Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/4Bcxvd4p6-J9uhCMm76l6oxltUk.roa
File: 4Bcxvd4p6-J9uhCMm76l6oxltUk.roa (raw, json)
Hash identifier: hc2BUp6v++1s+4xja46XcVjENPCZzEDQSX4bX9up6Es=
Subject key identifier: E0:17:31:BD:DE:29:EB:E2:7D:BA:10:8C:9B:BE:A5:EA:8C:65:B5:49
Certificate issuer: /CN=e3025c689a52c898fd7279329f36b406cc8fbc17
Certificate serial: 01875687A3D1CFE7DFD7DA87FB3471E78A8C
Authority key identifier: E3:02:5C:68:9A:52:C8:98:FD:72:79:32:9F:36:B4:06:CC:8F:BC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wJcaJpSyJj9cnkynza0BsyPvBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/4Bcxvd4p6-J9uhCMm76l6oxltUk.roa
Signing time: Thu 06 Apr 2023 12:25:42 +0000
ROA not before: Thu 06 Apr 2023 12:25:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60542
IP address blocks: 91.243.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:87:a3:d1:cf:e7:df:d7:da:87:fb:34:71:e7:8a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3025c689a52c898fd7279329f36b406cc8fbc17
Validity
Not Before: Apr 6 12:25:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e01731bdde29ebe27dba108c9bbea5ea8c65b549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:9b:5b:57:73:35:2e:55:2a:9b:df:a9:99:
a8:b1:6f:0e:27:42:9c:5f:e0:dc:e3:29:c9:83:3a:
a3:2c:30:83:66:47:00:4a:00:37:19:64:d4:22:87:
89:d7:3e:02:66:b1:f4:12:73:a3:43:4b:67:c1:c1:
28:f0:30:3a:0a:db:17:0c:3a:0f:4f:4d:1e:f5:a3:
11:3d:e7:e2:57:87:03:e6:48:fe:c6:c7:95:df:98:
09:84:14:78:24:38:54:28:14:a2:30:4e:0f:07:c6:
f7:d8:12:59:3f:82:f2:d9:80:90:8e:a1:a1:98:cd:
c3:a1:6b:6f:39:6a:e4:af:08:80:23:1f:37:0d:54:
24:db:27:23:79:99:29:53:71:46:db:36:c4:7b:47:
ed:f8:56:79:09:ce:fc:4c:a5:4b:f8:77:76:dd:7c:
84:56:c8:3b:f6:c5:99:ac:dc:f3:06:b3:a5:2a:9d:
33:71:42:64:66:5f:d6:c8:7c:29:03:f9:e4:d1:a7:
81:f7:0d:1b:d0:9a:5f:17:71:95:2b:c2:d3:e9:5d:
e2:56:be:12:a9:d7:c4:4f:61:c4:7f:2d:39:de:8f:
2f:d3:11:23:32:78:f6:53:27:76:d3:21:ee:17:bd:
b9:f2:a9:ba:cc:87:bc:f5:8c:29:41:d3:d1:98:96:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:17:31:BD:DE:29:EB:E2:7D:BA:10:8C:9B:BE:A5:EA:8C:65:B5:49
X509v3 Authority Key Identifier:
keyid:E3:02:5C:68:9A:52:C8:98:FD:72:79:32:9F:36:B4:06:CC:8F:BC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wJcaJpSyJj9cnkynza0BsyPvBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/4Bcxvd4p6-J9uhCMm76l6oxltUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/4wJcaJpSyJj9cnkynza0BsyPvBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.119.0/24
Signature Algorithm: sha256WithRSAEncryption
65:97:74:64:20:d0:26:96:2d:f0:f4:25:16:f3:90:e7:f0:53:
de:c6:8b:be:83:9c:fe:88:4d:54:6c:68:cd:07:1b:70:f1:34:
8a:e5:f0:9b:cc:64:84:45:de:2c:a1:5e:69:51:99:51:b9:45:
05:07:cd:65:61:5b:86:d3:fb:1f:51:1e:93:c2:0b:eb:a6:f4:
f3:2b:46:ca:4a:2d:4a:43:86:b5:5b:1d:4d:4d:11:6c:c6:60:
2d:90:0a:65:08:fd:4c:5e:3a:e8:ee:ce:10:2b:7e:a7:fe:1c:
2c:e2:dc:1d:6f:36:1c:3d:14:67:fd:78:f6:1a:aa:a4:d2:d3:
d0:81:dc:ba:37:92:bc:8a:4a:e2:43:2e:d8:fa:c3:85:79:05:
1c:ab:8e:dc:5d:5e:41:a4:bf:93:59:4a:77:fb:7a:29:2c:0b:
d5:81:19:4e:79:dd:76:98:b6:98:ab:0a:3d:60:b0:8c:f5:3b:
2c:44:8c:79:1c:bb:ef:99:69:bc:d8:87:68:dd:be:db:51:e7:
d2:fc:92:76:5d:b0:e4:e5:c7:40:4e:6f:8d:fe:21:82:2a:98:
44:7a:ed:35:42:1e:fb:35:1b:46:f6:dc:b0:ac:e8:66:9f:96:
08:99:07:aa:9c:c0:22:57:0b:87:54:36:55:21:4b:6c:0a:61:
09:c1:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 12:47:31 2023 by rpki-client on console-ams.rpki-client.org