Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/jA4D9b2p_ZQ7FSJQ4UgoMD4NlqU.roa
File: jA4D9b2p_ZQ7FSJQ4UgoMD4NlqU.roa (raw, json)
Hash identifier: uJy82c1q/Q+4uBCy7ZOskJql4WAzXjdElG81DgGjX9g=
Subject key identifier: 8C:0E:03:F5:BD:A9:FD:94:3B:15:22:50:E1:48:28:30:3E:0D:96:A5
Certificate issuer: /CN=29998b0e2dbbda028e4c3fd6a7cb67c78a302e79
Certificate serial: 01856FCB80E3E9EA57BE89F57D4CABAF2CB8
Authority key identifier: 29:99:8B:0E:2D:BB:DA:02:8E:4C:3F:D6:A7:CB:67:C7:8A:30:2E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZmLDi272gKOTD_Wp8tnx4owLnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/jA4D9b2p_ZQ7FSJQ4UgoMD4NlqU.roa
Signing time: Mon 02 Jan 2023 00:04:45 +0000
ROA not before: Mon 02 Jan 2023 00:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202470
IP address blocks: 91.242.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:80:e3:e9:ea:57:be:89:f5:7d:4c:ab:af:2c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29998b0e2dbbda028e4c3fd6a7cb67c78a302e79
Validity
Not Before: Jan 2 00:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c0e03f5bda9fd943b152250e14828303e0d96a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:4d:42:16:5a:9c:57:f8:6e:12:49:4d:48:
1d:6b:cd:69:14:0b:42:9f:37:96:a5:2e:42:4d:8c:
60:c5:d8:1c:29:18:40:27:a5:a2:0c:ff:6c:e0:57:
c2:2c:5f:82:1b:79:a9:02:91:68:c8:be:57:c2:c9:
b6:c0:26:9f:56:92:17:d5:0d:1c:23:bc:29:9e:b9:
39:37:65:dd:ea:a1:19:7e:6a:78:88:07:60:7f:97:
a8:a1:de:fd:e5:ba:ee:0d:01:cc:55:00:95:97:f7:
2d:c6:be:09:c8:31:4f:42:96:9c:3f:28:96:bb:3c:
25:ee:dd:b8:28:14:28:da:d2:b1:75:fc:9b:01:03:
ff:2f:40:06:ea:b3:82:e3:42:11:98:25:5e:1f:80:
61:a4:09:93:96:1d:c0:ae:92:c7:a2:68:bd:fc:c0:
86:e4:a0:b7:bd:a7:69:bc:3b:8f:31:4d:9d:a3:2d:
4a:cd:b0:55:90:7e:4e:d7:e7:b1:00:1a:c0:f0:89:
b5:03:69:5e:c2:44:88:32:4d:63:eb:31:a1:82:51:
ce:d1:4a:b4:9d:eb:67:63:50:c2:bb:b5:7b:7d:b0:
1c:9a:a2:88:a5:04:b9:5e:f0:8b:f0:2f:09:a7:3e:
1e:a3:95:ca:61:cf:af:b4:5e:1b:13:8f:2a:bc:3f:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:03:F5:BD:A9:FD:94:3B:15:22:50:E1:48:28:30:3E:0D:96:A5
X509v3 Authority Key Identifier:
keyid:29:99:8B:0E:2D:BB:DA:02:8E:4C:3F:D6:A7:CB:67:C7:8A:30:2E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZmLDi272gKOTD_Wp8tnx4owLnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/jA4D9b2p_ZQ7FSJQ4UgoMD4NlqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/KZmLDi272gKOTD_Wp8tnx4owLnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:85:92:e5:43:cb:c8:d5:0d:b7:cd:32:96:d6:92:45:1e:fa:
93:2d:4b:77:89:2a:79:8e:76:08:f8:9a:4e:0d:43:0c:60:ba:
e8:41:72:84:90:06:cc:57:7e:fe:3a:5f:c6:f9:2b:d3:fb:d9:
59:55:18:b7:ec:8d:56:a2:80:d1:8d:e9:31:f1:3b:28:67:cb:
be:f5:5d:77:03:e5:4d:a5:0f:37:05:48:92:21:e5:5d:35:00:
dc:0a:59:28:51:f8:1b:1e:5c:d9:f8:c8:6c:e2:ae:11:56:0c:
da:27:d0:39:17:a0:0c:78:7d:2c:59:92:47:3d:35:64:eb:eb:
66:e6:f8:96:9a:f4:97:53:56:1c:cb:a1:ae:e1:02:17:22:bd:
bb:0c:5b:98:ad:45:43:d8:9a:df:da:50:a7:c8:74:37:73:92:
be:bb:02:9e:ae:d0:92:e3:71:d2:42:cb:a0:48:cc:37:42:a8:
9c:25:55:14:75:04:3d:60:29:07:9f:f1:75:88:c0:01:92:80:
14:e0:52:fa:fe:f0:45:ab:25:55:4e:a3:7b:d5:94:37:43:ef:
86:87:2d:40:8a:10:3a:1b:33:80:94:d8:ca:08:98:70:fe:b1:
4d:aa:cd:80:98:c4:f9:31:e4:33:a7:4b:6b:98:15:99:1f:b9:
fe:cc:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:02 2024 by rpki-client on console-ams.rpki-client.org