Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/cf-UtOXPxs88tDVLhDO4N0tKI8g.roa
File: cf-UtOXPxs88tDVLhDO4N0tKI8g.roa (raw, json)
Hash identifier: 3iuCR+h24EmIVzW26TTPSpoWMfWHWwOoJpTzHiV6ZFA=
Subject key identifier: 71:FF:94:B4:E5:CF:C6:CF:3C:B4:35:4B:84:33:B8:37:4B:4A:23:C8
Certificate issuer: /CN=3a27c6a9eb7f7464782f987338ea68c89ca05326
Certificate serial: 01896478EA672B9A174E9964683B50EDFFDF
Authority key identifier: 3A:27:C6:A9:EB:7F:74:64:78:2F:98:73:38:EA:68:C8:9C:A0:53:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OifGqet_dGR4L5hzOOpoyJygUyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/cf-UtOXPxs88tDVLhDO4N0tKI8g.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.190.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:ea:67:2b:9a:17:4e:99:64:68:3b:50:ed:ff:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a27c6a9eb7f7464782f987338ea68c89ca05326
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71ff94b4e5cfc6cf3cb4354b8433b8374b4a23c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:b0:e4:ff:f3:a2:e1:e1:1a:22:27:37:ac:
fd:29:1f:f0:bb:65:92:24:4f:7c:db:3a:c4:58:69:
16:6b:e4:5e:02:03:4e:2e:ed:bd:5a:f2:d7:c0:92:
05:f8:b7:8c:85:5e:2e:94:d2:03:6c:04:69:8d:79:
52:19:7e:a9:71:43:86:93:4e:91:f9:20:99:54:9e:
22:ef:c6:ef:e6:f9:c7:8a:0f:57:54:24:04:6c:69:
c7:67:fb:48:ed:39:27:17:0e:28:a1:2c:f5:3b:b4:
a8:90:56:bc:6c:e9:8d:31:2a:15:0d:57:bb:dc:5a:
4b:25:27:6b:dc:c4:89:10:d8:6b:e8:c1:9d:c4:d9:
b8:37:01:2c:24:7b:ba:72:e8:b4:99:98:db:0b:55:
36:92:3d:fd:60:ed:a1:d8:dc:74:03:ec:1a:53:33:
72:ce:00:c5:2c:1a:ae:65:a8:71:ca:4b:3e:68:14:
39:05:e7:3d:13:ba:a5:73:2a:1b:f6:22:40:12:08:
75:96:06:00:17:17:78:b3:5c:3e:58:a1:51:e6:8c:
f9:07:91:f0:b1:70:76:9e:07:5f:8d:bd:c4:6b:5c:
30:9c:18:8a:df:94:f9:00:fd:82:7f:e5:e6:85:cc:
b7:38:f5:d4:4a:29:1c:10:a2:1d:ed:b6:a8:bf:6b:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:94:B4:E5:CF:C6:CF:3C:B4:35:4B:84:33:B8:37:4B:4A:23:C8
X509v3 Authority Key Identifier:
keyid:3A:27:C6:A9:EB:7F:74:64:78:2F:98:73:38:EA:68:C8:9C:A0:53:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OifGqet_dGR4L5hzOOpoyJygUyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/cf-UtOXPxs88tDVLhDO4N0tKI8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/OifGqet_dGR4L5hzOOpoyJygUyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.153.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f2:ad:0b:a1:89:0a:e1:05:ff:62:c5:d3:bd:18:73:57:88:
b0:00:5d:b6:da:b9:83:e6:28:c9:14:ac:88:03:3b:6e:0e:15:
29:0b:74:56:d0:5c:fd:ce:64:21:ec:69:a8:3b:96:53:91:e1:
1b:d2:bf:61:ea:05:08:31:d2:68:7b:b9:ec:8d:77:1a:31:9a:
91:2e:4e:27:6f:bd:46:dd:e1:27:37:a2:4b:f0:db:b8:d4:ac:
d1:53:b5:01:d5:08:9f:fc:80:14:1d:df:50:84:b3:d7:9f:46:
a4:40:8e:ea:e3:5e:e4:7f:f0:3f:66:a1:95:4a:8d:d1:70:e2:
80:37:d8:f6:04:64:f9:17:38:dc:a6:c8:1c:03:06:7f:d7:e9:
7a:b5:0c:97:b0:98:ef:b5:ae:e2:2c:bb:31:bf:2d:90:43:a4:
38:a5:7f:7e:0e:73:35:34:cb:b7:7b:25:1f:65:f9:37:6f:1e:
89:7e:14:a9:33:90:01:20:68:26:84:bf:da:8e:2c:5d:69:e2:
46:71:5d:40:34:89:8e:8f:95:be:63:6b:19:1d:d0:41:70:17:
43:5f:fc:a8:32:2f:ac:4d:36:e6:d5:b8:65:d1:cd:c3:fb:40:
fb:69:8f:23:b7:fb:e5:76:2c:05:ba:67:01:36:8a:64:b3:35:
87:aa:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:21 2024 by rpki-client on console-ams.rpki-client.org