Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/3RgECRrmUYeI2u0pzIJcadfA99s.roa
File: 3RgECRrmUYeI2u0pzIJcadfA99s.roa (raw, json)
Hash identifier: dFdYRoE15PHQf1pr00PUewUbw+VAUIb79pT//2Hg0Kw=
Subject key identifier: DD:18:04:09:1A:E6:51:87:88:DA:ED:29:CC:82:5C:69:D7:C0:F7:DB
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 03823D50
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/3RgECRrmUYeI2u0pzIJcadfA99s.roa
Signing time: Tue 15 Mar 2022 14:15:48 +0000
ROA not before: Tue 15 Mar 2022 14:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 91.236.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58867024 (0x3823d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Mar 15 14:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd1804091ae6518788daed29cc825c69d7c0f7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:99:f2:9d:a0:1b:c6:df:6d:e4:2c:d8:44:
81:96:78:c3:87:8f:49:02:46:72:4a:71:b6:5e:a7:
5a:4f:cf:8c:8d:ed:39:bf:15:1f:80:cc:81:39:20:
2a:be:13:46:8a:70:cc:b1:66:d8:b7:13:cb:ff:08:
68:f1:90:3c:f7:a6:23:4c:d2:ff:05:96:53:38:f9:
27:e9:1c:c1:64:51:95:03:e7:59:8c:d1:3c:5e:2f:
15:42:71:62:c9:57:60:b5:f1:4c:f6:80:da:5e:1d:
27:b6:74:5e:5f:13:30:b0:5f:a9:ae:9c:0a:db:27:
54:dd:08:c9:ab:ac:d4:be:a0:b4:b9:e9:53:db:23:
f6:ac:f7:ca:32:dd:7e:0f:31:0b:e0:84:86:a9:de:
38:e6:82:f3:0f:ca:b5:c2:f8:2d:52:c6:d6:71:ec:
9b:0c:68:b6:da:52:45:b5:0d:54:a8:ac:29:b5:8d:
99:58:8b:09:d2:63:4d:53:33:b7:1d:fa:fa:7d:fc:
68:b4:da:f8:2b:ca:8a:7d:44:39:1a:38:4b:ce:11:
4d:1d:d1:74:6c:b1:01:a9:7e:53:9d:11:63:89:ed:
c4:6c:cf:c9:41:12:bf:9a:dc:3a:c0:10:18:a9:a6:
91:a4:fb:d3:24:e6:92:fa:44:22:2c:2b:26:33:bf:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:04:09:1A:E6:51:87:88:DA:ED:29:CC:82:5C:69:D7:C0:F7:DB
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/3RgECRrmUYeI2u0pzIJcadfA99s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5c:f0:52:bf:31:52:39:ef:80:2e:13:c0:fe:25:d6:20:46:
ab:20:83:73:95:e6:78:0a:34:13:9c:8f:f9:ec:81:42:65:79:
1f:52:c0:fa:1a:dd:dd:18:7a:e0:f6:15:72:12:5c:87:07:e2:
f1:3c:df:66:f4:46:96:c3:de:28:9f:3f:89:92:85:09:ea:1f:
97:d2:c9:38:0d:8e:31:03:8a:df:78:eb:7e:b7:b7:82:4d:90:
24:f7:74:89:86:bc:dd:0c:2e:cd:fe:00:02:b1:7d:3c:6a:d4:
42:da:18:e1:0a:94:20:0e:38:4a:52:eb:6a:a1:96:f9:ce:9c:
ab:cc:bb:bb:79:89:93:e2:b5:c3:ca:35:f8:60:0e:45:d2:17:
7a:e3:38:a3:aa:6e:93:e9:82:3d:ea:9f:7e:49:57:ba:5e:1a:
f4:3c:66:39:30:c8:1e:c0:dd:15:49:76:0e:6d:b5:48:c4:82:
af:6f:c2:5e:ec:32:53:f0:e7:9e:a3:f1:9e:5b:bb:10:4d:37:
53:b2:27:9f:06:fd:5c:89:cf:49:69:30:b4:ec:f3:3a:0d:36:
b6:c1:dc:24:6f:20:89:bc:f0:2e:4d:00:51:63:42:0b:14:02:
8e:54:45:88:06:d2:07:b9:02:93:4a:bd:82:04:f2:24:4f:48:
5e:3e:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org