Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3f690b-4fe3-461a-b1b7-2bb9dd2f7a60/1/mx-EJkSImRzsWZgpakuqMjp4xwo.roa
File: mx-EJkSImRzsWZgpakuqMjp4xwo.roa (raw, json)
Hash identifier: dz7G1hGsCkC7HtH2Yf8BRycGqK6xwobPWPFtXEnoF88=
Subject key identifier: 9B:1F:84:26:44:88:99:1C:EC:59:98:29:6A:4B:AA:32:3A:78:C7:0A
Certificate issuer: /CN=7a991241e4dc5937efb38d0820dd2429bc2a1451
Certificate serial: 051C163A
Authority key identifier: 7A:99:12:41:E4:DC:59:37:EF:B3:8D:08:20:DD:24:29:BC:2A:14:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epkSQeTcWTfvs40IIN0kKbwqFFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3f690b-4fe3-461a-b1b7-2bb9dd2f7a60/1/mx-EJkSImRzsWZgpakuqMjp4xwo.roa
Signing time: Sat 01 Jan 2022 11:03:23 +0000
ROA not before: Sat 01 Jan 2022 11:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47535
IP address blocks: 91.204.174.0/24 maxlen: 24
91.204.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85726778 (0x51c163a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a991241e4dc5937efb38d0820dd2429bc2a1451
Validity
Not Before: Jan 1 11:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b1f84264488991cec5998296a4baa323a78c70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:18:c1:ff:de:5d:7a:23:ee:e3:ff:46:dc:
fb:50:42:58:d9:af:d5:da:34:b5:eb:7c:28:f4:ba:
af:18:ed:12:f3:c6:6a:79:23:43:15:a9:ff:f7:66:
ac:2f:6d:f7:ea:fb:46:94:f4:19:81:4b:26:3a:e5:
7f:39:33:98:71:e3:eb:43:b4:72:21:ed:40:6f:12:
c6:fb:dc:40:29:b3:19:b8:59:72:75:ee:87:88:16:
db:bd:b2:b5:06:d6:cb:35:80:71:94:b5:93:c1:f0:
c6:ea:f9:4d:c1:75:6d:2e:a0:6e:d2:05:c0:6b:89:
3c:79:c3:aa:a0:1f:f9:26:a2:e5:ca:5f:93:fb:55:
dd:01:5d:d2:a5:6f:da:45:67:4b:83:ba:db:b8:27:
8e:d7:d8:86:66:0f:21:52:1e:2b:12:38:44:44:83:
69:7d:4e:ad:18:dd:37:ec:33:97:30:cd:96:c0:a6:
68:c5:6f:c4:11:fd:ad:bc:8d:6d:ed:6e:b4:c5:bb:
43:fa:96:82:30:cc:4e:ec:37:f0:f0:e9:0f:f9:f8:
06:5f:97:cc:51:b4:2a:f5:fc:7c:ef:36:33:77:b1:
d1:e4:6a:84:97:5a:5a:6b:a4:1f:3d:3b:b4:59:90:
b6:21:28:40:22:fb:2b:38:7a:89:2f:67:d2:da:fe:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:84:26:44:88:99:1C:EC:59:98:29:6A:4B:AA:32:3A:78:C7:0A
X509v3 Authority Key Identifier:
keyid:7A:99:12:41:E4:DC:59:37:EF:B3:8D:08:20:DD:24:29:BC:2A:14:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epkSQeTcWTfvs40IIN0kKbwqFFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3f690b-4fe3-461a-b1b7-2bb9dd2f7a60/1/mx-EJkSImRzsWZgpakuqMjp4xwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3f690b-4fe3-461a-b1b7-2bb9dd2f7a60/1/epkSQeTcWTfvs40IIN0kKbwqFFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:1d:2a:bc:b5:16:55:9b:a5:47:a0:60:ac:cf:ff:4a:b8:4d:
d4:f1:1c:b5:2d:d6:71:19:e3:e6:ad:20:ec:bd:2d:e7:f5:6e:
f2:ff:0a:b2:83:8a:58:24:93:3a:5e:db:d3:30:03:47:11:3c:
4a:d5:92:a0:5a:b3:f8:c3:8e:7e:b5:65:39:a1:83:7a:f6:fc:
18:56:e0:f5:a5:91:72:32:e0:07:29:92:7d:59:0f:6f:cb:ac:
d2:8f:36:7f:f8:ec:5b:bc:a2:e6:e2:17:c7:fd:39:ce:cb:ee:
76:3f:f8:ff:76:a6:99:cc:1d:a4:33:7f:0c:53:e0:06:88:9e:
80:49:aa:b4:05:48:e8:23:fb:ca:8b:c3:ce:85:d5:b9:bc:60:
13:fe:ae:2e:ab:4c:f3:d7:8f:8b:d4:8e:7d:70:80:da:79:a0:
d9:e0:16:d6:f9:af:39:96:94:8a:9b:0f:06:d6:52:26:12:38:
c4:be:6b:ce:d5:2d:f3:66:83:1f:3e:35:b7:b7:10:94:6e:9e:
7c:94:d9:ed:bc:8c:b1:d5:3c:44:81:a7:e2:ff:a7:54:15:e9:
12:dd:47:54:f5:41:0a:e1:9d:2c:d2:27:dc:95:56:8c:52:9a:
42:e0:da:76:8c:95:8e:29:5f:24:8f:62:d6:25:9b:aa:ee:78:
40:bd:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:00 2024 by rpki-client on console-fra.rpki-client.org