80:d1:0f:5e:25:25:68:c3:
2b:b0:28:3c:9d:6a:0d:d0:5c:1a:91:62:d0:c4:82:
d3:71:dc:2f:a1:c3:ac:0e:b1:32:8d:da:e9:ef:54:
80:f6:b7:0f:56:37:79:67:6e:00:b0:3b:18:87:1f:
f1:9d:53:d2:af:24:11:62:27:0f:68:4f:b4:dd:4b:
10:2b:4d:fd:3a:03:9d:16:6c:c7:ff:1c:38:f8:cf:
ce:47:14:79:25:ef:ba:91:c4:bf:a3:d4:e7:2c:c2:
ed:6d:86:87:ab:2b:18:dd:a2:8e:7b:02:68:70:f1:
a6:b2:15:65:15:19:41:14:d4:de:ed:1b:2a:c1:12:
59:53:b2:2f:49:9c:43:99:73:ef:ad:23:1e:53:16:
7a:2c:ce:98:51:e3:ba:05:02:4b:63:a2:af:7e:f9:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:B3:EA:10:1B:08:D9:70:E9:9F:0A:D1:5E:EC:B6:9F:74:A0:D5
X509v3 Authority Key Identifier:
keyid:6E:74:AB:70:B6:44:91:AA:FA:26:90:72:B7:B0:CC:FC:05:53:09:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnSrcLZEkar6JpByt7DM_AVTCSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/Scez6hAbCNlw6Z8K0V7stp90oNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/bnSrcLZEkar6JpByt7DM_AVTCSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.106.0/24
91.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
60:3e:25:ad:60:6e:1c:89:6c:fa:40:6b:03:2d:de:60:4b:ee:
73:e0:09:a6:f6:8f:12:ac:16:9c:a6:8f:63:fc:a9:e8:c9:df:
20:0e:49:b1:17:da:9c:0f:f0:85:55:be:22:6f:43:a8:24:7b:
2f:4a:61:54:d8:e4:a6:2c:e0:86:a5:c3:95:e3:59:f7:0f:0d:
07:f4:08:5b:ba:f4:9a:11:89:84:3b:70:7c:d2:0f:02:bf:61:
e9:7d:1c:8c:b7:aa:e9:3e:77:8c:98:cc:48:65:07:60:39:f2:
9b:fc:4a:8c:4c:82:4b:d5:d1:c2:98:cc:07:62:98:28:26:45:
60:1b:a6:4f:e6:93:c6:aa:64:c5:99:0c:16:3f:b0:49:49:ac:
48:0e:cc:fc:9f:ed:77:ac:c2:89:3e:24:94:b9:91:4a:02:f8:
8d:bd:17:68:91:d7:28:ec:1f:7f:e2:3c:b5:c3:08:5c:4a:8c:
68:1b:00:e6:e4:f0:60:88:c7:73:7e:ad:9d:3c:e4:73:1f:20:
46:fb:fd:04:f0:66:e9:03:b1:97:76:f1:0c:fe:35:c7:68:51:
61:66:10:88:c7:95:19:57:90:60:84:b1:65:29:12:9f:4b:b8:
ac:54:c9:2d:7e:09:1a:d9:00:bd:78:f6:54:e6:3f:5a:d7:da:
e1:c8:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:02 2024 by rpki-client on console-fra.rpki-client.org