Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/zYfISxGYbZtC0s_NEyoKG_s5RfU.roa
File: zYfISxGYbZtC0s_NEyoKG_s5RfU.roa (raw, json)
Hash identifier: qxsO7W59Hfsg0m1PeZyHXJo07AHO5XcClf1d8R+G3F0=
Subject key identifier: CD:87:C8:4B:11:98:6D:9B:42:D2:CF:CD:13:2A:0A:1B:FB:39:45:F5
Certificate issuer: /CN=a6e62b345ed7cde8915438d894b164d8db0a0e6b
Certificate serial: 0188916F05E1D2618CA638D2D80C248A3CD4
Authority key identifier: A6:E6:2B:34:5E:D7:CD:E8:91:54:38:D8:94:B1:64:D8:DB:0A:0E:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puYrNF7XzeiRVDjYlLFk2NsKDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/zYfISxGYbZtC0s_NEyoKG_s5RfU.roa
Signing time: Tue 06 Jun 2023 15:59:12 +0000
ROA not before: Tue 06 Jun 2023 15:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 91.247.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6f:05:e1:d2:61:8c:a6:38:d2:d8:0c:24:8a:3c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e62b345ed7cde8915438d894b164d8db0a0e6b
Validity
Not Before: Jun 6 15:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd87c84b11986d9b42d2cfcd132a0a1bfb3945f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:27:e4:4c:07:f0:b0:28:a6:8a:1b:c9:51:
38:f5:0a:23:b7:68:36:1a:2b:f0:33:6e:d7:57:eb:
72:86:0c:3f:e2:8c:ea:91:7d:66:ea:b5:7a:09:f1:
83:63:e3:7c:30:2a:4d:97:1b:f7:21:3c:f2:fb:d9:
08:46:7e:db:d0:b6:c9:63:a7:d6:c8:42:0a:38:1b:
ff:7b:62:aa:f1:26:1d:14:dc:35:91:95:cd:06:f0:
36:f9:1c:9d:f7:dd:54:e5:a9:8d:68:e4:39:8b:fb:
fa:fb:64:e4:ca:51:79:f4:95:80:b4:9b:4b:cd:53:
f4:1b:bc:65:da:bf:4d:28:ed:1b:ce:8b:ed:69:b1:
d2:ec:d8:f9:45:e0:12:66:01:f7:fd:87:60:dc:6f:
9d:1c:ea:45:0b:52:00:a0:6f:4d:3b:ac:05:a5:0c:
3a:58:a4:ff:d4:75:e3:e4:c2:06:e9:d2:52:24:9f:
76:8e:c5:7c:36:56:6f:7c:f1:c9:23:19:5a:ad:81:
39:da:7d:4c:1a:10:e9:4e:99:78:2f:b4:8d:73:9f:
a8:2b:78:d3:af:59:c7:f4:8a:e4:54:39:2e:a7:62:
d2:93:53:0b:35:92:dc:ca:87:9c:33:b4:96:13:ea:
f4:b7:2f:34:dd:39:99:f9:76:1b:ff:0d:69:ab:3a:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:C8:4B:11:98:6D:9B:42:D2:CF:CD:13:2A:0A:1B:FB:39:45:F5
X509v3 Authority Key Identifier:
keyid:A6:E6:2B:34:5E:D7:CD:E8:91:54:38:D8:94:B1:64:D8:DB:0A:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puYrNF7XzeiRVDjYlLFk2NsKDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/zYfISxGYbZtC0s_NEyoKG_s5RfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/585c61-5317-4223-90e4-a885b37e8f7c/1/puYrNF7XzeiRVDjYlLFk2NsKDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.163.0/24
Signature Algorithm: sha256WithRSAEncryption
76:78:4b:5d:41:4b:35:d8:7b:7c:0c:5a:69:b8:bf:93:84:f2:
0f:69:3f:f8:5f:39:c3:e4:25:b2:42:88:6f:55:da:30:de:9c:
13:20:b7:cf:2a:2a:09:d4:5f:1d:68:89:c2:7f:fe:88:65:34:
96:49:c8:b8:00:23:57:4e:1f:ab:6d:c3:f3:da:10:e5:3c:6f:
74:c9:23:6e:4d:59:90:20:07:1c:5d:32:f0:92:7d:39:75:18:
28:58:72:ea:8e:c9:9c:37:91:ac:a1:a2:4a:5c:32:80:f9:70:
f6:f6:a1:58:7c:1f:aa:ed:90:ca:0b:b1:f7:fb:3e:15:38:8b:
8a:93:44:02:cf:27:9c:09:e4:60:9f:47:c8:d8:50:1e:84:b5:
df:c8:d2:b4:c9:dd:6c:5f:69:e6:a1:95:21:1d:32:71:6e:4f:
41:55:eb:ba:a7:87:0a:45:2e:09:3f:5f:c2:9d:f4:ca:63:e4:
9c:00:72:e5:27:28:84:81:16:9f:95:ee:14:e4:3d:a0:86:0f:
8f:c5:82:a7:d7:47:51:bb:d1:85:5d:da:66:6f:b1:5b:72:74:
33:0f:8e:a0:f0:10:1b:41:f2:ac:28:95:c9:c7:fb:fc:71:73:
0e:b0:83:8f:f6:6b:a8:fb:e8:e0:e8:f6:25:7d:10:1f:5a:de:
b0:52:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:28 2024 by rpki-client on console-ams.rpki-client.org