Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/q7pAlHdJok7OGqVI-N8rc2uBp4s.roa
File: q7pAlHdJok7OGqVI-N8rc2uBp4s.roa (raw, json)
Hash identifier: 2xbvti2/r5N4tEzNfMcKSacCUjrm5z4PsDQLUwJVw5w=
Subject key identifier: AB:BA:40:94:77:49:A2:4E:CE:1A:A5:48:F8:DF:2B:73:6B:81:A7:8B
Certificate issuer: /CN=a6e62b345ed7cde8915438d894b164d8db0a0e6b
Certificate serial: 0182B4F20301A888B0AB01116A613E4D37A9
Authority key identifier: A6:E6:2B:34:5E:D7:CD:E8:91:54:38:D8:94:B1:64:D8:DB:0A:0E:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puYrNF7XzeiRVDjYlLFk2NsKDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/q7pAlHdJok7OGqVI-N8rc2uBp4s.roa
Signing time: Fri 19 Aug 2022 07:12:15 +0000
ROA not before: Fri 19 Aug 2022 07:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 91.247.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:f2:03:01:a8:88:b0:ab:01:11:6a:61:3e:4d:37:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e62b345ed7cde8915438d894b164d8db0a0e6b
Validity
Not Before: Aug 19 07:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abba40947749a24ece1aa548f8df2b736b81a78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:49:a6:e8:2d:9a:45:6d:ce:c6:84:a5:1a:
42:83:fd:94:cd:06:bd:48:8a:3a:27:3b:e1:dd:d8:
f5:eb:05:b1:e7:c1:0d:3b:cd:b6:61:64:d7:7d:fe:
77:84:d5:65:5b:ee:14:d3:10:8b:09:4e:ef:48:63:
c9:0a:77:ed:00:10:54:ac:19:a6:27:02:b5:56:78:
f4:6a:5d:ea:d1:5b:e9:39:84:7e:00:f9:f4:13:76:
24:69:12:cf:d6:11:34:97:89:58:f3:f6:39:18:ee:
3b:7b:77:02:d2:32:1e:75:06:6f:bb:09:fa:aa:fc:
32:03:87:5a:10:eb:87:e1:45:8c:d9:a8:8b:67:4e:
6b:35:84:6d:d0:32:ef:f9:63:82:b3:15:76:4d:02:
27:5e:fd:a1:52:9c:22:88:43:f3:f8:8b:bc:50:93:
b6:e6:70:5d:5c:cc:22:42:fb:0b:dd:4c:3d:a9:8b:
87:95:b6:44:da:a4:80:39:74:f1:44:3c:35:35:e8:
06:7e:d7:76:ea:51:fb:0a:b9:e7:af:85:b2:b3:71:
5e:0d:78:3c:c8:e6:4f:66:d6:c6:af:e2:91:55:38:
a8:81:ce:ef:63:4d:24:ab:08:66:50:bd:65:3b:7d:
64:d2:d0:35:63:f2:f8:7b:3f:12:36:e8:aa:6a:d0:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:40:94:77:49:A2:4E:CE:1A:A5:48:F8:DF:2B:73:6B:81:A7:8B
X509v3 Authority Key Identifier:
keyid:A6:E6:2B:34:5E:D7:CD:E8:91:54:38:D8:94:B1:64:D8:DB:0A:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puYrNF7XzeiRVDjYlLFk2NsKDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/q7pAlHdJok7OGqVI-N8rc2uBp4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/puYrNF7XzeiRVDjYlLFk2NsKDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.163.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fe:43:a5:ca:a4:d8:13:f2:33:44:56:1a:ab:fb:51:02:91:
54:9d:24:71:1c:02:fd:d8:c3:0b:ea:ea:c1:14:f9:0d:06:b1:
9c:81:76:13:1f:a2:5e:9c:c4:00:af:d5:39:3b:ec:60:70:53:
e2:17:4f:66:cc:fe:52:37:6b:40:b1:97:18:81:f1:9e:84:79:
a8:88:1b:01:57:67:56:01:3f:f5:57:a1:83:2c:18:3c:0e:dc:
96:23:d8:c3:e7:36:4c:1b:f6:ca:3e:cb:cf:9e:0b:6b:ce:91:
d2:c2:72:a1:84:4a:02:33:7a:23:a3:01:b9:33:fd:63:6e:88:
49:95:53:12:fc:42:74:80:b7:14:88:7b:8a:67:59:70:2e:b5:
fd:e9:ce:04:0e:b9:d9:f7:ed:33:f6:0e:e2:62:c5:5b:b3:f0:
ad:ec:00:74:6d:60:ba:a1:9f:a9:1d:76:31:ed:b2:23:b9:8d:
1f:47:52:14:88:14:2b:cd:c4:94:81:9f:fa:b8:59:0c:e2:0e:
c9:35:a9:b7:40:53:90:06:4d:0d:cc:c4:aa:a8:3a:ef:26:ec:
c5:4b:84:ae:da:ba:4d:13:fa:e0:7b:e4:a7:6d:e4:a1:23:ee:
e1:aa:3e:29:b3:b9:5a:29:2a:ec:c9:af:ab:47:6b:b2:70:9d:
81:76:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:18 2024 by rpki-client on console-fra.rpki-client.org