Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/S-Rvl1FewQbKnyEYOeOxua_Vijk.roa
File: S-Rvl1FewQbKnyEYOeOxua_Vijk.roa (raw, json)
Hash identifier: nqhr9jMldigG7+f5njdJ9iOzxNRoJTt4ISfVjNc9kw0=
Subject key identifier: 4B:E4:6F:97:51:5E:C1:06:CA:9F:21:18:39:E3:B1:B9:AF:D5:8A:39
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018CB10ED509133BE51D1E9B87FE2B1BC314
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/S-Rvl1FewQbKnyEYOeOxua_Vijk.roa
Signing time: Thu 28 Dec 2023 15:33:08 +0000
ROA not before: Thu 28 Dec 2023 15:33:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:0e:d5:09:13:3b:e5:1d:1e:9b:87:fe:2b:1b:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Dec 28 15:33:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4be46f97515ec106ca9f211839e3b1b9afd58a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:25:50:f7:10:01:17:4f:cf:22:e7:cc:c9:
2c:a9:74:2e:64:ee:76:d8:ed:e1:2c:22:bb:5c:9e:
01:ff:43:aa:d6:0f:63:36:9e:63:da:e1:26:19:24:
56:5e:90:9f:11:72:83:d6:7e:09:c7:5b:d5:07:cd:
0a:39:bd:6c:df:2c:23:27:0c:72:58:e7:90:d7:6f:
bc:e6:2a:aa:7d:db:d0:f0:94:ca:07:16:13:12:7c:
bc:e3:dc:05:91:d9:98:f0:c5:a8:bc:c9:85:37:63:
7f:6e:ea:3a:d0:b9:f4:23:27:89:34:b2:24:f3:3f:
fa:ae:1b:0d:41:5a:98:fb:5b:7d:1b:5f:7f:94:ca:
5a:a6:b2:52:68:fa:d6:c5:85:05:77:88:0e:1e:f4:
ab:25:d3:55:a0:14:60:89:48:11:0b:38:8c:fb:b4:
05:a5:85:5d:c7:7c:74:f8:48:60:80:83:6b:4b:84:
9d:52:ed:bd:ee:a5:6d:78:99:ca:c6:1f:1e:27:ed:
a4:8b:01:ee:58:d5:7a:9d:37:3a:88:69:e9:f6:c5:
11:02:94:dd:71:9f:8c:29:b6:6b:08:bb:50:f5:e7:
1c:b5:19:32:68:9b:1a:8e:f3:2d:a4:2f:d8:18:62:
73:c3:42:60:36:a3:a5:52:50:a7:58:d1:bf:09:79:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E4:6F:97:51:5E:C1:06:CA:9F:21:18:39:E3:B1:B9:AF:D5:8A:39
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/S-Rvl1FewQbKnyEYOeOxua_Vijk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
09:67:38:f8:e7:e2:e7:98:92:e3:a7:2d:50:02:8a:00:e7:10:
37:79:1b:d3:b9:1d:2f:3a:cb:13:0e:b3:99:f3:83:75:c4:bf:
e3:c7:f1:e5:ba:a8:a4:9e:15:6e:7f:82:73:ca:56:46:22:41:
23:20:86:7d:da:3e:7d:7b:2f:e1:13:fc:37:d6:bd:03:e8:99:
fc:a3:d0:cc:7e:31:ab:1b:f6:84:87:f5:b5:b9:5d:0b:62:be:
c1:f6:dc:74:14:21:9e:f8:c2:6c:93:df:eb:33:2b:17:c7:01:
f9:c5:18:96:0b:83:7b:35:50:8a:fb:c9:f1:02:f9:1d:0b:33:
23:77:7c:3d:e5:2d:f8:02:f1:43:3d:27:ec:ee:3e:02:65:e1:
f7:03:fe:0e:b4:98:cc:0d:f4:5b:c2:59:fe:46:46:1c:55:5e:
94:c8:e7:a6:06:67:a8:7b:36:aa:99:c6:a1:75:95:f4:e1:9f:
63:1c:16:24:77:fc:17:ea:52:f8:21:02:17:3a:47:07:a4:d2:
31:aa:82:59:46:c0:1b:88:d1:3e:62:9f:26:2a:16:36:4d:0d:
a6:f4:c6:21:8b:6c:d5:07:ee:58:7c:19:5a:6f:b1:b5:ee:e9:
5d:12:cd:00:eb:72:ae:cc:38:6e:8f:87:a5:ec:ee:9b:51:76:
8b:3f:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:02 2024 by rpki-client on console-fra.rpki-client.org