Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dea778-09c8-4572-b3bb-c6059a3aa340/1/sAyCjoWdjSA4IaVe_tRqX2ZAyF8.roa
File: sAyCjoWdjSA4IaVe_tRqX2ZAyF8.roa (raw, json)
Hash identifier: l8G1CMxzXOaxe6EQ49EuIAWQOnjzgd+63BxZFc8/MbA=
Subject key identifier: B0:0C:82:8E:85:9D:8D:20:38:21:A5:5E:FE:D4:6A:5F:66:40:C8:5F
Certificate issuer: /CN=bac55ec7cff0ef5650725adf3aefe6051a10cb6a
Certificate serial: 018CC8DEADACC5383BF166D21FEA5650DEAD
Authority key identifier: BA:C5:5E:C7:CF:F0:EF:56:50:72:5A:DF:3A:EF:E6:05:1A:10:CB:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usVex8_w71ZQclrfOu_mBRoQy2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dea778-09c8-4572-b3bb-c6059a3aa340/1/sAyCjoWdjSA4IaVe_tRqX2ZAyF8.roa
Signing time: Tue 02 Jan 2024 06:31:25 +0000
ROA not before: Tue 02 Jan 2024 06:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196695
IP address blocks: 91.200.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ad:ac:c5:38:3b:f1:66:d2:1f:ea:56:50:de:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac55ec7cff0ef5650725adf3aefe6051a10cb6a
Validity
Not Before: Jan 2 06:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b00c828e859d8d203821a55efed46a5f6640c85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:c1:e0:f8:df:44:12:09:fa:46:b9:d3:71:
13:37:6e:7d:ec:91:cd:12:6c:01:8c:6a:de:28:1a:
e6:7b:53:28:9b:6b:9e:b5:80:3d:e1:d4:64:08:01:
37:9e:e7:71:d0:90:ea:5c:44:ae:15:be:ab:e7:24:
b4:fe:0b:9a:2d:4c:6b:e2:23:e0:39:88:d4:38:04:
c0:d5:b1:0e:b0:3c:2f:0c:44:10:24:e9:db:09:b6:
50:52:5f:c1:18:7a:b0:e1:d2:f1:7b:e8:4a:05:0a:
89:e9:ec:5c:59:c4:da:96:cf:a0:16:c9:ff:ba:c4:
4e:0f:7f:e5:35:f8:3c:eb:00:f8:cf:5b:a8:82:fa:
6a:56:02:fb:8f:f8:c6:8e:7b:d5:99:4b:36:18:be:
f1:5e:9d:dd:97:f4:36:57:36:fb:ef:35:5d:ae:49:
05:83:a2:44:32:52:b1:24:73:52:d9:c8:9f:89:d2:
c2:f0:07:fd:db:2b:05:e2:f3:9e:be:dc:6c:7b:2c:
c0:25:b5:64:64:0a:c9:a9:11:37:41:e1:34:86:f4:
31:ae:1e:bc:1b:c5:90:ff:c7:5d:08:00:99:60:0d:
10:9d:b8:54:fc:f7:c2:ae:4b:ce:50:8e:b0:13:9b:
5a:0e:36:3e:89:fb:da:7f:06:ec:3e:3a:ad:47:8f:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:82:8E:85:9D:8D:20:38:21:A5:5E:FE:D4:6A:5F:66:40:C8:5F
X509v3 Authority Key Identifier:
keyid:BA:C5:5E:C7:CF:F0:EF:56:50:72:5A:DF:3A:EF:E6:05:1A:10:CB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usVex8_w71ZQclrfOu_mBRoQy2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dea778-09c8-4572-b3bb-c6059a3aa340/1/sAyCjoWdjSA4IaVe_tRqX2ZAyF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dea778-09c8-4572-b3bb-c6059a3aa340/1/usVex8_w71ZQclrfOu_mBRoQy2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.146.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:fc:1a:6f:9c:74:7d:f9:68:19:4d:f5:47:19:90:9f:11:bf:
32:df:77:52:da:ba:7d:d6:f5:04:cd:a0:15:34:46:45:54:b8:
3a:fe:80:d0:9d:d0:21:8a:5f:ec:51:90:d3:e3:b1:54:b4:4b:
d3:51:f0:42:f1:78:fb:10:e1:c6:34:a8:58:d0:e0:ac:80:e3:
f8:ae:fc:36:44:05:2d:d5:c0:09:5c:e3:26:ef:4e:56:85:46:
32:55:d2:55:46:62:26:49:f9:32:bd:af:da:b0:f3:fc:fe:b1:
b7:94:03:b4:91:98:50:c7:44:fb:0d:62:8c:ba:89:5e:ca:fd:
c5:df:ee:0e:94:cb:bf:89:17:71:25:94:40:f4:0b:d4:07:47:
d1:35:a7:64:fc:cc:7d:48:58:25:de:64:1c:68:2d:9d:ca:d2:
91:b6:30:50:dc:5d:7e:d4:d4:2e:74:a0:af:23:5f:ea:82:da:
60:b3:6f:9b:b7:64:ca:b2:b3:73:e5:0d:fd:60:86:bb:93:be:
d1:73:ac:4e:3a:a3:cb:60:6f:51:d3:94:42:77:1e:d3:ee:6a:
28:18:57:6c:8d:a2:ea:de:6b:3b:bf:91:a6:24:77:2d:d1:5f:
79:d8:15:aa:c6:cc:f5:91:2e:ea:1e:69:e6:a0:24:cf:9d:aa:
1c:e1:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:20 2024 by rpki-client on console-fra.rpki-client.org