Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33cd7-aedb-43f7-a9d4-b77b59d300a6/1/7bug_mQBqh5iPGvFmGr91d9gvgQ.roa
File: 7bug_mQBqh5iPGvFmGr91d9gvgQ.roa (raw, json)
Hash identifier: Tpuj1jWEzJ5tTRgfACoXSipSI+3GnOonfDN80NSE0JA=
Subject key identifier: ED:BB:A0:FE:64:01:AA:1E:62:3C:6B:C5:98:6A:FD:D5:DF:60:BE:04
Certificate issuer: /CN=0b6ab846c95bf6b1914f02f138049c219465fd3e
Certificate serial: 01856F5DC0998F458F81E6C128440C6A1829
Authority key identifier: 0B:6A:B8:46:C9:5B:F6:B1:91:4F:02:F1:38:04:9C:21:94:65:FD:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2q4Rslb9rGRTwLxOAScIZRl_T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33cd7-aedb-43f7-a9d4-b77b59d300a6/1/7bug_mQBqh5iPGvFmGr91d9gvgQ.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207620
IP address blocks: 91.224.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c0:99:8f:45:8f:81:e6:c1:28:44:0c:6a:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6ab846c95bf6b1914f02f138049c219465fd3e
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edbba0fe6401aa1e623c6bc5986afdd5df60be04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:27:ec:3b:dc:79:d7:39:8c:bb:11:97:6b:
21:06:d5:f2:39:3f:93:15:6c:f1:e0:1e:24:26:a0:
36:c2:c3:8d:cb:ac:74:9e:67:25:af:36:50:33:1d:
b1:18:ff:cc:47:37:5a:5e:1c:02:7b:92:96:eb:34:
42:f0:99:77:3b:88:1c:4f:14:5a:45:ed:89:05:28:
0b:7b:ee:29:b7:7f:60:79:b2:43:76:c7:b8:3d:8d:
1c:d0:f7:a7:da:11:da:21:7e:44:99:9b:c2:0d:25:
4c:be:10:4e:da:80:ff:6b:4a:9c:3c:d9:a2:cc:e7:
8c:70:c8:e2:0a:ad:1e:2b:4a:97:64:cf:18:e4:c9:
43:a1:07:75:8e:05:0c:ea:b9:b2:e9:27:c8:8b:30:
b5:b8:b0:41:2b:c7:78:15:e8:3b:8a:25:a9:19:ef:
d7:53:06:d7:ee:7d:ad:31:20:2e:4f:3d:65:23:2f:
af:52:36:10:8e:09:bb:0b:a4:75:2f:cf:2a:4b:22:
9d:85:15:d5:89:cf:23:d7:af:e7:ff:6d:2c:a7:50:
6a:f1:03:bc:3e:d9:0e:e8:fb:38:b8:70:09:c4:66:
72:6c:62:bd:bb:96:c2:5e:a3:c1:02:68:0a:34:71:
0d:9e:17:9a:13:7a:1d:5f:49:6c:f6:69:9a:0f:c9:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BB:A0:FE:64:01:AA:1E:62:3C:6B:C5:98:6A:FD:D5:DF:60:BE:04
X509v3 Authority Key Identifier:
keyid:0B:6A:B8:46:C9:5B:F6:B1:91:4F:02:F1:38:04:9C:21:94:65:FD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2q4Rslb9rGRTwLxOAScIZRl_T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33cd7-aedb-43f7-a9d4-b77b59d300a6/1/7bug_mQBqh5iPGvFmGr91d9gvgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33cd7-aedb-43f7-a9d4-b77b59d300a6/1/C2q4Rslb9rGRTwLxOAScIZRl_T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:92:aa:63:20:ef:26:d4:fc:1c:81:78:86:d9:63:d0:26:b9:
79:20:0e:73:57:98:56:86:9e:a4:8e:5b:21:95:31:38:a1:e7:
3d:66:8c:ca:5a:b0:47:6c:d9:4b:6d:be:88:df:e5:d0:1a:d0:
25:15:59:5b:de:00:af:64:dc:ee:18:74:3d:88:5e:b5:19:4b:
03:50:59:40:ec:fa:d5:5c:89:5c:76:c3:97:8a:10:f3:9a:48:
5c:a0:65:ef:05:0c:5d:f7:89:a9:5d:c4:55:39:df:e4:57:12:
fb:89:0d:85:42:fe:41:6d:30:da:7f:3c:0a:a5:75:86:6f:ef:
9b:84:8a:a5:59:87:f4:6a:09:05:ac:3c:a8:88:75:01:d0:45:
5b:7f:2d:4d:41:1a:6c:bf:b5:9a:b3:2f:bb:55:47:9b:a1:70:
a8:0e:05:4e:e3:ed:25:8c:bb:24:37:40:1b:28:c2:9b:e0:53:
a0:b4:70:4e:5a:c9:ab:f7:db:b8:ed:79:3f:fb:cd:14:be:22:
65:37:29:6e:d5:f3:31:c8:21:2c:1e:c9:5b:ab:6c:4a:80:66:
da:d5:fd:b1:65:d7:79:ed:ab:57:61:5f:e1:50:96:ce:26:56:
db:1f:b9:34:50:a1:44:5b:ba:38:9b:85:7f:3a:04:b5:ff:24:
9f:55:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 11:33:07 2023 by rpki-client on console-fra.rpki-client.org