Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/DL_wNGlWWTw5vtYm1v-H8lAyRAw.roa
File: DL_wNGlWWTw5vtYm1v-H8lAyRAw.roa (raw, json)
Hash identifier: mrP1+sTb4iqI0NGYc8+t/Nfp1U/B4Ud/BZplSNGibCY=
Subject key identifier: 0C:BF:F0:34:69:56:59:3C:39:BE:D6:26:D6:FF:87:F2:50:32:44:0C
Certificate issuer: /CN=d7da8118018d7cb0efde6793788104873f47f45d
Certificate serial: 018CC26CF9E9CC54E33DA2C4DC427846E378
Authority key identifier: D7:DA:81:18:01:8D:7C:B0:EF:DE:67:93:78:81:04:87:3F:47:F4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19qBGAGNfLDv3meTeIEEhz9H9F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/DL_wNGlWWTw5vtYm1v-H8lAyRAw.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31533
IP address blocks: 91.213.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f9:e9:cc:54:e3:3d:a2:c4:dc:42:78:46:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7da8118018d7cb0efde6793788104873f47f45d
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cbff0346956593c39bed626d6ff87f25032440c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:c9:b0:1d:5f:c1:5f:9c:ee:0a:5e:8a:44:
fb:22:ec:5e:eb:b3:d8:7a:bd:2d:d4:3e:fa:02:c7:
f9:ec:af:4b:bf:23:5f:db:c8:ec:d8:2a:82:e5:3f:
30:3d:d0:ef:c2:10:5e:eb:80:3b:9a:de:4b:6e:f9:
7c:23:f9:48:9b:38:06:d4:6d:d7:67:99:d7:ce:e3:
64:cc:da:a1:ec:e1:cc:fd:36:0b:53:6d:14:8d:1c:
31:b8:8d:75:55:ae:5b:54:a4:65:ba:71:13:b9:8d:
b6:69:4e:86:ce:4c:85:aa:a8:c8:4f:6c:90:6d:ce:
d0:e7:bc:d2:c4:36:67:9f:de:ec:72:49:64:a2:bb:
e3:5c:6e:8e:0c:dd:82:e9:b3:1c:f9:dc:6f:7a:b4:
a4:f3:c7:a7:8b:88:0c:7f:42:79:62:b5:e4:13:4a:
26:4a:6d:59:35:f9:b4:33:35:b2:e0:f4:7d:6d:b9:
f7:5b:61:ff:9b:da:c9:14:a4:ca:a5:28:c7:2e:6a:
ea:ef:dd:eb:f5:6b:84:6b:c3:44:ca:0c:65:d8:1e:
2b:90:d7:66:80:36:7c:ba:16:79:4f:db:9b:b1:55:
de:56:61:cf:9c:64:72:51:fe:e8:05:9d:0e:47:f0:
5c:f2:9f:5d:e6:3b:87:a8:cf:51:f4:0f:de:8a:ab:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:F0:34:69:56:59:3C:39:BE:D6:26:D6:FF:87:F2:50:32:44:0C
X509v3 Authority Key Identifier:
keyid:D7:DA:81:18:01:8D:7C:B0:EF:DE:67:93:78:81:04:87:3F:47:F4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19qBGAGNfLDv3meTeIEEhz9H9F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/DL_wNGlWWTw5vtYm1v-H8lAyRAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/19qBGAGNfLDv3meTeIEEhz9H9F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.134.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5b:84:35:7d:fe:d4:ac:eb:a1:57:60:29:68:61:fe:63:85:
2a:75:a0:2d:14:dd:57:ef:1f:16:96:64:0b:e2:e7:64:4f:64:
67:2b:8b:e0:09:96:ae:18:22:3e:85:c9:6b:a5:b8:f4:12:76:
bc:bf:33:cf:61:e2:2f:f3:e8:6f:63:96:a3:77:d0:0d:4a:60:
c7:2b:d8:05:a4:cd:f7:fb:87:2c:54:d7:0a:5f:a3:99:f0:6a:
dc:bc:c6:c2:3e:7b:79:fe:b3:19:6c:d0:40:0f:29:cf:a2:3e:
08:ac:c0:a4:34:3d:eb:00:a1:4f:36:6c:3a:f7:2c:5b:b9:49:
19:83:30:e8:36:b4:53:35:d5:f2:06:ae:cc:16:e0:8e:c2:c6:
71:3d:4c:13:15:df:5a:d7:72:0b:d4:6e:dc:b9:3f:d7:6a:d1:
a8:5a:5e:50:75:44:cc:41:2a:b3:03:25:90:48:10:15:86:77:
71:8a:76:3f:b7:07:d5:de:94:c2:bc:4e:71:77:06:dc:44:be:
80:83:63:70:32:81:e8:a5:bf:53:09:f5:25:1a:28:0d:b5:0c:
70:24:5f:0d:fa:39:40:4b:a5:5b:35:ae:90:d2:80:09:93:2f:
bb:32:d5:cb:8a:1f:9f:24:2b:bf:86:63:1f:93:b5:14:cc:17:
fc:a8:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:46 2024 by rpki-client on console-ams.rpki-client.org