Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/I1L9aYiFBkLVUvYY3jH5WMU5mj8.roa
File: I1L9aYiFBkLVUvYY3jH5WMU5mj8.roa (raw, json)
Hash identifier: 98sFbVfC93QnsT6qIXEsIy09Xz/B5GE9sMH6x4Sgrlg=
Subject key identifier: 23:52:FD:69:88:85:06:42:D5:52:F6:18:DE:31:F9:58:C5:39:9A:3F
Certificate issuer: /CN=9314a0ddd25b72739e0024b104bf1499fb8e3190
Certificate serial: 01856D1CCD9356DD17A9096CC1613313AD03
Authority key identifier: 93:14:A0:DD:D2:5B:72:73:9E:00:24:B1:04:BF:14:99:FB:8E:31:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxSg3dJbcnOeACSxBL8UmfuOMZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/I1L9aYiFBkLVUvYY3jH5WMU5mj8.roa
Signing time: Sun 01 Jan 2023 11:34:42 +0000
ROA not before: Sun 01 Jan 2023 11:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211261
IP address blocks: 91.210.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:cd:93:56:dd:17:a9:09:6c:c1:61:33:13:ad:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9314a0ddd25b72739e0024b104bf1499fb8e3190
Validity
Not Before: Jan 1 11:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2352fd6988850642d552f618de31f958c5399a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:d5:1f:d3:9b:ad:cd:9c:6b:1f:c0:a6:4f:
57:ab:13:45:8b:03:8f:ff:8a:b6:08:db:fd:96:66:
5a:86:26:c5:44:4a:77:52:cc:b4:7f:7c:18:27:07:
6b:2b:98:e8:7e:b2:33:f1:49:08:45:5e:c4:79:15:
3d:fb:ec:a1:59:3b:c5:2a:d1:65:0b:22:0c:ff:bd:
5d:87:d9:95:3c:2e:92:60:1f:a5:87:81:5c:15:2d:
04:4c:13:73:4d:e3:ab:a0:c8:97:2b:50:f5:12:62:
6c:24:85:36:be:da:e9:e9:5a:6f:ae:87:57:5d:ca:
a8:17:b1:ec:52:02:a5:58:43:93:5e:76:f2:90:9c:
4f:5b:50:4f:33:85:67:f5:de:2c:36:22:8b:5e:10:
06:ec:35:a0:01:d8:e1:4e:66:18:42:7f:87:d5:5a:
9a:68:03:c0:30:14:37:25:a0:4d:d2:68:25:f9:f1:
46:7b:42:cb:76:a3:c7:ec:df:fc:03:dc:04:f3:dc:
36:04:ac:5d:96:96:90:01:32:0b:96:d8:13:73:28:
63:db:54:4d:7d:c9:ae:59:8c:2d:be:b8:d6:73:dd:
67:95:1f:a8:80:3f:4a:58:c7:4a:e0:07:c3:1a:f9:
93:6c:40:96:14:4d:55:23:00:85:a6:01:4f:81:9c:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:52:FD:69:88:85:06:42:D5:52:F6:18:DE:31:F9:58:C5:39:9A:3F
X509v3 Authority Key Identifier:
keyid:93:14:A0:DD:D2:5B:72:73:9E:00:24:B1:04:BF:14:99:FB:8E:31:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxSg3dJbcnOeACSxBL8UmfuOMZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/I1L9aYiFBkLVUvYY3jH5WMU5mj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/kxSg3dJbcnOeACSxBL8UmfuOMZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.126.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c5:3e:7f:ca:22:c4:6c:63:e7:8b:e7:51:3c:04:39:b4:49:
60:46:45:b3:e9:08:75:5b:bb:f2:24:f6:a7:87:d1:e8:3e:5c:
b0:f7:b3:9b:d2:69:8b:60:15:d6:bf:e0:18:20:b9:e1:3a:4e:
02:65:f1:9e:1d:f7:99:dd:ec:25:ee:fb:cd:d2:6f:23:68:19:
74:eb:8d:de:b7:15:94:93:4a:9b:2c:52:30:ee:fd:af:3e:e5:
7d:d5:f0:4a:ed:56:81:fa:b9:ab:49:33:98:f7:f1:b0:90:03:
85:31:1a:65:fa:01:9a:b5:f4:66:18:ae:7f:bb:5c:f5:5d:5d:
c1:d5:8a:c8:70:98:38:79:44:ca:6f:25:40:ce:f9:96:b0:bc:
63:bd:7c:9d:4f:bb:b8:99:ca:37:5c:75:e2:31:de:0d:cb:63:
ee:6c:ba:4f:c3:4a:46:5f:ff:48:e3:f0:a9:1f:17:d0:52:55:
c8:50:04:9c:50:70:da:c5:23:ba:22:8f:92:01:83:01:e5:4a:
e5:55:e6:d5:83:78:97:ce:1f:ab:07:e7:5f:56:a9:8b:1f:db:
dd:ca:b1:ac:88:02:18:df:0b:ac:ad:39:a6:e4:b4:55:93:55:
30:3f:e0:46:ca:12:94:c9:18:14:b0:1d:71:5c:ae:b2:64:01:
72:28:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 13:35:56 2023 by rpki-client on console-ams.rpki-client.org