Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/tCU74A4Xmf-NtN5XtdtNjBwk9dQ.roa
File: tCU74A4Xmf-NtN5XtdtNjBwk9dQ.roa (raw, json)
Hash identifier: 22fdJ6s3M3ffY77+u8dCXZBC5UwvB0+CnzSEa9gphSU=
Subject key identifier: B4:25:3B:E0:0E:17:99:FF:8D:B4:DE:57:B5:DB:4D:8C:1C:24:F5:D4
Certificate issuer: /CN=bc696339adb8e888be95040e1c83da7f95bbb385
Certificate serial: 01856DCAE76D3FF5E4E00FBE8BD87A74BDD0
Authority key identifier: BC:69:63:39:AD:B8:E8:88:BE:95:04:0E:1C:83:DA:7F:95:BB:B3:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGljOa246Ii-lQQOHIPaf5W7s4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/tCU74A4Xmf-NtN5XtdtNjBwk9dQ.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 91.205.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e7:6d:3f:f5:e4:e0:0f:be:8b:d8:7a:74:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc696339adb8e888be95040e1c83da7f95bbb385
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4253be00e1799ff8db4de57b5db4d8c1c24f5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fa:16:5e:b0:76:80:47:b3:17:82:b6:78:21:
80:44:1f:5f:06:ab:98:ff:1f:f1:6a:e2:44:ea:6a:
26:01:b8:9f:d9:91:db:18:db:0d:53:48:6d:98:69:
b0:69:28:ae:c5:a7:78:d1:08:bb:c2:fd:5d:d1:52:
ad:b8:a1:f8:81:49:22:af:59:df:79:84:20:44:3c:
04:46:92:0d:ba:bf:10:43:fe:7f:b3:7e:b3:e4:c6:
19:48:be:af:e1:d7:a6:48:ad:42:71:53:72:b8:d2:
e4:74:a7:02:fa:a6:01:3f:46:2e:2d:b4:0f:2b:f4:
60:51:6b:2e:72:60:dd:de:9a:6a:95:73:66:13:9f:
09:45:85:e5:f2:2d:f1:a5:7c:56:49:ee:b3:c9:57:
4d:8c:a6:43:bb:e7:3b:8e:e5:3d:b0:3e:36:ea:e3:
f9:f9:01:90:84:32:42:df:87:cf:11:a2:dc:04:8a:
0f:c2:ae:90:e5:4c:fa:92:fd:eb:c0:85:9b:f1:20:
81:c7:8f:8f:e7:4d:97:14:76:e9:24:65:0d:3d:7a:
c1:d2:22:5f:52:5e:ee:77:37:76:6e:c5:04:d5:b0:
bd:2c:9f:1f:90:c9:cd:ba:b0:f9:85:37:5e:90:da:
90:6c:67:e3:36:c9:6a:cb:65:6f:ca:19:3b:57:f2:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:3B:E0:0E:17:99:FF:8D:B4:DE:57:B5:DB:4D:8C:1C:24:F5:D4
X509v3 Authority Key Identifier:
keyid:BC:69:63:39:AD:B8:E8:88:BE:95:04:0E:1C:83:DA:7F:95:BB:B3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGljOa246Ii-lQQOHIPaf5W7s4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/tCU74A4Xmf-NtN5XtdtNjBwk9dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/vGljOa246Ii-lQQOHIPaf5W7s4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.192.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:7b:cf:a6:23:9f:79:21:2f:32:ca:c2:f1:74:58:05:7c:af:
af:c7:c4:1e:61:24:41:03:95:e0:57:76:eb:4c:56:cd:5a:b9:
f9:63:fe:8c:10:21:93:8d:90:de:1a:5e:4d:33:1c:87:6c:a1:
41:de:c5:84:df:df:d4:c1:54:21:6e:f9:b8:a3:cc:83:dc:95:
9b:1e:a1:71:2a:cd:6a:f9:f9:11:62:fc:3c:e5:06:30:bf:42:
d8:e6:d8:77:38:6c:5d:7b:d5:82:bf:3c:69:7f:47:d8:92:a9:
9e:73:15:1b:38:18:4f:29:50:34:11:30:22:f2:bf:4a:f2:b3:
a8:a5:7c:78:6c:57:c5:1d:e6:76:60:bf:70:f2:4f:27:35:c2:
4c:a1:fa:70:ec:5e:5e:c8:5c:0a:c9:14:b8:86:96:75:6c:f6:
f5:47:63:96:b7:01:08:a7:01:6a:1d:66:ff:dd:4a:b8:e0:fa:
ef:17:15:d9:e3:f4:28:82:41:97:d5:f5:ee:60:67:23:3c:db:
8c:0b:89:f8:42:be:8c:75:8d:3f:8d:16:0d:b5:89:70:3a:30:
10:58:b3:6a:aa:2e:04:99:c5:9b:c9:01:87:c5:5f:26:56:dd:
e6:2c:4e:14:76:96:5c:ca:f6:e7:23:70:7c:b5:37:1a:e0:00:
05:26:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:02 2024 by rpki-client on console-fra.rpki-client.org