Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/lojB4qQraVwx_QUqDB_MxWKXM9w.roa
File: lojB4qQraVwx_QUqDB_MxWKXM9w.roa (raw, json)
Hash identifier: VJpQrGLNfCApF9QfsOLeioCoNf/RTgkLovRaLzVP0/k=
Subject key identifier: 96:88:C1:E2:A4:2B:69:5C:31:FD:05:2A:0C:1F:CC:C5:62:97:33:DC
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 01856D93EE214078E8B83AD6148A960EF758
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/lojB4qQraVwx_QUqDB_MxWKXM9w.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 91.232.182.0/24 maxlen: 24
91.232.184.0/24 maxlen: 24
91.232.185.0/24 maxlen: 24
176.118.80.0/21 maxlen: 21
91.233.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ee:21:40:78:e8:b8:3a:d6:14:8a:96:0e:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9688c1e2a42b695c31fd052a0c1fccc5629733dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:91:2d:d7:b4:d5:c0:ec:d9:1b:60:6b:f9:
d9:e4:d2:23:df:65:95:f1:49:bc:bb:4f:c4:6c:4c:
71:cd:4b:03:52:ef:89:cc:74:08:f3:e0:38:0b:df:
77:1a:0c:81:c7:a2:d2:ad:4d:8d:ec:e0:b6:ad:fa:
3b:57:f6:c5:f9:68:f8:bf:6b:99:4d:13:5a:4b:5d:
21:be:ca:4d:b5:2b:c6:58:be:f8:11:3b:0b:f2:c6:
dd:f6:84:67:26:99:2b:64:92:7d:27:ee:44:0b:69:
e1:ea:aa:d3:02:49:93:91:4f:d2:44:9c:6f:68:20:
eb:b6:37:cb:ed:f1:5b:d2:0d:3b:b6:a7:6b:76:0b:
ec:49:51:19:3c:96:8e:f4:ef:01:9e:75:34:aa:32:
c0:61:88:01:bd:09:37:5d:77:9a:a9:4c:8a:de:cc:
47:0f:6f:ea:85:41:f6:eb:ab:4a:9c:f0:fe:31:8d:
bc:00:cc:27:6d:b1:82:ec:85:de:cb:f0:f3:0d:43:
ec:62:18:51:2b:e2:34:68:cc:4b:9c:5d:9b:2f:a1:
86:a8:4e:a4:ad:51:39:54:8c:ca:18:db:f9:fc:03:
6d:8b:0a:25:d3:cb:1f:81:24:d3:59:b2:b6:3f:1b:
f5:58:be:6e:7e:f9:92:54:15:7e:5f:3b:67:ea:14:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:C1:E2:A4:2B:69:5C:31:FD:05:2A:0C:1F:CC:C5:62:97:33:DC
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/lojB4qQraVwx_QUqDB_MxWKXM9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.182.0/24
91.232.184.0/23
91.233.192.0/24
176.118.80.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:e1:80:dc:27:b4:27:6e:b9:44:08:d3:08:23:00:ad:83:a9:
af:38:85:96:77:21:38:f5:84:2f:7b:a8:f6:2c:8b:1f:e4:26:
a3:8a:06:e0:3e:42:d6:9c:c0:a2:f0:56:b3:0f:95:b6:1a:cc:
aa:18:ce:d7:67:b2:4a:eb:96:c8:98:37:eb:f2:2f:ba:fe:d6:
ba:28:6d:03:8e:97:47:89:67:c3:7d:5d:d1:2b:54:e5:4c:71:
56:d8:63:ae:c9:4a:b1:c9:cb:fa:79:23:23:f8:9e:a4:b9:1f:
d7:fb:b6:5d:77:94:2e:02:6d:53:5e:59:55:64:0d:1b:9e:f1:
0e:8d:8e:a7:63:f4:07:1a:dd:bc:3c:15:f5:93:ae:76:77:f5:
db:c4:44:7a:b9:ed:b3:30:a6:72:d2:cf:73:de:22:30:77:d1:
79:44:02:71:86:bb:ee:c7:80:80:e7:6c:a8:5d:57:9e:3a:88:
dc:cb:c3:fa:56:e8:e8:77:98:46:c8:4a:6a:ca:4d:ec:9a:8c:
9f:b4:9a:14:fd:3f:b6:1d:4b:41:41:5f:af:06:5a:0a:e2:d2:
12:94:e3:dc:83:2c:61:9d:60:0d:b2:9d:97:c8:fd:a3:02:bf:
cf:d9:b5:9a:ba:3b:9f:03:6e:47:15:53:30:75:b5:5f:90:00:
2a:d6:68:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org