Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/42e1d9-a5c5-4981-a10b-64066c3cd5cb/1/SlGWxc9DFPByygsGdZl99v8B924.roa
File: SlGWxc9DFPByygsGdZl99v8B924.roa (raw, json)
Hash identifier: fsAaYC7IgA+Ipup8ad3n1k7ZoCcNJxpEpNIesRjvcJs=
Subject key identifier: 4A:51:96:C5:CF:43:14:F0:72:CA:0B:06:75:99:7D:F6:FF:01:F7:6E
Certificate issuer: /CN=d429b062d18b998103c7b4ff7c8ff802ac6e11bb
Certificate serial: 035F4060
Authority key identifier: D4:29:B0:62:D1:8B:99:81:03:C7:B4:FF:7C:8F:F8:02:AC:6E:11:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CmwYtGLmYEDx7T_fI_4AqxuEbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/42e1d9-a5c5-4981-a10b-64066c3cd5cb/1/SlGWxc9DFPByygsGdZl99v8B924.roa
Signing time: Sat 01 Jan 2022 06:04:11 +0000
ROA not before: Sat 01 Jan 2022 06:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48449
IP address blocks: 91.209.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56574048 (0x35f4060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d429b062d18b998103c7b4ff7c8ff802ac6e11bb
Validity
Not Before: Jan 1 06:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a5196c5cf4314f072ca0b0675997df6ff01f76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:d2:d6:97:cc:0a:05:40:ee:c5:00:05:0d:
72:25:f1:f8:59:f8:dc:49:36:2c:6d:10:64:f0:ea:
d9:15:7c:84:04:b5:4f:4c:f9:21:e9:de:16:8e:99:
e2:bf:df:b2:8a:47:c1:1c:68:e3:fa:17:49:06:d2:
98:87:6e:2b:e4:55:f8:62:21:b3:8d:67:81:c5:98:
31:84:0a:40:c5:91:7a:f8:58:cd:5e:e2:74:ad:a4:
d3:88:64:12:58:98:ce:0b:92:9d:6c:32:5b:76:26:
16:2c:3b:73:9f:9f:de:a3:c8:79:f3:04:d5:32:81:
d8:ce:cc:07:7c:5c:2d:ab:68:fe:ce:e8:8d:1b:5a:
73:ed:ec:c5:d3:8b:ac:e3:5a:52:6c:02:9b:bb:ac:
cc:fb:96:81:fc:31:37:a6:63:e2:7b:fe:24:f5:3f:
2a:c0:da:d4:f2:4d:09:0f:41:4e:70:e4:71:18:a3:
15:a6:6f:de:43:0d:74:73:81:9b:f6:60:ae:c3:10:
f8:f9:b7:3f:6c:75:ed:ae:77:f5:58:ec:88:d2:bf:
95:64:86:a5:07:39:3b:ac:af:35:87:89:b7:e6:43:
92:1d:6a:d5:27:54:3d:12:24:bb:76:73:ff:3d:7b:
33:48:f8:d9:6b:e7:be:4d:95:78:95:01:58:8f:76:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:96:C5:CF:43:14:F0:72:CA:0B:06:75:99:7D:F6:FF:01:F7:6E
X509v3 Authority Key Identifier:
keyid:D4:29:B0:62:D1:8B:99:81:03:C7:B4:FF:7C:8F:F8:02:AC:6E:11:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CmwYtGLmYEDx7T_fI_4AqxuEbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/42e1d9-a5c5-4981-a10b-64066c3cd5cb/1/SlGWxc9DFPByygsGdZl99v8B924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/42e1d9-a5c5-4981-a10b-64066c3cd5cb/1/1CmwYtGLmYEDx7T_fI_4AqxuEbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:99:82:73:da:0b:64:ec:c6:be:a8:4a:6d:60:cf:a0:1f:29:
8d:bd:72:ea:0d:38:61:f1:9e:56:02:b6:0e:22:92:b9:12:1f:
0b:b5:4e:5b:3f:f7:58:b0:92:5a:84:1e:c8:c6:10:46:db:95:
85:3f:8d:52:a0:66:bb:2d:36:b4:be:c2:ba:36:dc:e2:0a:c8:
dd:59:c6:0e:9c:0f:9e:3d:33:5d:4c:d4:59:1e:fb:58:38:15:
e9:38:a9:bb:03:58:fb:5b:ff:b8:7e:b4:28:d4:7c:76:bd:25:
d8:8a:ee:a3:89:57:93:03:1a:f3:3a:7e:0d:76:a1:08:e7:84:
5d:1a:55:21:a5:b0:9d:8e:b4:05:d5:c9:47:72:ec:54:e8:d2:
97:1c:bd:c9:a8:03:ed:7a:37:ac:e2:27:ea:83:e3:95:e2:6a:
e5:8e:40:89:56:c2:c1:7c:b4:98:54:08:66:9b:cc:63:8c:b2:
a9:1e:25:e4:f7:9b:42:69:f5:31:27:e5:76:f2:45:3f:ae:d4:
74:ca:9e:8a:e5:c5:f4:18:21:63:d8:f2:a7:0d:1a:86:a0:02:
e4:46:3f:3a:18:a5:b3:9c:24:84:65:6f:46:e4:16:3b:83:c4:
51:7f:78:fa:33:a3:17:94:c9:c2:fb:71:8b:4d:98:b3:7c:b7:
a5:d9:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:51 2024 by rpki-client on console-ams.rpki-client.org