Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ff649-9617-48bd-99b6-93581e44901e/1/lXt7MF_YQUqAJrWDxLtQuQRREeI.roa
File: lXt7MF_YQUqAJrWDxLtQuQRREeI.roa (raw, json)
Hash identifier: LaR8oWUBRUD+UvCj6or8XjAqIfWrw040QOEaHsujMSE=
Subject key identifier: 95:7B:7B:30:5F:D8:41:4A:80:26:B5:83:C4:BB:50:B9:04:51:11:E2
Certificate issuer: /CN=dbaaab622fb7af6ba56d0d26022fe8712e374827
Certificate serial: 018EAEFCEA82F61E042F7825676D16D96920
Authority key identifier: DB:AA:AB:62:2F:B7:AF:6B:A5:6D:0D:26:02:2F:E8:71:2E:37:48:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26qrYi-3r2ulbQ0mAi_ocS43SCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ff649-9617-48bd-99b6-93581e44901e/1/lXt7MF_YQUqAJrWDxLtQuQRREeI.roa
Signing time: Fri 05 Apr 2024 15:59:54 +0000
ROA not before: Fri 05 Apr 2024 15:59:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39704
IP address blocks: 91.208.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:fc:ea:82:f6:1e:04:2f:78:25:67:6d:16:d9:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaaab622fb7af6ba56d0d26022fe8712e374827
Validity
Not Before: Apr 5 15:59:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=957b7b305fd8414a8026b583c4bb50b9045111e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:95:b8:e6:0c:b7:66:29:0a:16:77:9f:6b:
ef:48:08:1b:1e:e3:32:b8:96:e3:3c:57:b0:9a:5c:
cc:68:8f:f5:ec:f2:5e:a6:d0:4a:10:9e:f9:b5:53:
60:ad:36:ac:50:a5:d3:86:a2:c9:b5:be:38:e6:97:
fc:45:7a:2a:76:e3:b2:77:b4:d7:8b:30:9a:48:67:
4d:34:b2:e0:27:64:73:87:0d:b6:2e:dc:56:f4:cc:
59:78:8e:84:24:a8:6b:a2:c1:23:75:1d:e8:b9:c0:
5f:97:f8:db:c7:5a:7c:db:10:e7:c1:bd:7c:90:f7:
b3:6c:f4:d0:64:2c:3e:ea:9a:ec:91:1f:0f:02:0c:
98:6c:48:ea:8c:ff:3f:1b:85:69:78:f3:94:9b:85:
c1:b6:9e:28:8e:2b:b1:69:e9:9d:4e:c9:43:58:ad:
4c:8a:22:82:34:00:d3:e8:72:69:ae:12:e1:25:ee:
2d:4d:ed:f5:39:c3:46:cd:70:82:d2:33:6d:70:f7:
47:1d:b4:16:4e:90:23:6c:0d:68:d9:03:2c:21:f0:
29:90:ba:c8:69:4e:20:b3:ad:01:6e:81:78:61:df:
af:15:bc:ed:64:ba:48:d5:91:1d:a1:bf:bd:42:35:
08:a4:57:a6:03:1d:db:d9:90:d0:8f:1e:46:9a:65:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7B:7B:30:5F:D8:41:4A:80:26:B5:83:C4:BB:50:B9:04:51:11:E2
X509v3 Authority Key Identifier:
keyid:DB:AA:AB:62:2F:B7:AF:6B:A5:6D:0D:26:02:2F:E8:71:2E:37:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26qrYi-3r2ulbQ0mAi_ocS43SCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ff649-9617-48bd-99b6-93581e44901e/1/lXt7MF_YQUqAJrWDxLtQuQRREeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ff649-9617-48bd-99b6-93581e44901e/1/26qrYi-3r2ulbQ0mAi_ocS43SCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.60.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ec:e7:b2:98:b9:3f:43:ba:a8:04:2c:8f:b3:4d:f8:08:2c:
dc:de:37:ab:54:8d:8b:84:c5:ba:b3:cb:49:53:0d:87:07:e1:
69:55:25:5d:b4:8e:67:62:4a:cb:d9:d9:e0:27:5b:eb:89:67:
c6:c5:e0:9c:13:9f:45:e0:ee:44:b4:ed:d7:10:50:d4:86:cf:
37:ec:18:a3:b9:73:fb:fe:51:ee:1a:20:c5:ef:43:c2:37:c1:
31:cf:bb:c9:f5:6f:17:5d:20:0e:15:6a:cd:d3:94:1a:23:9a:
3b:5f:ec:7b:96:47:36:db:e1:0e:00:59:73:57:cb:c7:3d:f7:
cb:a1:de:5b:84:c1:81:ff:0a:8d:07:af:d7:5e:07:ee:2c:5c:
79:57:1f:ba:e0:e5:1f:0c:c7:ba:c7:fb:15:45:a0:c0:2f:d8:
e3:6c:69:20:78:e3:2c:f6:01:02:f7:a9:d6:e9:22:07:eb:5b:
b7:93:67:ea:0f:09:49:01:e5:02:eb:00:cc:ea:77:ec:1d:fd:
24:a1:5b:19:03:c9:ee:08:6b:74:86:48:fc:d4:ff:99:bd:f7:
75:a1:31:2d:25:a2:1e:52:b0:fd:07:85:51:bf:83:e1:7b:d9:
29:f5:a5:f8:30:38:7b:27:5a:ac:eb:1a:e0:a6:aa:92:c1:85:
51:06:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 11:23:04 2024 by rpki-client on console-fra.rpki-client.org