Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/P_8tR415uy5lJ5BLFQwz9Unn4HI.roa
File: P_8tR415uy5lJ5BLFQwz9Unn4HI.roa (raw, json)
Hash identifier: 5AhtK4HLrZAuwJyrdAEvKC7LEq7A/43Ld9K6MjXLrWY=
Subject key identifier: 3F:FF:2D:47:8D:79:BB:2E:65:27:90:4B:15:0C:33:F5:49:E7:E0:72
Certificate issuer: /CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
Certificate serial: 01856BD34BDB17893FA078B682ECB4ED9667
Authority key identifier: 73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/P_8tR415uy5lJ5BLFQwz9Unn4HI.roa
Signing time: Sun 01 Jan 2023 05:34:47 +0000
ROA not before: Sun 01 Jan 2023 05:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208196
IP address blocks: 91.206.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:4b:db:17:89:3f:a0:78:b6:82:ec:b4:ed:96:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
Validity
Not Before: Jan 1 05:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fff2d478d79bb2e6527904b150c33f549e7e072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:27:60:38:9a:53:e9:16:2e:cc:81:e0:25:
a8:d4:a4:20:c1:1e:fd:bc:1a:4d:ce:67:8c:10:46:
d0:68:3b:64:28:b4:95:e1:04:96:84:0c:b5:85:bd:
75:53:6b:c6:18:42:15:d8:d4:42:93:3b:2f:82:e3:
dc:6d:cd:b3:1d:53:54:11:6b:cf:04:b5:e4:95:1a:
6a:7a:dc:ae:75:b9:c9:23:7b:f0:b9:32:7d:88:ed:
be:b7:1c:23:1d:02:9f:46:ce:65:81:9c:cf:11:32:
5c:35:56:ca:4c:c7:ca:d5:20:4e:a4:5a:c0:33:a7:
88:00:f8:08:6d:a6:a8:42:17:66:06:8f:cd:47:5b:
5b:eb:29:1f:f6:1c:e9:7f:9b:b3:e8:94:bf:c6:b9:
a0:a7:b4:da:aa:1d:10:45:42:7c:f8:89:bc:19:6f:
33:74:8a:67:ef:10:2d:ef:23:a4:60:16:89:d9:2a:
cd:d9:17:2a:85:b2:87:75:12:f7:f3:a0:3f:95:bd:
57:1f:56:0a:78:0b:e3:3d:55:33:a8:c3:80:66:0f:
5c:34:85:30:54:93:b4:f2:24:2e:81:ee:d5:9a:f9:
9a:41:1b:e0:9e:81:f3:32:33:93:d8:af:f0:7f:53:
b4:de:69:ff:8f:e7:ab:bd:19:80:a2:d9:d2:70:3f:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FF:2D:47:8D:79:BB:2E:65:27:90:4B:15:0C:33:F5:49:E7:E0:72
X509v3 Authority Key Identifier:
keyid:73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/P_8tR415uy5lJ5BLFQwz9Unn4HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
87:73:ac:0e:e2:38:73:d7:87:2a:65:45:1e:0e:16:cd:a1:14:
46:86:30:76:8a:91:12:c9:8b:49:3f:4a:5b:bc:4e:56:c0:fe:
da:a4:f1:f5:83:1a:ca:1a:5f:b5:33:e8:1a:57:ba:66:f8:42:
3b:26:02:f7:7b:1f:d4:2d:14:23:76:05:a9:3a:8c:21:93:97:
1a:07:83:f2:64:4e:3d:ca:ca:41:d4:d0:f4:63:7e:90:e9:1c:
92:5e:b3:06:d3:42:60:1c:7e:01:3b:b5:63:eb:6a:ec:24:0b:
c6:96:c5:38:1f:09:5b:d4:af:02:a9:01:6e:2e:3b:2d:53:50:
38:f2:8f:82:2f:6e:8e:44:e4:2a:5a:7c:16:6a:4a:44:a1:9c:
4f:db:a5:dd:d1:cb:74:03:1a:26:35:99:14:f8:18:8c:7b:aa:
bd:82:ad:7d:b2:2c:82:65:c5:4a:bb:be:4c:c6:5e:10:36:b2:
b7:fa:1e:38:e8:60:70:92:6b:8f:61:1c:30:19:76:0b:97:4f:
a1:9c:f4:39:4d:46:e3:b4:e2:28:8b:da:e4:24:e4:ca:3c:31:
29:7a:c5:b7:94:d2:a1:a4:ee:f4:7a:58:87:d4:d5:4b:b2:a9:
b5:30:e2:12:35:20:97:d6:c1:04:c1:ea:0b:e8:3d:1d:65:2c:
2b:b0:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:30 2023 by rpki-client on console-fra.rpki-client.org