Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/klkRJq4yyxPQ1r_uIzW_vwfN53Q.roa
File: klkRJq4yyxPQ1r_uIzW_vwfN53Q.roa (raw, json)
Hash identifier: 64Riid2hNUaXGa9oAmVApcAq/ePZnB5j3kb9dnbO0VI=
Subject key identifier: 92:59:11:26:AE:32:CB:13:D0:D6:BF:EE:23:35:BF:BF:07:CD:E7:74
Certificate issuer: /CN=99396c1eb59b9666b7487e58c84ab3444ce23113
Certificate serial: 01822AA305E9929FDC5B9F4D7DB5B759FED2
Authority key identifier: 99:39:6C:1E:B5:9B:96:66:B7:48:7E:58:C8:4A:B3:44:4C:E2:31:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTlsHrWblma3SH5YyEqzREziMRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/klkRJq4yyxPQ1r_uIzW_vwfN53Q.roa
Signing time: Sat 23 Jul 2022 10:38:23 +0000
ROA not before: Sat 23 Jul 2022 10:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48011
IP address blocks: 91.247.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2a:a3:05:e9:92:9f:dc:5b:9f:4d:7d:b5:b7:59:fe:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99396c1eb59b9666b7487e58c84ab3444ce23113
Validity
Not Before: Jul 23 10:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92591126ae32cb13d0d6bfee2335bfbf07cde774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:30:39:4a:9f:55:54:cf:76:87:dc:f5:82:
3f:e0:a2:f7:58:13:c4:d2:21:44:cf:ca:1c:9f:b9:
3a:88:6e:6e:36:5e:92:8c:2b:8b:26:95:6f:e0:3e:
f6:3c:4b:82:f4:d2:89:d9:9f:ae:66:52:f6:cc:f0:
5e:9a:6e:b1:29:5d:92:c9:42:b7:63:7c:d1:47:6a:
cd:53:9d:a6:8c:d7:ed:b6:07:58:0b:d9:8f:7a:1c:
87:32:b9:9b:62:96:30:02:9e:48:58:22:a4:1e:c9:
f9:93:80:f8:e4:54:af:aa:30:8b:48:36:74:44:ec:
3a:aa:fc:c8:f1:76:15:c6:80:e8:6c:34:a5:d8:67:
53:13:9a:7e:c5:14:f9:ce:99:66:c3:6a:ea:52:2b:
fb:35:da:fe:4c:2f:7c:19:ab:2d:6e:b9:3b:56:7a:
28:d3:7c:e2:86:b5:67:0c:0f:84:87:e4:ef:04:0d:
22:26:28:d9:26:91:ad:53:57:28:d7:dc:7c:a9:f9:
2f:ab:6e:2f:f6:0c:12:78:ce:5a:ae:db:c7:38:62:
eb:a7:9e:49:5a:a9:8d:66:8d:bb:41:2d:d5:5e:3c:
52:30:7b:8e:1f:32:8e:e4:70:a6:95:96:79:81:e4:
81:7a:d1:c9:c2:41:41:a5:77:b3:f9:1b:f4:73:ac:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:59:11:26:AE:32:CB:13:D0:D6:BF:EE:23:35:BF:BF:07:CD:E7:74
X509v3 Authority Key Identifier:
keyid:99:39:6C:1E:B5:9B:96:66:B7:48:7E:58:C8:4A:B3:44:4C:E2:31:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTlsHrWblma3SH5YyEqzREziMRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/klkRJq4yyxPQ1r_uIzW_vwfN53Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/mTlsHrWblma3SH5YyEqzREziMRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.188.0/24
Signature Algorithm: sha256WithRSAEncryption
02:35:5a:66:4b:06:20:7d:65:e8:48:75:c9:e5:f4:de:46:17:
83:7a:8b:c4:91:7c:0b:c3:43:1a:6b:59:e3:b1:93:55:05:a0:
25:85:59:0f:e3:8c:b4:57:49:94:97:df:f3:43:0c:8d:2b:0f:
15:0f:95:33:e0:6e:65:88:f6:a8:ec:37:a6:20:31:6a:69:98:
fa:98:bc:55:be:28:c1:bd:da:e3:18:9b:be:05:99:6f:00:61:
d6:db:51:7d:f9:ab:cd:9f:78:b1:d3:e1:bd:3e:07:1a:e5:87:
3c:61:42:05:d8:51:82:24:03:7f:ad:b0:fc:25:2e:67:0c:4b:
07:ad:03:90:ec:9b:be:f8:b0:03:18:5f:86:d6:65:9d:cc:a4:
45:28:25:25:62:bb:53:3e:cb:3e:70:26:83:db:90:a1:52:e4:
95:49:18:f2:17:57:c5:9f:25:c9:a5:69:c6:f2:09:71:fd:4d:
20:d1:fd:f6:2d:d1:31:2e:01:0d:9d:43:b4:42:b5:24:d7:b4:
45:53:d2:9f:37:00:ba:8d:c6:2f:68:63:81:03:97:ac:22:25:
f0:52:58:01:94:9b:bd:cc:ae:2b:4f:ab:05:2a:03:07:24:ba:
ed:cd:b3:77:ea:fa:9f:68:89:e8:ec:49:23:a4:36:26:c0:24:
f8:19:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:56 2024 by rpki-client on console-fra.rpki-client.org