Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/a2nLDqmMvAWf1jbQeuG4pdidLLI.roa
File: a2nLDqmMvAWf1jbQeuG4pdidLLI.roa (raw, json)
Hash identifier: YaKiIReQBC6UK5zZEADRbLwn3RNhPeioYlr98FhnNNo=
Subject key identifier: 6B:69:CB:0E:A9:8C:BC:05:9F:D6:36:D0:7A:E1:B8:A5:D8:9D:2C:B2
Certificate issuer: /CN=f06d14c8351dd849781b765b4e1ef1897b03891d
Certificate serial: 033CA713
Authority key identifier: F0:6D:14:C8:35:1D:D8:49:78:1B:76:5B:4E:1E:F1:89:7B:03:89:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G0UyDUd2El4G3ZbTh7xiXsDiR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/a2nLDqmMvAWf1jbQeuG4pdidLLI.roa
Signing time: Sat 01 Jan 2022 09:53:32 +0000
ROA not before: Sat 01 Jan 2022 09:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39305
IP address blocks: 91.238.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54306579 (0x33ca713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06d14c8351dd849781b765b4e1ef1897b03891d
Validity
Not Before: Jan 1 09:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b69cb0ea98cbc059fd636d07ae1b8a5d89d2cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:99:71:67:8f:9f:88:b1:b4:7b:b9:89:41:
35:87:e1:cf:ba:61:79:45:b4:7d:f6:33:96:c6:70:
bc:58:e0:76:5d:04:b5:b2:7b:3a:e5:9d:b7:92:e2:
e4:e5:1b:60:84:af:89:f4:3a:3f:98:98:67:9a:7a:
4f:97:09:1a:1e:03:54:24:7a:84:f5:1b:4c:86:b2:
bc:6e:0c:87:88:e1:df:00:b9:2b:3a:f1:f9:0b:1f:
1e:9a:34:20:41:4e:87:a9:86:49:86:5f:b3:3a:6c:
e1:83:08:8e:98:d0:21:75:a3:33:c7:db:f6:6e:9e:
3b:76:55:df:09:85:19:27:25:6c:ae:c2:36:7e:cc:
ef:a7:89:15:c1:17:1f:80:f3:2c:e8:a8:31:a6:72:
25:1c:0c:06:32:18:de:4e:3b:a3:9a:d1:c5:89:3a:
8e:c2:68:d6:f2:31:b2:6a:51:d7:de:b5:6d:07:b7:
c4:2c:c0:b4:b7:df:8b:02:5d:f6:f6:17:e3:1d:14:
5c:5c:fa:71:43:41:50:05:09:be:68:e3:f0:4d:00:
42:94:10:b3:85:b3:33:b4:80:27:38:72:f2:b1:68:
62:35:19:7f:87:76:b1:c1:43:1b:50:ee:44:9f:7c:
8b:b1:28:ea:8c:85:50:26:1b:cd:58:4f:a8:5d:c0:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:CB:0E:A9:8C:BC:05:9F:D6:36:D0:7A:E1:B8:A5:D8:9D:2C:B2
X509v3 Authority Key Identifier:
keyid:F0:6D:14:C8:35:1D:D8:49:78:1B:76:5B:4E:1E:F1:89:7B:03:89:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G0UyDUd2El4G3ZbTh7xiXsDiR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/a2nLDqmMvAWf1jbQeuG4pdidLLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/8G0UyDUd2El4G3ZbTh7xiXsDiR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:dc:d2:6f:2f:24:54:0b:0f:9d:5f:0d:f5:73:88:43:0b:ae:
b9:40:c0:9e:a9:91:93:93:8d:01:f1:ad:e6:8c:19:16:e6:ea:
ed:54:1d:b9:c1:0d:5e:07:d9:20:60:78:74:37:e5:0c:ba:97:
07:8c:33:ce:ab:0b:14:fb:4e:88:64:97:6d:57:13:e2:14:ec:
ea:ef:85:2a:08:9f:8b:a0:10:d2:c7:b8:af:5b:b8:a5:88:83:
52:b3:12:1b:a9:ae:e9:a3:af:53:b7:ea:e6:73:68:5d:47:58:
12:fc:72:ab:db:ee:26:a2:fb:c5:c8:84:51:79:0e:09:8b:ab:
c0:c0:4f:2c:c4:55:e3:4d:76:67:5c:be:dd:65:7f:c2:84:0d:
b5:3d:45:87:01:26:17:eb:1d:c9:e8:a2:f9:19:1e:4b:f9:ea:
4c:59:c2:8a:95:1c:e8:02:db:7c:71:53:79:b5:98:02:0e:94:
96:e3:e7:c6:e6:fe:b1:1b:91:89:d2:3a:2c:50:c5:aa:b4:13:
48:17:cb:bf:ef:03:9a:07:d4:22:f6:cd:c5:3f:f0:4f:4c:f1:
45:e1:48:af:19:a9:e1:04:8e:75:b9:a7:0b:ad:67:bf:57:fb:
bd:98:fb:db:9f:0b:f0:24:1e:6d:a8:6f:ee:91:da:53:7d:cf:
72:40:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:06 2023 by rpki-client on console-fra.rpki-client.org