Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/f4L5i_p3RaZnLghOGzGoJ4W5e6A.roa
File: f4L5i_p3RaZnLghOGzGoJ4W5e6A.roa (raw, json)
Hash identifier: tVuxlnKXf1WBk/J39quksni1K0tcxWRKInGzVWNp8g8=
Subject key identifier: 7F:82:F9:8B:FA:77:45:A6:67:2E:08:4E:1B:31:A8:27:85:B9:7B:A0
Certificate issuer: /CN=f06d14c8351dd849781b765b4e1ef1897b03891d
Certificate serial: 018572D5E5CA5BD9C6A7417E154847A5EA8B
Authority key identifier: F0:6D:14:C8:35:1D:D8:49:78:1B:76:5B:4E:1E:F1:89:7B:03:89:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G0UyDUd2El4G3ZbTh7xiXsDiR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/f4L5i_p3RaZnLghOGzGoJ4W5e6A.roa
Signing time: Mon 02 Jan 2023 14:14:58 +0000
ROA not before: Mon 02 Jan 2023 14:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 91.238.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:e5:ca:5b:d9:c6:a7:41:7e:15:48:47:a5:ea:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06d14c8351dd849781b765b4e1ef1897b03891d
Validity
Not Before: Jan 2 14:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f82f98bfa7745a6672e084e1b31a82785b97ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:c7:21:ed:ce:00:c8:c5:63:ee:f3:3c:d1:
fe:66:24:3f:86:a9:62:68:72:45:71:04:47:15:10:
f5:71:4c:8b:45:81:a8:ac:80:9d:d1:1c:4b:64:09:
5c:e4:a8:90:b5:be:a4:40:06:99:54:44:e2:3e:c9:
84:fa:30:43:9e:2a:1c:a0:6d:ac:c0:6f:76:23:95:
a7:bb:9c:b1:38:95:0f:b7:3f:dd:74:62:9a:52:67:
27:03:78:12:6b:1f:20:60:a5:d1:46:06:e4:d6:86:
e9:19:db:68:92:ac:4f:73:0c:b7:87:f6:a3:6a:41:
2d:91:ae:53:eb:9f:f3:10:d4:f1:41:8d:8f:01:0f:
f6:00:b0:39:4a:e0:dc:2c:95:7b:ef:61:3c:01:ee:
f6:61:5d:25:e3:6d:7e:29:e7:83:59:0c:ad:da:d6:
6a:6a:1f:6a:99:4f:4b:11:f6:82:a6:58:d3:34:6c:
a5:c3:39:ef:ca:46:c3:c0:36:dc:66:d5:dd:a0:93:
f8:65:73:f4:f4:1c:d3:7d:3d:d9:ba:66:f7:a0:25:
88:2d:0d:f2:cf:bf:0c:97:bd:fe:dc:a3:85:04:32:
ca:f0:7f:1a:56:bb:06:d4:7f:bb:c7:3f:76:d2:7e:
3d:f4:48:e0:14:b6:3d:c0:eb:60:ce:27:8c:ec:76:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:82:F9:8B:FA:77:45:A6:67:2E:08:4E:1B:31:A8:27:85:B9:7B:A0
X509v3 Authority Key Identifier:
keyid:F0:6D:14:C8:35:1D:D8:49:78:1B:76:5B:4E:1E:F1:89:7B:03:89:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G0UyDUd2El4G3ZbTh7xiXsDiR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/f4L5i_p3RaZnLghOGzGoJ4W5e6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/8G0UyDUd2El4G3ZbTh7xiXsDiR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ce:f7:f2:a4:6e:75:dd:ae:ab:0e:64:e6:38:43:6a:1d:d4:
e6:d5:b3:11:14:1a:08:9d:0d:32:aa:5a:46:38:db:c6:11:b8:
1d:4a:20:f1:c4:2d:9c:d5:40:32:51:48:26:99:7d:72:41:64:
16:f8:e2:1b:cd:03:53:5d:90:4c:c5:3f:57:13:8b:e2:14:9f:
30:50:df:ab:a7:2a:b9:16:19:8d:77:dd:85:3a:7c:b9:dd:41:
fb:a0:f9:d9:d2:72:a5:73:9a:3d:a7:3f:05:18:db:24:c2:4d:
a6:9f:dc:61:ca:10:20:f8:73:75:80:85:35:ac:6b:32:d8:be:
3b:2e:eb:26:0e:88:7d:c8:1d:eb:c2:8e:b0:46:3f:3a:00:ce:
ee:59:eb:cf:5f:09:c3:0f:69:d9:9e:87:ad:b0:6b:02:22:0a:
fd:12:a0:8c:a4:b1:c0:90:8d:d5:6b:62:ac:4e:3e:0a:05:c1:
59:42:1b:67:54:9c:d6:77:11:9e:4b:db:0c:b0:67:49:8e:6d:
b1:21:a6:7a:73:62:6a:4a:09:54:02:da:d9:8c:e8:8f:51:86:
ce:ef:cc:6b:a6:36:b7:a6:d4:e7:39:4c:93:ab:8e:2f:2f:12:
21:9c:8e:de:5c:37:60:b8:bb:a7:58:a4:75:95:36:05:f0:1e:
f4:e9:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:43 2023 by rpki-client on console-ams.rpki-client.org