Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a67546-99a1-4eee-b505-f1fa55168b97/1/ctNnc_0BRSv6J031eN7R7GroY8c.roa
File: ctNnc_0BRSv6J031eN7R7GroY8c.roa (raw, json)
Hash identifier: HVB2Abe/pU0e+r5U2QSOsA6vIfJajhDxieBvhhWFXf8=
Subject key identifier: 72:D3:67:73:FD:01:45:2B:FA:27:4D:F5:78:DE:D1:EC:6A:E8:63:C7
Certificate issuer: /CN=b9d1454d74be39101e60d6af53ae05e157e7f427
Certificate serial: 055D1036
Authority key identifier: B9:D1:45:4D:74:BE:39:10:1E:60:D6:AF:53:AE:05:E1:57:E7:F4:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udFFTXS-ORAeYNavU64F4Vfn9Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a67546-99a1-4eee-b505-f1fa55168b97/1/ctNnc_0BRSv6J031eN7R7GroY8c.roa
Signing time: Sat 01 Jan 2022 14:59:24 +0000
ROA not before: Sat 01 Jan 2022 14:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207439
IP address blocks: 91.234.47.0/24 maxlen: 24
2001:67c:29bc::/48 maxlen: 48
2a0c:800::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89985078 (0x55d1036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d1454d74be39101e60d6af53ae05e157e7f427
Validity
Not Before: Jan 1 14:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72d36773fd01452bfa274df578ded1ec6ae863c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:2a:69:a1:e5:cf:7b:d4:82:03:24:98:2d:
6c:cc:05:54:1f:63:66:5e:a2:88:a1:45:f6:de:e8:
1c:99:81:b9:99:56:2e:a5:32:48:2b:7a:a4:bc:1b:
b7:dc:aa:22:62:04:02:de:19:7c:42:6a:1f:e3:18:
fb:4c:f9:7b:c6:58:1b:42:80:af:c0:e6:4b:94:da:
0d:cb:43:62:7c:1b:54:61:9d:0f:a7:b3:3d:0e:0c:
16:22:f5:f2:e0:8d:7d:c2:9e:8a:31:6d:8c:80:12:
df:d0:bd:1f:67:f7:1e:33:5d:c0:82:ac:20:79:f1:
cd:ce:cf:29:54:8a:c1:7a:e7:d4:f1:b5:18:89:cd:
b6:7b:1f:04:ae:89:0c:af:33:4d:86:76:2b:62:a5:
a7:79:cb:bc:48:9f:d6:bb:7f:4d:2d:cf:98:9e:15:
2f:61:37:02:b1:d0:cf:8f:ec:52:2a:53:4c:0d:a7:
d8:b8:8d:12:45:1d:7f:99:94:3b:10:a2:65:17:17:
dd:79:bd:c0:b2:f8:ef:fe:c4:32:94:d1:fe:6f:44:
bf:77:57:26:46:fd:16:6c:b8:2e:5a:09:2e:85:f6:
b2:e2:71:89:12:63:c3:13:03:53:5a:82:49:52:64:
84:06:3b:6d:a1:cd:3d:db:4d:2e:93:4c:9c:69:a5:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:67:73:FD:01:45:2B:FA:27:4D:F5:78:DE:D1:EC:6A:E8:63:C7
X509v3 Authority Key Identifier:
keyid:B9:D1:45:4D:74:BE:39:10:1E:60:D6:AF:53:AE:05:E1:57:E7:F4:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udFFTXS-ORAeYNavU64F4Vfn9Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a67546-99a1-4eee-b505-f1fa55168b97/1/ctNnc_0BRSv6J031eN7R7GroY8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a67546-99a1-4eee-b505-f1fa55168b97/1/udFFTXS-ORAeYNavU64F4Vfn9Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.47.0/24
IPv6:
2001:67c:29bc::/48
2a0c:800::/29
Signature Algorithm: sha256WithRSAEncryption
6a:e2:77:6e:93:57:01:5c:3e:dc:17:b8:17:cb:51:df:22:35:
a8:3f:18:22:b8:32:8b:fc:92:15:60:97:af:d7:d1:49:70:e7:
50:e9:69:42:75:88:31:13:0e:76:90:2f:48:b3:47:b1:de:81:
fd:17:16:75:40:47:29:7e:91:af:df:8e:ee:01:7e:28:19:d3:
a0:cf:fe:fd:08:c4:cf:eb:8b:b3:92:05:4b:6e:07:aa:59:a8:
51:ca:44:3f:e7:8e:41:a7:bf:ab:3e:14:7c:40:92:b9:45:ec:
9f:96:9c:26:b4:a5:10:c9:1e:29:0b:78:f5:62:f1:20:ba:2c:
5c:0c:b9:39:ca:f2:c5:cc:ab:b8:c2:7f:3c:90:b6:71:59:a9:
4e:ec:ba:dc:67:06:c5:00:3f:ca:47:f4:cd:ad:c8:a7:83:1c:
90:53:20:0e:ad:68:21:82:ba:e4:d2:93:d2:1a:28:88:b7:93:
ea:6a:c8:2e:02:bd:97:fc:bf:f0:fa:08:f1:b4:23:e7:3c:71:
81:e6:c3:df:c7:db:6e:df:3a:7d:a3:ea:93:2a:6a:b0:a3:72:
f8:f5:40:3d:39:a1:31:a2:48:e0:d6:9f:90:56:1d:c6:05:c9:
cf:73:79:22:71:68:af:6a:e1:4e:ea:f8:18:bd:d9:d2:8a:cc:
9c:d1:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:54 2024 by rpki-client on console-ams.rpki-client.org