Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/1-oHzpcnF40KgJionpxeXdykVo_U.roa
File: 1-oHzpcnF40KgJionpxeXdykVo_U.roa (raw, json)
Hash identifier: f0voExW3gjYGE7CPNJNKCLe4hYI6VVz524sOazV3hew=
Subject key identifier: FA:81:F3:A5:C9:C5:E3:42:A0:26:2A:27:A7:17:97:77:29:15:A3:F5
Certificate issuer: /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial: 014C18ED
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/1-oHzpcnF40KgJionpxeXdykVo_U.roa
Signing time: Sat 14 May 2022 05:58:40 +0000
ROA not before: Sat 14 May 2022 05:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 91.228.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21764333 (0x14c18ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Validity
Not Before: May 14 05:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa81f3a5c9c5e342a0262a27a71797772915a3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:f6:ed:52:d2:99:3d:4a:8f:6d:cc:c7:26:
c9:16:b0:58:3b:c0:a8:2c:09:af:7f:e7:98:b4:63:
92:01:c0:4f:41:bf:1a:cd:df:f3:bd:03:01:6e:7a:
98:94:9d:84:05:45:d6:c8:52:77:bf:86:dd:dd:53:
cd:44:dd:af:37:14:2b:0d:31:55:39:1e:67:41:9b:
eb:5d:03:6b:50:46:f0:90:fc:a8:d7:e5:ed:da:5e:
ab:63:62:96:96:24:f3:b6:d5:ca:cf:b2:d6:0e:73:
fa:52:6a:e3:28:bc:2e:ba:95:98:45:53:a2:77:87:
29:30:41:d9:9e:b7:df:a4:ac:92:33:fd:9f:74:d3:
1e:5c:0f:6a:9d:10:3e:3e:b4:a1:1f:53:0b:83:65:
33:a6:b5:48:72:b5:e9:be:4e:da:f8:7b:20:e7:a7:
e4:30:69:e9:8a:b2:53:d4:6f:c3:7e:58:0b:ac:f4:
03:a7:d9:3f:ee:d3:cf:2d:5f:4d:c9:a1:fb:a1:05:
8a:af:ea:d9:43:e0:c1:5a:34:5b:ac:71:47:ec:93:
48:b4:48:7d:66:e6:e3:af:2f:fe:0d:4b:06:f6:fe:
ea:d7:a5:f0:27:71:82:07:80:36:4e:ed:f1:ad:7e:
98:d4:50:70:ea:64:f4:0c:36:8e:41:de:93:0c:40:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:F3:A5:C9:C5:E3:42:A0:26:2A:27:A7:17:97:77:29:15:A3:F5
X509v3 Authority Key Identifier:
keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/1-oHzpcnF40KgJionpxeXdykVo_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8f:e0:04:2c:07:81:4f:73:86:31:90:23:77:63:7a:b2:60:
56:bd:c0:da:d9:7b:04:b0:53:6d:37:87:52:06:3d:3f:78:81:
f3:59:51:3f:fa:a9:31:11:96:b4:f3:a8:f8:e7:05:d5:24:76:
ed:87:5a:ae:2e:5b:21:cd:0c:f5:d0:0e:a0:34:f7:69:4a:f1:
27:7c:1f:6d:26:7f:ba:b4:7d:54:e0:bb:a9:44:0b:28:f3:b1:
67:5c:0a:2b:ed:aa:af:80:52:09:9f:fa:d5:a6:01:9c:81:60:
13:3b:71:d5:06:b2:3d:78:e2:2a:73:62:14:7b:3a:5a:96:3c:
d9:fd:31:3e:90:00:cb:6a:bb:a3:ff:59:ba:8f:df:33:cc:c1:
93:5b:58:d4:a2:15:71:05:fb:00:1f:6f:98:dd:19:63:0a:47:
57:e1:22:73:30:fe:a1:c4:ae:dd:77:c5:3f:0f:2b:c3:2c:ab:
6c:0c:34:ce:e5:c2:cb:60:c9:42:71:7a:d4:7e:06:a2:05:7d:
7e:ad:58:b9:5e:75:17:2d:75:67:ed:3b:3c:7d:86:25:c1:30:
de:40:69:fb:7d:4c:e6:db:79:0f:bf:5a:6d:94:01:2d:e8:0e:
22:a3:38:ac:36:a4:05:14:1c:4b:39:63:eb:df:16:b1:de:67:
2a:ef:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:14 2024 by rpki-client on console-ams.rpki-client.org