Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/iMJwMMV6o1pSqHusWFd2XbJOots.roa
File: iMJwMMV6o1pSqHusWFd2XbJOots.roa (raw, json)
Hash identifier: fpF5cqYJ6PweEFtp6nZ+WLsXNypBRLx5rG07x/TQCFg=
Subject key identifier: 88:C2:70:30:C5:7A:A3:5A:52:A8:7B:AC:58:57:76:5D:B2:4E:A2:DB
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0183CD374AA9D02B56C445BC186B1141F25B
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/iMJwMMV6o1pSqHusWFd2XbJOots.roa
Signing time: Wed 12 Oct 2022 17:21:36 +0000
ROA not before: Wed 12 Oct 2022 17:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6282
IP address blocks: 91.236.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:37:4a:a9:d0:2b:56:c4:45:bc:18:6b:11:41:f2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Oct 12 17:21:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88c27030c57aa35a52a87bac5857765db24ea2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:f8:ae:0c:08:63:56:8c:22:0e:0e:46:b9:
c0:e9:87:8d:f2:e0:7a:2b:7e:2f:cd:83:24:bb:42:
cd:20:42:1e:05:21:9f:65:39:95:14:51:18:8b:5f:
72:4f:21:f8:73:74:11:a3:82:c2:06:35:2d:10:c3:
93:0d:77:db:50:4f:6d:c1:7c:f6:7d:e7:ee:3d:15:
ab:3f:20:fb:0c:d9:84:c1:0a:1f:30:d9:a5:0e:cd:
a2:ea:68:64:3b:d9:c7:29:5a:b1:f7:eb:72:5e:87:
b3:04:38:3e:6f:f6:de:b8:b5:4b:f5:a2:ee:f9:37:
fd:88:a2:33:f5:e9:7b:6e:ec:e7:fe:59:f1:4e:db:
93:a7:c2:23:b9:14:07:d8:d5:d1:3f:c5:f4:88:40:
eb:61:0f:1c:f4:fc:d3:8d:01:74:71:4e:ad:d2:28:
2d:2d:cd:52:b4:65:33:7b:28:cb:e8:6d:26:a2:75:
0b:54:6f:31:b0:8e:4a:14:e9:a3:db:12:88:36:a4:
f3:4c:71:6f:61:00:56:a2:23:9d:0c:44:72:5e:5e:
0e:4d:34:8f:99:bc:ee:1b:19:46:5e:51:4e:38:d4:
8a:d6:1f:7a:0b:38:e4:7d:69:f3:e4:fb:20:48:a2:
99:15:c5:c3:70:b7:2e:65:f5:78:26:93:f1:93:08:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:70:30:C5:7A:A3:5A:52:A8:7B:AC:58:57:76:5D:B2:4E:A2:DB
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/iMJwMMV6o1pSqHusWFd2XbJOots.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.90.0/23
Signature Algorithm: sha256WithRSAEncryption
77:88:4d:66:ad:86:8c:1e:12:df:b3:0d:b9:96:00:0a:e4:74:
0c:72:77:81:f5:ff:fb:60:39:65:56:c1:48:f6:6f:5c:af:2a:
57:89:37:e5:f2:71:a3:a8:27:0c:44:8b:69:24:fb:99:58:3a:
73:98:69:49:6e:53:2f:89:7b:ad:7f:00:80:a6:27:62:b2:d8:
1f:be:eb:59:8f:87:f1:a5:4e:80:69:04:23:5b:77:cf:23:10:
54:43:02:59:d1:ed:dc:da:d1:60:bb:8f:dc:e2:c8:fb:8c:3a:
96:b8:53:9e:5e:01:94:ea:84:38:2c:f0:5f:5b:4c:0b:94:a9:
2d:93:6c:a2:4d:de:61:82:b5:12:d6:ce:0a:1e:62:4e:f3:0e:
43:6a:33:d2:d9:69:6f:1a:29:a1:af:ab:35:f1:26:40:66:aa:
69:33:55:16:89:28:40:86:29:7a:38:b6:3e:d6:aa:f8:c0:c7:
2c:65:ae:53:55:c0:be:51:5d:dd:f8:02:74:b3:a9:d0:8e:34:
43:9b:44:85:af:46:61:01:ba:d6:89:03:3a:85:0e:fe:17:36:
19:b3:2c:31:34:78:d6:74:93:ec:d5:fe:00:80:9b:20:84:96:
e9:4e:59:c5:76:5b:27:2b:d2:5a:fe:ae:c3:2d:e8:29:4a:c3:
5f:b6:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org