Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/kNDrtR0gwrNOYLwkhJebdQeiTzg.roa
File: kNDrtR0gwrNOYLwkhJebdQeiTzg.roa (raw, json)
Hash identifier: BpIfX5R3Gvu+NQq1uRHbochCQRPGSc4j5tSp3rXp5jc=
Subject key identifier: 90:D0:EB:B5:1D:20:C2:B3:4E:60:BC:24:84:97:9B:75:07:A2:4F:38
Certificate issuer: /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial: 0182374EC32958126A2A9801E15F46F91EDB
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/kNDrtR0gwrNOYLwkhJebdQeiTzg.roa
Signing time: Mon 25 Jul 2022 21:41:24 +0000
ROA not before: Mon 25 Jul 2022 21:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:37:4e:c3:29:58:12:6a:2a:98:01:e1:5f:46:f9:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Validity
Not Before: Jul 25 21:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90d0ebb51d20c2b34e60bc2484979b7507a24f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:57:db:72:19:1d:83:c6:3d:77:61:fd:e8:
56:13:b3:e8:65:64:44:44:1d:e8:3d:4a:7f:2c:1b:
91:af:4e:cd:a1:83:e3:91:93:ce:19:18:7d:31:5b:
05:1a:dc:0e:4a:02:f8:72:6c:f6:7f:ce:ff:20:84:
c5:4b:ba:40:72:eb:f1:f7:8c:aa:d9:b6:cb:c8:f2:
27:75:1f:0e:9f:a8:9b:f5:45:8f:9d:d6:55:ff:34:
a4:b8:5e:62:80:94:96:99:b8:4c:b1:d9:12:15:d4:
cb:36:de:39:f2:2e:0e:46:2d:94:8e:97:e4:f3:ad:
96:8d:3f:cc:89:63:dc:85:b6:ee:63:16:e2:22:d2:
c3:61:f9:5b:10:8e:85:f6:9a:1e:10:2b:95:a3:a4:
5b:9e:0d:4b:19:c5:1a:4b:7e:f3:c6:d3:05:ed:a0:
8a:df:a1:0a:9f:97:ae:cf:8c:7e:a8:c3:5d:f6:5c:
5e:ab:09:0c:01:7a:73:38:d2:f9:fb:ab:6b:fd:91:
62:41:4f:a0:ee:af:19:f7:ec:8f:1b:82:63:2e:ec:
f3:7c:d9:dd:b2:8b:8b:7b:9b:73:b8:94:d6:e1:35:
cd:5e:66:c4:44:03:b7:4e:6f:4e:f1:42:52:ef:1e:
21:68:96:a4:65:b5:56:72:27:09:4a:d4:9d:9f:98:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:EB:B5:1D:20:C2:B3:4E:60:BC:24:84:97:9B:75:07:A2:4F:38
X509v3 Authority Key Identifier:
keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/kNDrtR0gwrNOYLwkhJebdQeiTzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
32:21:68:ec:e8:29:41:27:77:7e:e9:71:5d:69:d4:9c:fa:a7:
0b:fd:b6:c2:5d:a8:bc:e6:75:5b:d4:71:d6:3e:31:36:f0:53:
90:df:ed:83:8f:b3:ab:27:d4:7c:9f:5e:64:27:a0:18:11:bc:
59:7d:f3:65:03:5e:ff:4e:de:b6:3b:ea:a4:b4:33:0f:44:53:
7d:90:4c:37:65:7c:30:e3:28:15:27:78:3e:9f:33:57:49:82:
3e:71:ef:d1:eb:09:c3:4a:37:42:d6:93:ee:10:c3:d7:6d:ea:
99:aa:1d:de:29:a1:7b:68:85:45:cd:3e:48:53:d3:1d:91:63:
d8:fd:ce:51:d3:60:3d:47:6d:f4:b7:64:53:e8:90:8c:62:8e:
2f:67:4f:e0:8f:c5:e8:1d:6b:c6:49:76:c6:3b:c3:b8:9d:25:
9a:56:7c:1a:42:23:49:05:e2:a6:35:ef:ef:17:45:46:e1:06:
48:a6:da:b9:35:d7:31:ad:4d:d7:c6:88:b0:8c:93:81:44:c3:
e3:50:48:d1:49:8b:82:ca:af:51:fe:1e:7a:3c:39:1f:b1:69:
88:6d:73:9f:09:1a:30:15:f6:56:b7:31:b2:29:3c:b0:98:65:
b8:fa:02:dc:e2:22:95:79:81:34:c7:62:f6:44:49:1b:6b:d3:
32:d4:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org