Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/Rhuu10DIxZlem9qrA57N4nZGjMo.roa
File: Rhuu10DIxZlem9qrA57N4nZGjMo.roa (raw, json)
Hash identifier: duTZ4YOqi4AmFWitX8PJ6YqMSf3cPl5n9fZQjRwZIa4=
Subject key identifier: 46:1B:AE:D7:40:C8:C5:99:5E:9B:DA:AB:03:9E:CD:E2:76:46:8C:CA
Certificate issuer: /CN=7bec7ab82baa073bb12e62cb4d04c3e06ce97cfa
Certificate serial: 0182AD1B8B471647D1BE52F4CF122CF9E04C
Authority key identifier: 7B:EC:7A:B8:2B:AA:07:3B:B1:2E:62:CB:4D:04:C3:E0:6C:E9:7C:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-x6uCuqBzuxLmLLTQTD4GzpfPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/Rhuu10DIxZlem9qrA57N4nZGjMo.roa
Signing time: Wed 17 Aug 2022 18:40:39 +0000
ROA not before: Wed 17 Aug 2022 18:40:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5511
IP address blocks: 91.240.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ad:1b:8b:47:16:47:d1:be:52:f4:cf:12:2c:f9:e0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bec7ab82baa073bb12e62cb4d04c3e06ce97cfa
Validity
Not Before: Aug 17 18:40:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=461baed740c8c5995e9bdaab039ecde276468cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:8f:34:a2:1f:02:12:c4:d1:cb:29:11:e0:
95:9c:c0:77:19:e6:ca:8d:c9:e8:da:ec:9d:e8:16:
59:ba:f3:8f:69:9f:5d:cb:e8:96:69:e9:91:42:16:
55:c4:30:78:e2:d0:fe:cc:9b:42:f5:60:ef:c5:48:
e2:4f:58:ea:d6:b5:7e:ae:79:bf:e1:a8:c2:ac:bf:
a1:b0:54:a5:20:08:79:c9:ff:21:92:3d:ef:5d:ad:
ad:b3:bc:73:1c:13:09:2d:d8:eb:6b:32:43:b2:d6:
2e:42:aa:bc:16:40:07:a6:9f:c3:5d:ae:b6:26:1f:
bc:48:0b:f6:0c:c4:59:f3:9e:37:5e:7d:8d:a0:fe:
f6:82:20:86:41:45:30:79:14:05:1d:8e:4f:72:7e:
c9:05:00:e0:29:70:9e:ab:cf:e3:09:b6:4a:58:10:
45:e2:8a:b8:20:28:4f:0c:a2:73:d0:d3:5f:6f:46:
d4:2d:32:b3:51:ee:4a:2e:b6:77:a3:c7:5f:f2:72:
ab:c5:3a:29:a0:7a:a7:cf:4f:a6:7a:c5:5f:c9:1d:
cd:db:0f:b7:5a:1c:63:4b:12:11:fa:1b:0c:21:d1:
a1:51:c7:17:ad:10:df:5b:16:4f:fc:2d:a1:6c:6c:
e5:48:94:65:2f:19:d0:12:26:b4:65:64:14:b7:45:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1B:AE:D7:40:C8:C5:99:5E:9B:DA:AB:03:9E:CD:E2:76:46:8C:CA
X509v3 Authority Key Identifier:
keyid:7B:EC:7A:B8:2B:AA:07:3B:B1:2E:62:CB:4D:04:C3:E0:6C:E9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-x6uCuqBzuxLmLLTQTD4GzpfPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/Rhuu10DIxZlem9qrA57N4nZGjMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/e-x6uCuqBzuxLmLLTQTD4GzpfPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.228.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:ce:93:fc:19:e0:8e:f2:5b:9a:ce:1e:56:95:35:20:42:11:
49:4a:4b:41:e0:a5:ec:28:de:d9:85:51:27:8c:ea:87:14:a8:
a3:75:f2:55:06:5c:aa:14:c1:0a:ba:db:1d:22:87:50:69:61:
6f:0a:8c:f7:ad:d5:c6:fd:91:8c:b5:aa:08:a7:1b:b1:a5:1d:
a0:74:40:58:86:b3:a1:22:8a:02:b7:39:36:14:39:8f:a8:62:
6c:06:9c:44:6e:ae:66:1e:d5:1c:15:1d:de:41:27:99:cb:2d:
95:91:3b:9f:10:12:91:e2:ca:9d:a2:f6:80:99:ff:f1:da:77:
dc:0e:4e:04:a7:56:f7:c8:a2:33:c6:f4:ff:56:d5:e9:40:a3:
47:04:12:12:38:2b:e6:45:fe:48:c8:60:9a:91:73:99:eb:45:
c6:06:13:15:55:61:ce:82:a7:59:d1:de:28:2a:75:12:14:a9:
1d:29:8d:9b:cb:68:e8:f5:0c:40:10:95:bf:17:7d:62:9b:ae:
89:9c:61:3d:7d:8a:69:c6:a4:1f:58:3c:0d:50:2f:8d:44:c5:
d0:88:1c:f7:4a:96:4c:11:42:a5:29:a9:27:3c:a5:c8:c3:7c:
fe:ec:26:30:b0:9a:f2:7c:5f:b8:6c:4c:16:4b:99:2b:6d:2e:
b1:42:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:56 2024 by rpki-client on console-fra.rpki-client.org