Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/0jDzrVChuWloyesHvJK304vcqHo.roa
File: 0jDzrVChuWloyesHvJK304vcqHo.roa (raw, json)
Hash identifier: 4x7PUAHSW0HFADh1tUt6RcqLYozSk1QsHGnWfvfHeEs=
Subject key identifier: D2:30:F3:AD:50:A1:B9:69:68:C9:EB:07:BC:92:B7:D3:8B:DC:A8:7A
Certificate issuer: /CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Certificate serial: 02B9CA5E
Authority key identifier: 31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/0jDzrVChuWloyesHvJK304vcqHo.roa
Signing time: Sat 01 Jan 2022 05:54:44 +0000
ROA not before: Sat 01 Jan 2022 05:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47869
IP address blocks: 91.235.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45730398 (0x2b9ca5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Validity
Not Before: Jan 1 05:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d230f3ad50a1b96968c9eb07bc92b7d38bdca87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:6a:ae:5b:d9:af:73:f0:6b:19:e0:93:70:
3d:f7:7e:4e:05:ac:19:b2:46:c8:13:40:aa:70:cf:
92:14:04:99:ca:21:d6:80:0f:3b:f0:fd:2c:d0:d0:
0f:61:e4:ae:bb:ba:8c:5c:2b:c4:60:8c:4c:58:8e:
3f:69:a8:fe:ff:4d:04:fe:6b:0c:23:24:23:8d:c7:
fe:bc:40:0f:f3:7b:0a:0a:2b:e6:30:01:0e:41:83:
36:5f:61:79:f2:72:25:92:72:23:8a:d0:ed:10:75:
bc:62:2c:94:30:1a:4f:fe:a3:10:6b:ea:5c:13:97:
bc:cf:a3:2b:74:e8:30:bf:49:eb:00:5d:a9:2d:24:
e3:8c:4e:99:1e:2a:0f:82:c1:cd:40:8e:2d:d7:5d:
51:ae:97:77:7a:6c:54:b2:19:10:0b:ae:78:1d:8e:
18:0f:ac:61:b4:97:cd:52:88:e7:3e:4b:6f:7f:13:
a6:4a:6e:09:40:1e:d7:f4:b7:51:f5:09:f1:3a:9f:
66:12:ce:ec:53:a8:40:7d:7d:4e:3c:46:28:e3:7b:
c3:53:ea:8e:c4:e4:98:9b:64:39:5a:d8:bd:81:3b:
04:ab:4c:0d:18:40:ed:8d:a4:4b:ae:01:a8:70:98:
6f:98:b2:e0:13:f0:1b:ba:ad:bb:36:10:12:ea:05:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:30:F3:AD:50:A1:B9:69:68:C9:EB:07:BC:92:B7:D3:8B:DC:A8:7A
X509v3 Authority Key Identifier:
keyid:31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/0jDzrVChuWloyesHvJK304vcqHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fb:a1:68:99:65:87:df:fe:12:fa:8f:4f:73:16:39:1e:d6:
e2:ec:6d:d8:d0:a5:34:0c:24:6f:bb:42:93:ef:95:19:50:78:
8d:65:f2:bc:61:18:e5:92:cd:8f:08:82:8c:40:49:3b:ae:13:
a5:e7:78:6a:04:2b:53:ae:fc:f6:79:02:48:83:96:83:fb:40:
a8:f3:da:ae:99:f8:9c:cc:78:3a:7c:dd:da:98:81:5d:74:e1:
dc:4b:63:47:93:1e:bb:c5:18:ab:66:a2:1e:af:9b:eb:39:f1:
4e:c5:41:cf:45:5c:95:ec:cc:94:d4:95:04:5f:e6:5a:fe:ee:
12:bd:60:e2:81:30:da:97:03:f0:2d:53:f1:54:17:e9:b6:fc:
f2:1b:ad:2b:78:2b:85:8d:8a:a2:ca:7f:1b:de:f6:37:f9:2c:
3f:0d:f2:a8:a6:b8:e8:fe:87:57:65:fa:30:56:4d:02:f0:6e:
f1:5f:de:41:12:15:28:b2:ce:ad:32:7e:3b:25:d2:d3:ea:f5:
b0:73:8b:6c:5c:6e:63:a3:eb:27:f2:33:91:da:6a:ff:23:b8:
a5:62:71:b6:bd:3a:f0:14:b4:00:f9:25:ca:48:e2:55:60:b1:
a3:56:cd:32:e4:21:d6:54:59:74:bc:8b:28:79:39:b3:5e:05:
95:cb:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:09 2024 by rpki-client on console-fra.rpki-client.org