Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7f95ac-a4d4-4fd6-92ca-eb00aa1c2fdd/1/1xdZc6zQp72rDV_s6fRT4S5OHj0.roa
File: 1xdZc6zQp72rDV_s6fRT4S5OHj0.roa (raw, json)
Hash identifier: 5e3S1PAptKI2LAbSFHfpgHk3rwUXNWuLfwWVCUV0sio=
Subject key identifier: D7:17:59:73:AC:D0:A7:BD:AB:0D:5F:EC:E9:F4:53:E1:2E:4E:1E:3D
Certificate issuer: /CN=060806466b42925da099b46a197dde6ccf6956d8
Certificate serial: 05915B27
Authority key identifier: 06:08:06:46:6B:42:92:5D:A0:99:B4:6A:19:7D:DE:6C:CF:69:56:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BggGRmtCkl2gmbRqGX3ebM9pVtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7f95ac-a4d4-4fd6-92ca-eb00aa1c2fdd/1/1xdZc6zQp72rDV_s6fRT4S5OHj0.roa
Signing time: Sat 01 Jan 2022 08:55:05 +0000
ROA not before: Sat 01 Jan 2022 08:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44621
IP address blocks: 91.224.63.0/24 maxlen: 24
91.224.62.0/23 maxlen: 24
91.224.62.0/24 maxlen: 24
91.202.97.0/24 maxlen: 24
91.202.96.0/22 maxlen: 24
91.202.96.0/24 maxlen: 24
91.202.98.0/24 maxlen: 24
91.202.99.0/24 maxlen: 24
91.206.130.0/24 maxlen: 24
91.206.130.0/23 maxlen: 24
91.206.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93412135 (0x5915b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060806466b42925da099b46a197dde6ccf6956d8
Validity
Not Before: Jan 1 08:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7175973acd0a7bdab0d5fece9f453e12e4e1e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:14:d2:ad:df:25:9a:25:8d:12:05:b8:33:
19:ac:59:20:75:35:01:21:33:68:bd:66:4f:d4:f5:
20:ba:de:3c:9d:96:4e:ce:fd:3d:56:cf:99:db:31:
77:92:6e:fc:1f:2c:0a:32:53:50:e6:71:50:5f:18:
4e:b2:d0:1b:e2:d4:79:47:23:af:40:ad:d0:91:f9:
19:09:c6:30:8a:b0:5c:28:1b:6a:af:fd:66:c8:3a:
ff:df:2e:2b:ec:07:4e:a2:13:f0:06:7b:71:fb:64:
a3:d5:ff:d2:a9:db:c8:a6:d7:74:69:c3:57:78:f2:
8b:61:89:b8:ec:d4:85:bb:38:20:f4:99:26:fe:99:
d4:d2:66:ab:e4:4d:13:2e:a8:86:9d:f1:74:47:42:
54:d1:a4:c3:c5:db:bf:31:d5:5d:81:9c:4e:75:21:
5f:4c:8f:84:16:45:16:1c:c6:46:27:29:3b:65:6b:
6c:ba:0b:bc:d0:cd:33:2c:59:db:a0:7a:db:2b:be:
49:fb:63:8a:57:db:bf:e2:17:9e:11:43:df:75:6d:
5a:d5:ee:ca:a9:a5:87:ea:b3:68:1c:c6:0d:2a:16:
62:6f:b2:7c:28:fd:df:2d:73:f7:77:af:ee:ff:b5:
f1:96:12:68:1f:f9:ae:e1:7e:98:73:d9:d0:1e:d5:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:17:59:73:AC:D0:A7:BD:AB:0D:5F:EC:E9:F4:53:E1:2E:4E:1E:3D
X509v3 Authority Key Identifier:
keyid:06:08:06:46:6B:42:92:5D:A0:99:B4:6A:19:7D:DE:6C:CF:69:56:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BggGRmtCkl2gmbRqGX3ebM9pVtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7f95ac-a4d4-4fd6-92ca-eb00aa1c2fdd/1/1xdZc6zQp72rDV_s6fRT4S5OHj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7f95ac-a4d4-4fd6-92ca-eb00aa1c2fdd/1/BggGRmtCkl2gmbRqGX3ebM9pVtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.96.0/22
91.206.130.0/23
91.224.62.0/23
Signature Algorithm: sha256WithRSAEncryption
42:f1:a5:bd:e1:7a:11:01:b3:27:d1:8d:eb:3a:3e:d5:97:73:
0d:7d:b7:4d:14:7c:22:15:7d:05:cd:aa:0a:fe:fb:a7:83:cd:
24:94:c7:09:8b:72:93:8e:8d:57:58:39:f9:32:75:9f:b0:7f:
75:65:fb:31:21:f8:cf:eb:a0:7d:33:73:a6:38:79:74:a0:5c:
94:43:07:69:60:6b:57:95:32:a1:9b:0e:9e:38:7b:83:e9:b6:
f8:a1:33:c9:a4:44:07:e2:9c:62:49:e1:1d:8d:48:c7:52:84:
5c:9b:1c:b3:c2:cc:29:ed:3b:6b:e6:bf:97:48:34:80:37:07:
ef:04:04:71:bb:7a:24:c9:fc:b2:2b:e9:a6:3d:83:94:b7:60:
aa:8f:6c:cb:6e:c2:60:c6:1c:01:31:9e:d2:13:20:81:73:e0:
34:e2:ec:e4:70:e8:91:98:94:f5:3c:3f:73:64:e5:4c:76:c0:
f0:8f:9f:2a:ae:aa:60:8c:13:c4:35:5e:99:b3:7b:42:47:5a:
a3:90:f0:0c:a3:2f:ee:c5:b2:ef:39:2b:ba:ce:b1:69:2e:e0:
29:f7:89:f2:5a:93:c8:e4:f1:fb:fb:17:fd:11:a9:29:9b:68:
1e:91:6a:83:fa:f8:16:10:2b:14:f7:f9:e7:4e:69:08:3e:48:
a5:84:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:26 2024 by rpki-client on console-fra.rpki-client.org