Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/4qOfUFNzPTPY1VOUxj2LOPcxAyw.roa
File: 4qOfUFNzPTPY1VOUxj2LOPcxAyw.roa (raw, json)
Hash identifier: rVpxOomBthBUwnnzw3MpfKFFo955QIpQhqruhiSVRHY=
Subject key identifier: E2:A3:9F:50:53:73:3D:33:D8:D5:53:94:C6:3D:8B:38:F7:31:03:2C
Certificate issuer: /CN=6b9354d68b6ff4c97e500afc2d429375b490b0b7
Certificate serial: 01856DAF73906E4414EF9CA6C5FD58360479
Authority key identifier: 6B:93:54:D6:8B:6F:F4:C9:7E:50:0A:FC:2D:42:93:75:B4:90:B0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5NU1otv9Ml-UAr8LUKTdbSQsLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/4qOfUFNzPTPY1VOUxj2LOPcxAyw.roa
Signing time: Sun 01 Jan 2023 14:14:53 +0000
ROA not before: Sun 01 Jan 2023 14:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 91.221.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:73:90:6e:44:14:ef:9c:a6:c5:fd:58:36:04:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9354d68b6ff4c97e500afc2d429375b490b0b7
Validity
Not Before: Jan 1 14:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2a39f5053733d33d8d55394c63d8b38f731032c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:98:79:8c:e7:f9:34:3b:e0:bc:8a:3b:84:
11:65:94:b7:a1:c6:24:68:d5:8d:d2:b8:18:43:99:
51:2e:44:57:76:4b:c2:89:06:d2:dd:df:95:fa:dd:
10:cb:62:bf:c0:22:31:8b:06:9b:92:67:c6:c6:c4:
0b:35:53:b7:da:48:d3:f9:5c:cb:6c:2b:50:e3:cd:
73:d0:22:9c:fe:57:9b:b2:87:b0:4e:9a:90:ba:38:
60:d9:40:7d:69:9f:f1:fc:aa:cd:08:ba:81:b5:54:
c0:67:67:a5:3f:74:d8:a7:08:6d:09:d3:6e:4e:8a:
f0:52:b4:12:da:58:ac:3e:78:3c:8e:42:77:1d:34:
b5:e5:01:35:f0:a5:cd:38:f5:75:02:d2:51:a9:e3:
59:73:68:6d:8d:0f:57:3f:35:9d:fb:ae:f6:1e:b3:
d2:c0:9c:74:69:be:03:e8:d7:9c:7c:d1:63:8f:05:
83:80:c1:06:2d:94:4c:43:16:29:c6:67:c4:d5:fc:
72:48:34:27:21:d5:28:c8:02:a4:03:3e:e4:5f:4e:
7d:20:f1:6c:d1:87:1e:8b:00:4f:e8:0c:c3:fd:5c:
e9:7f:08:3e:19:b1:21:53:87:f3:ef:c4:f9:f3:64:
cd:50:09:97:dc:f8:fb:ed:11:dc:a7:56:41:20:d3:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:9F:50:53:73:3D:33:D8:D5:53:94:C6:3D:8B:38:F7:31:03:2C
X509v3 Authority Key Identifier:
keyid:6B:93:54:D6:8B:6F:F4:C9:7E:50:0A:FC:2D:42:93:75:B4:90:B0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5NU1otv9Ml-UAr8LUKTdbSQsLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/4qOfUFNzPTPY1VOUxj2LOPcxAyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/a5NU1otv9Ml-UAr8LUKTdbSQsLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:98:e5:f9:c1:f7:1f:08:93:7c:06:e9:d7:26:29:70:fc:6b:
91:11:d4:94:3e:13:44:97:cc:23:f8:be:40:c4:f4:ed:07:c8:
bc:0e:11:c0:7d:b9:53:af:d1:cf:af:3d:19:45:21:ee:3e:0a:
7a:0d:0b:0a:4e:f0:57:4d:05:d7:54:79:13:40:9e:ea:da:8c:
4f:15:8e:ec:5e:18:9e:bb:f0:bd:e6:08:15:2c:a8:4a:44:8f:
35:20:97:30:22:c3:87:13:ec:5c:ba:59:1d:10:89:7f:81:d6:
26:98:68:74:b4:be:3d:65:cf:82:c9:c9:2e:c2:4a:3c:b0:95:
69:68:b8:0a:bc:08:fc:dc:33:2e:5e:5d:0a:68:0b:c0:61:b8:
33:08:de:ce:2e:9a:be:aa:7e:29:92:63:3c:5c:86:7f:20:cb:
9a:49:e9:b7:7c:75:8d:b5:74:c7:ae:0e:37:04:e8:e2:10:da:
98:6f:fe:85:10:b4:68:69:81:d4:ae:dd:42:a7:f6:01:0a:d7:
16:29:b5:23:87:7f:98:6a:38:cc:a2:fc:ce:2c:e0:e2:04:c8:
fa:a1:b1:00:18:b7:55:e0:b4:11:a0:7b:09:92:a3:15:b6:9a:
9c:e4:ae:78:af:30:99:0e:f3:ce:b5:7a:ef:39:bd:08:4a:79:
e3:b8:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:45 2024 by rpki-client on console-ams.rpki-client.org