Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/k1w45lkMhIi-c6uJYB_GPpigD2w.roa
File: k1w45lkMhIi-c6uJYB_GPpigD2w.roa (raw, json)
Hash identifier: hfklQ9Co1R7s8oL+vBzPRK/0myP3y967huut6aIIUpc=
Subject key identifier: 93:5C:38:E6:59:0C:84:88:BE:73:AB:89:60:1F:C6:3E:98:A0:0F:6C
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01856ED4C7B6950B3194CD3E5BE6407487E9
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/k1w45lkMhIi-c6uJYB_GPpigD2w.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 91.193.235.0/24 maxlen: 24
91.193.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c7:b6:95:0b:31:94:cd:3e:5b:e6:40:74:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=935c38e6590c8488be73ab89601fc63e98a00f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:b2:d8:72:d6:23:8e:b3:a8:e2:0f:c4:21:
69:f1:a9:95:99:62:8a:87:aa:1c:5c:30:61:d1:7f:
6e:c2:92:ba:2a:07:41:dc:68:53:22:ae:e6:1d:f5:
02:e5:65:34:5f:da:97:ee:34:45:0d:61:ee:5e:8f:
c5:00:b9:a2:31:94:cd:8f:70:20:00:5b:b3:10:6d:
ea:c1:67:fc:8c:74:71:9d:51:de:ba:99:45:2d:7e:
8d:d6:8c:c7:f1:8d:48:a5:43:75:30:87:f0:bc:da:
f1:37:46:5d:c3:33:64:fb:69:02:3f:9e:01:39:80:
86:cb:6c:6d:66:e2:bd:74:d6:ea:f0:af:2b:2f:d0:
57:d9:b7:f4:14:e8:23:b1:0b:32:60:5a:5a:ba:e7:
f3:fb:91:f3:cb:1b:de:6f:70:1e:e3:ba:dd:8f:66:
ef:2f:fb:ef:2e:01:b2:b5:61:05:7e:da:8b:a7:54:
28:ad:89:d2:78:ce:42:b3:68:93:c2:4e:d0:22:94:
89:5a:df:54:66:1f:5c:93:f6:57:69:1c:0e:56:e2:
f5:9b:eb:65:50:de:3d:92:27:a4:0d:c5:4a:8e:bc:
ae:8c:15:e5:39:46:58:b2:78:b8:54:4a:db:60:4d:
8c:d4:55:89:e7:70:07:78:1e:4b:64:6d:6a:d1:15:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:38:E6:59:0C:84:88:BE:73:AB:89:60:1F:C6:3E:98:A0:0F:6C
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/k1w45lkMhIi-c6uJYB_GPpigD2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.234.0/23
Signature Algorithm: sha256WithRSAEncryption
94:cd:b2:c3:ea:75:b6:74:c9:34:ff:71:58:21:54:58:ef:71:
d4:0b:52:12:37:a9:88:f8:b2:00:db:f1:70:0b:81:78:ff:db:
16:57:f2:c9:c4:1e:c0:8d:74:fe:47:6f:c2:1f:60:90:8d:3d:
1b:14:67:0c:f7:3c:8a:f1:71:c0:04:fa:c5:4e:7d:fa:f2:99:
f5:75:55:73:c1:ac:85:d8:63:c5:ff:1c:1f:ea:5e:99:c8:8e:
7e:82:e1:48:4c:ca:a7:f4:23:05:27:73:6e:eb:90:48:74:eb:
9f:11:4a:41:ff:48:58:c2:4e:9f:b7:1b:cd:4f:b2:ff:62:14:
9e:18:ad:67:09:a5:53:2f:fb:18:6c:63:6a:16:7c:99:14:96:
e5:c5:27:84:cf:88:3f:84:23:d5:14:71:c4:21:df:79:d2:30:
db:60:5c:f6:c7:1f:f9:8e:78:fe:5a:92:be:d2:28:e1:b8:1b:
bc:48:c2:da:3f:57:94:fe:ef:e6:00:14:8f:47:2a:29:dd:f9:
a8:d0:87:bb:b3:55:8a:0d:a2:b2:9d:67:ae:85:2d:80:30:a4:
43:a9:98:94:ee:55:ba:67:01:ef:53:a1:72:f0:51:07:34:c4:
c0:35:c3:b6:f8:33:01:84:c2:77:06:bb:61:b7:c8:14:f4:a1:
f2:2b:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 13:19:31 2023 by rpki-client on console-fra.rpki-client.org