Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/hXq0Gda8WtvHL9GSJmZ6T4UwTIs.roa
File: hXq0Gda8WtvHL9GSJmZ6T4UwTIs.roa (raw, json)
Hash identifier: raF3Hd5CFlYTznSBIxM9x2vErk5u5RWOuD3gHh5HdpE=
Subject key identifier: 85:7A:B4:19:D6:BC:5A:DB:C7:2F:D1:92:26:66:7A:4F:85:30:4C:8B
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0380D37B
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/hXq0Gda8WtvHL9GSJmZ6T4UwTIs.roa
Signing time: Tue 15 Mar 2022 14:12:39 +0000
ROA not before: Tue 15 Mar 2022 14:12:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 91.236.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58774395 (0x380d37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Mar 15 14:12:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=857ab419d6bc5adbc72fd19226667a4f85304c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:0e:fd:4f:5c:37:88:17:3f:7d:6b:b9:41:
c3:7e:8e:8f:26:47:bc:2a:33:10:ef:f0:a5:0f:ed:
ee:ec:85:1a:33:ee:d8:73:ee:df:0b:b1:fb:80:3a:
ef:03:f5:5c:7c:bf:36:7a:56:d6:ef:ae:54:75:cf:
f5:06:a5:ee:9d:06:09:6f:97:d2:ef:b6:8b:d0:d7:
c3:1c:92:86:1b:17:c2:25:b0:bf:d8:46:be:91:a2:
06:11:ad:06:01:1f:a9:29:1e:34:5b:e9:81:8b:ed:
3d:d1:49:f1:b7:9a:0e:61:60:b1:9d:d1:6f:8f:fd:
5b:b7:e6:9e:76:8c:34:df:1e:28:c8:62:c1:62:48:
28:f1:4a:6f:f9:4a:7c:29:4e:c7:41:90:9c:eb:57:
6a:23:00:d6:91:67:e3:cb:36:d9:06:e8:9a:4d:4b:
e9:22:aa:26:30:7b:80:3f:13:15:9d:83:5c:74:df:
21:93:de:05:f2:31:96:5a:4a:67:47:c7:72:d5:cb:
6a:66:eb:ce:41:13:fb:8a:e5:75:15:0d:15:89:14:
a0:3f:1a:13:49:6e:f3:8c:93:93:c6:69:6c:0c:e2:
04:c0:16:64:16:72:df:ac:10:c8:66:32:a1:b7:b4:
c2:ae:80:59:a0:9e:40:7a:94:cf:cb:e8:d0:69:21:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:B4:19:D6:BC:5A:DB:C7:2F:D1:92:26:66:7A:4F:85:30:4C:8B
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/hXq0Gda8WtvHL9GSJmZ6T4UwTIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
97:19:8b:0d:55:1b:40:26:42:d1:71:9b:4d:cc:08:70:fa:aa:
73:45:86:23:3f:2d:2d:4e:a2:f6:a4:37:0c:58:9e:09:4f:97:
88:5b:10:34:67:39:fa:63:06:ea:38:f7:ff:70:3a:a7:3f:e4:
ac:6b:45:dc:1c:ea:57:d2:e8:e0:4b:78:57:c8:0b:f0:39:71:
b1:c9:26:54:59:0b:a3:6c:05:ec:69:1a:9f:63:9d:e2:6c:9a:
d9:04:e3:fb:bb:33:57:d1:14:c3:67:6e:d3:4a:ce:fa:5f:21:
3d:d4:a0:a3:7b:fb:a1:0f:eb:0a:cc:4e:f6:6b:99:b2:f3:a3:
84:9d:10:b3:5f:50:a8:45:ad:fe:1f:6e:28:c6:64:88:82:28:
b9:8b:49:a6:02:40:b6:c5:31:11:e0:13:40:f6:50:ae:8d:ed:
d8:bb:f8:e0:02:dc:fa:0c:77:23:df:31:5e:41:ff:5e:a4:f5:
9c:a7:85:63:fa:48:17:1c:4a:a8:cd:cd:df:0d:13:c6:1d:e6:
0a:85:a8:cb:c2:ea:75:a9:b8:f5:a9:01:3e:bb:7e:c0:52:b7:
6c:3d:4e:4d:ed:52:0e:50:eb:c3:c6:d2:9f:12:66:22:bd:a9:
b3:7b:ba:0f:a7:7f:d5:64:bb:00:7d:ce:75:43:7a:04:7b:76:
15:8d:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org