Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/vFqo5ZhUzij7lTnNxqslUJnpIgk.roa
File: vFqo5ZhUzij7lTnNxqslUJnpIgk.roa (raw, json)
Hash identifier: qS/yhpKvT+AmF5EHK/a+bNj7xbZAwJ9tda5bd86t+t0=
Subject key identifier: BC:5A:A8:E5:98:54:CE:28:FB:95:39:CD:C6:AB:25:50:99:E9:22:09
Certificate issuer: /CN=a6e62b345ed7cde8915438d894b164d8db0a0e6b
Certificate serial: 01DE86
Authority key identifier: A6:E6:2B:34:5E:D7:CD:E8:91:54:38:D8:94:B1:64:D8:DB:0A:0E:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puYrNF7XzeiRVDjYlLFk2NsKDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/vFqo5ZhUzij7lTnNxqslUJnpIgk.roa
Signing time: Wed 02 Feb 2022 06:22:29 +0000
ROA not before: Wed 02 Feb 2022 06:22:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 91.247.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122502 (0x1de86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e62b345ed7cde8915438d894b164d8db0a0e6b
Validity
Not Before: Feb 2 06:22:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc5aa8e59854ce28fb9539cdc6ab255099e92209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:29:b1:76:d7:ef:80:79:c1:da:fc:ea:55:
d8:b4:8e:40:57:38:e1:71:d9:d9:57:fa:dc:6a:89:
78:4c:e6:f4:c0:45:c8:bf:60:e9:0b:3a:5b:9d:ae:
ad:f9:6c:3c:9b:66:30:ac:71:ee:3f:55:75:0c:46:
19:56:28:33:cd:4d:34:6c:a9:e8:71:e5:78:1d:cd:
bf:57:b7:7c:f2:c1:a2:95:66:f5:9d:38:bd:6c:a2:
fc:42:46:68:fd:c2:6b:04:c8:22:55:66:a3:d4:89:
ec:18:05:3d:8a:9b:0d:22:bf:9f:5f:61:83:09:bc:
b1:e2:92:c9:c5:de:f6:b4:62:5d:23:5a:d1:58:f2:
ab:a2:be:c8:3a:d0:8a:8d:5a:27:2c:c3:ee:f0:a3:
9d:86:b1:e9:2a:33:a9:8b:1a:ac:b7:ce:18:73:f4:
a3:3d:42:b7:75:3b:66:a0:a5:40:46:4c:f8:d8:f4:
fb:73:7f:e2:24:42:47:4d:f9:0d:cd:1b:c2:04:95:
3a:4d:4a:c8:5a:9d:a8:23:f2:7f:08:e3:5c:48:25:
5a:be:67:55:e0:31:35:82:b0:35:43:5e:97:df:a7:
8e:d5:6e:2a:a7:6d:31:57:aa:ab:36:98:9d:05:be:
7e:c3:f2:14:79:b5:4f:a3:3c:6c:a6:5e:ff:cc:be:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5A:A8:E5:98:54:CE:28:FB:95:39:CD:C6:AB:25:50:99:E9:22:09
X509v3 Authority Key Identifier:
keyid:A6:E6:2B:34:5E:D7:CD:E8:91:54:38:D8:94:B1:64:D8:DB:0A:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puYrNF7XzeiRVDjYlLFk2NsKDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/vFqo5ZhUzij7lTnNxqslUJnpIgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/puYrNF7XzeiRVDjYlLFk2NsKDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.163.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2b:f8:ba:ac:23:32:bf:52:b7:e0:a5:13:9d:04:8d:a6:35:
7a:4f:82:02:e7:e3:84:8f:2e:40:72:e7:b6:f4:a2:69:ba:39:
dd:0f:40:43:41:00:06:e7:72:83:e3:ca:b0:44:7c:79:ea:1f:
e8:9b:08:89:28:73:bf:9d:5b:fe:4d:06:63:66:f9:eb:6c:b6:
90:71:64:a3:6e:1e:7a:a9:d8:a8:96:5f:bd:51:17:15:0c:ff:
4f:10:cb:33:1b:bd:63:5a:32:ba:45:61:75:86:45:ef:11:d0:
19:02:7f:bb:31:a3:7e:53:17:53:47:a8:cb:07:5d:aa:00:db:
0a:95:99:12:6b:68:24:78:be:c3:6c:a9:b5:ab:9c:44:74:2f:
62:68:01:9e:57:88:0f:d8:0b:51:84:d9:85:cc:d1:7a:8b:35:
82:d6:da:d1:6b:c9:96:0b:ca:3c:10:4a:b7:96:e3:f2:08:a7:
33:c1:6d:ff:74:50:c9:f3:7d:d7:3a:cf:7c:8a:78:40:c2:aa:
f2:16:55:cf:a9:a7:28:a7:60:0a:a9:49:a5:f9:f4:88:88:a0:
60:15:38:11:7a:bf:57:9f:63:14:59:8e:26:d7:02:7c:5a:c2:
d7:27:01:d4:a9:b8:19:b1:64:65:a8:9f:75:00:fd:84:44:f1:
5e:64:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:28 2024 by rpki-client on console-ams.rpki-client.org