Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/eMSY11n3t1cpIgspVlN_5UFWOJY.roa
File: eMSY11n3t1cpIgspVlN_5UFWOJY.roa (raw, json)
Hash identifier: 9kbz61DIdndY+DyedCvlbi63ah/wfsAhOLSReMrezZw=
Subject key identifier: 78:C4:98:D7:59:F7:B7:57:29:22:0B:29:56:53:7F:E5:41:56:38:96
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 01856D93EEB4FB7FC22C5735ECC38668C7F9
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/eMSY11n3t1cpIgspVlN_5UFWOJY.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 91.236.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ee:b4:fb:7f:c2:2c:57:35:ec:c3:86:68:c7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c498d759f7b75729220b2956537fe541563896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:57:d1:a9:f2:00:2d:d8:e3:40:38:39:fe:
35:7f:d4:26:96:d0:ac:02:36:08:9e:95:d2:90:cf:
3d:87:cb:3a:7d:e7:ca:86:b6:04:cb:8f:d1:c5:89:
34:cc:fd:60:f7:68:0a:71:dc:cf:20:3f:ee:0a:c6:
b5:6b:40:c9:f7:f6:41:01:3b:44:69:67:76:3f:1e:
ed:57:ec:49:ef:78:1f:2f:9d:96:0b:b0:ac:fd:ae:
1b:a9:ca:64:81:99:34:92:15:38:8c:6b:4a:67:4f:
4e:28:b1:8a:df:3c:63:20:ae:d0:5a:55:ae:b5:f0:
98:b1:06:7d:44:3c:e4:f8:65:1b:fd:42:4c:71:af:
56:01:26:2a:22:f2:f7:d4:a1:75:96:4f:31:2c:3b:
62:5f:ea:75:3a:0b:67:a3:d4:12:be:2b:ea:e3:a4:
ae:82:ec:41:94:a4:dd:d1:e7:37:0a:8f:34:46:2e:
16:70:95:c8:0a:9a:c2:1c:35:af:8d:a1:98:2f:6f:
1d:ee:9f:55:21:23:3e:ee:7f:12:23:5b:49:2e:78:
3a:bb:52:cf:08:33:34:0f:d3:d9:06:a8:bb:f1:9b:
53:42:0d:10:04:11:f6:12:e6:6d:4d:1c:73:5e:f8:
c8:ac:1d:08:8c:fc:e0:6f:5b:56:61:fa:b0:d2:fc:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:98:D7:59:F7:B7:57:29:22:0B:29:56:53:7F:E5:41:56:38:96
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/eMSY11n3t1cpIgspVlN_5UFWOJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.89.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a5:a5:3b:4e:bb:01:57:d1:15:4d:49:26:a0:9a:83:35:e3:
f9:0d:8d:3b:4b:31:be:0b:16:7a:af:63:3e:e6:6c:4c:ce:87:
ce:9f:c6:59:82:fc:c4:59:af:27:b1:a1:e2:9d:54:20:b9:7a:
9e:f7:ac:81:b2:72:ea:7b:b5:86:ed:cf:5c:cd:af:ab:55:f3:
e2:3f:24:29:a5:00:fc:5e:2b:86:35:47:5e:9d:ac:4d:3e:06:
ee:65:14:6b:1a:3e:12:ab:69:f1:52:3b:98:d1:8c:74:e7:d4:
f0:a4:15:02:19:5e:ec:c4:5f:a3:c5:33:07:fd:ef:30:8c:ea:
16:5f:8b:c5:77:cb:85:9c:4e:23:91:6b:31:5b:4b:2f:5a:50:
f8:d8:31:90:78:00:50:3f:19:fe:2c:bf:cb:fb:3b:af:0b:08:
c3:f7:72:21:f7:46:aa:a0:ad:9a:ef:84:87:f8:3c:72:65:9e:
df:7c:8c:c4:af:0d:ea:4f:80:43:80:e1:ba:bb:0b:07:07:1b:
be:c9:14:e1:1d:fe:bc:d8:57:70:41:0b:2c:d6:e6:91:70:b4:
1c:15:fa:97:60:fc:ed:a4:3a:14:0c:6f:07:79:d2:b9:54:24:
d2:24:d0:dd:55:9a:43:e2:b0:74:47:f0:cd:81:19:9c:0e:fe:
91:c4:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 09:52:51 2023 by rpki-client on console-fra.rpki-client.org