Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9bced6-605c-4e68-8781-a4efa36ea9b5/1/pHiMSbjDHZwZ06g97GL7dxvagec.roa
File: pHiMSbjDHZwZ06g97GL7dxvagec.roa (raw, json)
Hash identifier: vmG2yzrNWpGy1itKo6e0Xl5rhN/VXPKYBp8H6qtQUGA=
Subject key identifier: A4:78:8C:49:B8:C3:1D:9C:19:D3:A8:3D:EC:62:FB:77:1B:DA:81:E7
Certificate issuer: /CN=e54484753a0074f1e52d46188c9aa878a6dec6f2
Certificate serial: 01CB5C
Authority key identifier: E5:44:84:75:3A:00:74:F1:E5:2D:46:18:8C:9A:A8:78:A6:DE:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5USEdToAdPHlLUYYjJqoeKbexvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9bced6-605c-4e68-8781-a4efa36ea9b5/1/pHiMSbjDHZwZ06g97GL7dxvagec.roa
Signing time: Sun 29 May 2022 07:41:13 +0000
ROA not before: Sun 29 May 2022 07:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203730
IP address blocks: 91.217.11.0/24 maxlen: 24
91.217.10.0/24 maxlen: 24
91.217.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117596 (0x1cb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54484753a0074f1e52d46188c9aa878a6dec6f2
Validity
Not Before: May 29 07:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4788c49b8c31d9c19d3a83dec62fb771bda81e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:b1:4b:f3:5f:bc:47:a8:28:b6:ec:26:28:
e9:62:3d:74:2b:ae:2f:3e:38:33:55:72:56:9c:86:
d6:a5:ac:9b:88:3a:87:57:4c:d2:fa:85:e4:b7:9d:
de:6d:04:9f:a1:06:37:53:d9:1e:5d:0c:a6:1e:54:
21:dd:d1:f6:21:35:d1:3b:0f:0d:43:cf:49:1a:d4:
5a:39:25:9c:cf:6b:df:54:0c:4b:30:0f:1d:ad:3c:
9b:b3:f7:96:af:b5:b5:33:fc:bb:0b:25:4e:8f:63:
87:03:f9:7b:00:de:70:92:21:51:4b:11:49:52:22:
11:10:72:a6:dc:9d:d2:ee:65:31:f2:9d:a0:96:b2:
f2:59:fe:23:3d:d0:bc:4e:9c:76:5d:06:62:ad:a3:
73:9d:e5:64:59:9e:c0:0e:01:34:24:bd:a6:cf:e1:
77:17:19:7b:6f:d0:c6:5c:b1:ea:da:df:26:35:f1:
d2:29:6f:a9:9c:e3:09:97:04:b6:b8:f7:06:00:5f:
e8:8e:0a:33:c0:19:82:ae:48:42:9b:9c:72:70:1d:
c8:81:7c:b1:4f:fe:ed:79:b1:40:95:ca:62:68:de:
88:8c:6c:33:6b:91:76:94:12:40:b6:69:fc:6c:e6:
44:34:aa:da:7d:7e:08:ee:87:2e:7a:f3:67:6c:15:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:8C:49:B8:C3:1D:9C:19:D3:A8:3D:EC:62:FB:77:1B:DA:81:E7
X509v3 Authority Key Identifier:
keyid:E5:44:84:75:3A:00:74:F1:E5:2D:46:18:8C:9A:A8:78:A6:DE:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5USEdToAdPHlLUYYjJqoeKbexvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9bced6-605c-4e68-8781-a4efa36ea9b5/1/pHiMSbjDHZwZ06g97GL7dxvagec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9bced6-605c-4e68-8781-a4efa36ea9b5/1/5USEdToAdPHlLUYYjJqoeKbexvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.10.0/23
Signature Algorithm: sha256WithRSAEncryption
50:4c:9a:a9:bc:b2:7c:eb:8d:fc:05:c1:31:63:d7:2c:0a:9f:
25:7b:3a:b1:58:a0:4c:c7:a4:8e:70:a9:a3:f4:fb:b7:07:6f:
18:92:8f:05:c9:c7:48:fa:b1:f7:a4:b3:ee:9b:68:6c:f5:f4:
f1:f0:ea:9f:72:12:8e:83:aa:92:09:87:f5:8e:95:61:10:f6:
92:32:f3:aa:80:66:8e:69:dc:5c:bc:3f:d4:09:bf:1c:25:5f:
61:29:01:36:c3:ae:1c:c7:8a:a1:5b:ce:4c:3c:f3:0e:9f:63:
0b:60:33:60:66:7e:87:dd:42:96:65:32:bb:a4:7d:4d:09:d4:
ca:23:f6:82:02:80:d5:27:fc:57:bb:b9:27:91:2e:7c:ec:3d:
c7:1f:c6:ca:8c:e7:1c:39:f3:fe:ef:2b:f0:8b:17:1a:d5:9b:
48:c7:90:a2:13:ac:35:b6:18:ee:b4:17:eb:b2:9a:72:1f:33:
88:dc:49:5e:98:0a:20:06:06:ac:63:50:8f:39:76:ec:ec:a7:
9d:b0:05:cd:7f:71:7b:7e:73:18:43:ce:93:80:9c:0b:b2:59:
f0:73:73:a8:fe:3b:24:3b:69:26:2c:cf:65:2b:ea:38:36:a2:
b6:44:d0:32:cb:ff:cf:e8:8a:35:bd:15:22:c9:11:6e:91:ee:
79:ca:a8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:20 2024 by rpki-client on console-fra.rpki-client.org