Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/tDCQIuZ_9wJIF5B43UwRz6tf7Kk.roa
File: tDCQIuZ_9wJIF5B43UwRz6tf7Kk.roa (raw, json)
Hash identifier: XbXOoOL7WE6fP1F8W587Y6G4PG31v3qyzmd/upNb4fY=
Subject key identifier: B4:30:90:22:E6:7F:F7:02:48:17:90:78:DD:4C:11:CF:AB:5F:EC:A9
Certificate issuer: /CN=bb18c8bfec862f1aa5998f1840cebc3d592682dd
Certificate serial: 0187C1CB086DFEE33E3AFD2DA971137C9CDE
Authority key identifier: BB:18:C8:BF:EC:86:2F:1A:A5:99:8F:18:40:CE:BC:3D:59:26:82:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxjIv-yGLxqlmY8YQM68PVkmgt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/tDCQIuZ_9wJIF5B43UwRz6tf7Kk.roa
Signing time: Thu 27 Apr 2023 08:18:41 +0000
ROA not before: Thu 27 Apr 2023 08:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 91.223.95.0/24 maxlen: 24
2a0e:9640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:cb:08:6d:fe:e3:3e:3a:fd:2d:a9:71:13:7c:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb18c8bfec862f1aa5998f1840cebc3d592682dd
Validity
Not Before: Apr 27 08:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4309022e67ff70248179078dd4c11cfab5feca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:05:3b:4d:07:f0:7b:d5:17:c9:96:92:47:47:
98:ec:34:72:ef:a1:b2:12:ef:19:18:56:1e:f9:05:
19:75:c6:93:dc:58:e6:f8:6e:a0:cd:ed:3d:64:e7:
04:fb:6f:f9:b0:58:25:63:f9:a4:16:6d:e1:1d:58:
2f:33:02:14:32:e5:8a:70:05:db:3d:f5:16:3e:59:
f8:38:35:aa:14:a5:86:a2:67:ff:c5:0f:68:89:6c:
87:13:14:cf:2c:8d:d7:39:54:b5:a4:86:aa:d2:b4:
70:6c:4f:03:6c:9d:97:54:9d:78:8d:1c:be:87:db:
b0:92:2b:0c:bf:48:37:bf:7f:3e:8b:22:db:70:ae:
af:8b:9c:3a:ca:91:a9:90:54:48:16:f1:e3:fc:09:
47:3a:d4:6e:f7:78:47:f2:d7:ff:28:4d:d7:e5:2b:
5f:7a:9e:49:2d:4d:c7:ba:1f:86:4a:fc:21:51:53:
b0:bb:a3:e6:c4:2f:b3:a2:f2:d8:b8:db:72:e9:76:
3c:9c:1f:a7:d2:1b:2d:ef:fe:07:dc:b7:14:ba:4c:
c5:9a:4e:cc:d5:90:ec:f4:2c:90:e0:ea:21:b3:67:
e6:f5:aa:6f:da:1b:c3:22:00:34:e3:0a:81:98:07:
42:4f:84:6f:d7:d6:cb:59:94:17:f9:b7:13:67:d1:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:90:22:E6:7F:F7:02:48:17:90:78:DD:4C:11:CF:AB:5F:EC:A9
X509v3 Authority Key Identifier:
keyid:BB:18:C8:BF:EC:86:2F:1A:A5:99:8F:18:40:CE:BC:3D:59:26:82:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxjIv-yGLxqlmY8YQM68PVkmgt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/tDCQIuZ_9wJIF5B43UwRz6tf7Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/uxjIv-yGLxqlmY8YQM68PVkmgt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.95.0/24
IPv6:
2a0e:9640::/29
Signature Algorithm: sha256WithRSAEncryption
94:0e:9b:81:a8:ce:6f:e2:46:fc:05:ac:0a:18:75:6c:e9:0f:
25:e8:8a:c9:23:06:17:9e:0e:6a:a7:20:a8:de:5e:97:52:b3:
53:91:ad:6c:26:7d:6e:ea:0c:f4:6a:3c:8f:be:ba:e2:1f:b4:
75:6a:db:f6:b6:3b:21:91:ae:cb:13:f4:40:59:a7:91:44:69:
e0:6a:78:98:7d:c8:07:7c:6f:56:81:ed:3c:b6:be:68:d0:52:
23:bc:35:7d:f7:0e:bc:f9:2d:c7:83:3c:df:cf:ea:b8:4a:61:
fb:b1:54:0a:f1:d2:40:c7:01:ad:e2:56:61:34:f1:7d:be:3c:
b8:57:81:00:7d:22:e1:1c:ac:fe:06:8b:28:1a:b9:19:1d:66:
13:6f:e0:c1:64:9a:ae:ac:26:1b:7e:98:6f:fc:6c:ea:70:3e:
b6:a0:65:e2:2a:af:76:e3:d5:fb:5b:42:45:fd:e2:6e:ac:85:
53:6e:98:9a:65:18:ff:6e:18:38:03:45:53:16:0d:65:41:bf:
eb:f9:af:83:84:06:2c:53:35:5d:49:5b:d8:19:94:18:0c:89:
38:77:e1:5f:e8:7b:0e:7f:f3:3c:ce:bc:a3:7a:ba:3a:15:43:
65:3c:ae:e5:cd:d0:3b:d8:c8:2b:22:96:70:dc:69:3c:3f:ac:
12:bd:43:04
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYfBywht/uM+Ov0tqXETfJzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMThjOGJmZWM4NjJmMWFhNTk5OGYxODQwY2ViYzNkNTky
NjgyZGQwHhcNMjMwNDI3MDgxODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDMwOTAyMmU2N2ZmNzAyNDgxNzkwNzhkZDRjMTFjZmFiNWZlY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwU7TQfwe9UXyZaSR0eY7DRy76Gy
Eu8ZGFYe+QUZdcaT3Fjm+G6gze09ZOcE+2/5sFglY/mkFm3hHVgvMwIUMuWKcAXb
PfUWPln4ODWqFKWGomf/xQ9oiWyHExTPLI3XOVS1pIaq0rRwbE8DbJ2XVJ14jRy+
h9uwkisMv0g3v38+iyLbcK6vi5w6ypGpkFRIFvHj/AlHOtRu93hH8tf/KE3X5Stf
ep5JLU3Huh+GSvwhUVOwu6PmxC+zovLYuNty6XY8nB+n0hst7/4H3LcUukzFmk7M
1ZDs9CyQ4Oohs2fm9apv2hvDIgA04wqBmAdCT4Rv19bLWZQX+bcTZ9G0HQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLQwkCLmf/cCSBeQeN1MEc+rX+ypMB8GA1UdIwQY
MBaAFLsYyL/shi8apZmPGEDOvD1ZJoLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhqSXYteUdMeHFsbVk4WVFNNjhQVmttZ3QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mY2NkYzUtYTZkNi00OGY4LThmZjYt
MjVjNDQwYTBlYzFkLzEvdERDUUl1Wl85d0pJRjVCNDNVd1J6NnRmN0trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mY2NkYzUtYTZkNi00OGY4LThmZjYtMjVjNDQwYTBlYzFk
LzEvdXhqSXYteUdMeHFsbVk4WVFNNjhQVmttZ3QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW99fMA0E
AgACMAcDBQMqDpZAMA0GCSqGSIb3DQEBCwUAA4IBAQCUDpuBqM5v4kb8BawKGHVs
6Q8l6IrJIwYXng5qpyCo3l6XUrNTka1sJn1u6gz0ajyPvrriH7R1atv2tjshka7L
E/RAWaeRRGnganiYfcgHfG9Wge08tr5o0FIjvDV99w68+S3Hgzzfz+q4SmH7sVQK
8dJAxwGt4lZhNPF9vjy4V4EAfSLhHKz+BosoGrkZHWYTb+DBZJqurCYbfphv/Gzq
cD62oGXiKq9249X7W0JF/eJurIVTbpiaZRj/bhg4A0VTFg1lQb/r+a+DhAYsUzVd
SVvYGZQYDIk4d+Ff6HsOf/M8zryjero6FUNlPK7lzdA72MgrIpZw3Gk8P6wSvUME
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:36 2024 by rpki-client on console-ams.rpki-client.org