Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/Xl9DaTVCCTb-Kgwvh5ikx9r1Alw.roa
File: Xl9DaTVCCTb-Kgwvh5ikx9r1Alw.roa (raw, json)
Hash identifier: wZahqEIbjAT8se8t+Naxrccjq/TnJqHjqRlX1XnHcOM=
Subject key identifier: 5E:5F:43:69:35:42:09:36:FE:2A:0C:2F:87:98:A4:C7:DA:F5:02:5C
Certificate issuer: /CN=191023518d3d0551d053e828b70b18221e89fe8c
Certificate serial: 02A97AA1
Authority key identifier: 19:10:23:51:8D:3D:05:51:D0:53:E8:28:B7:0B:18:22:1E:89:FE:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRAjUY09BVHQU-gotwsYIh6J_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/Xl9DaTVCCTb-Kgwvh5ikx9r1Alw.roa
Signing time: Fri 27 May 2022 12:00:13 +0000
ROA not before: Fri 27 May 2022 12:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 91.200.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44661409 (0x2a97aa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191023518d3d0551d053e828b70b18221e89fe8c
Validity
Not Before: May 27 12:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e5f436935420936fe2a0c2f8798a4c7daf5025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:36:ab:09:c5:65:52:0e:1c:31:93:63:43:
68:86:7a:85:29:dc:c9:47:8b:49:a5:20:37:c8:07:
19:74:f9:02:48:82:bd:ee:38:23:4c:f3:fa:2a:4b:
0e:b3:ac:80:b8:e1:c1:66:24:9f:ce:36:b7:19:5f:
63:d4:e9:80:77:38:a6:36:bc:4f:06:8c:f2:2c:09:
fd:e0:37:9b:f0:fd:ec:80:35:f5:4b:67:7d:a1:56:
b7:fd:e5:ec:26:c7:65:db:3a:3c:c5:23:4f:0e:5d:
01:21:00:7b:4f:1a:52:b8:19:50:b2:d6:62:95:f6:
5d:44:1f:e6:e4:ef:6b:2a:cf:c6:05:0c:b3:4d:88:
80:46:59:3b:20:64:5c:2f:26:85:a8:77:84:1f:cf:
16:6d:20:32:1b:1d:24:10:a1:fa:62:88:d6:62:62:
e9:46:d0:9e:f2:cc:cd:28:35:92:9c:30:45:ab:1a:
96:cc:f9:5f:2f:c4:a6:ce:3a:42:db:79:da:76:78:
fb:5e:df:b5:bd:c9:a7:94:f1:e4:83:e3:b0:d4:32:
09:06:da:ce:b4:96:c0:65:32:82:de:c6:13:fd:af:
e7:0f:8c:a0:f5:2d:46:18:b8:30:87:34:19:a2:b6:
b1:e8:b3:2e:d0:a6:13:2b:db:6a:0f:3b:b6:f4:c5:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5F:43:69:35:42:09:36:FE:2A:0C:2F:87:98:A4:C7:DA:F5:02:5C
X509v3 Authority Key Identifier:
keyid:19:10:23:51:8D:3D:05:51:D0:53:E8:28:B7:0B:18:22:1E:89:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRAjUY09BVHQU-gotwsYIh6J_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/Xl9DaTVCCTb-Kgwvh5ikx9r1Alw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/GRAjUY09BVHQU-gotwsYIh6J_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:52:ca:21:9e:16:56:ed:f5:07:38:d2:07:8c:88:a6:e5:9e:
00:6e:e7:c9:7f:a9:05:29:3d:bf:60:ae:e2:bb:2f:ce:95:ac:
17:a8:52:4a:99:de:1b:9d:d5:c2:b5:88:0c:5a:98:69:f6:ea:
a8:f0:0a:48:ce:6b:6b:4e:64:32:82:87:8f:08:b4:6f:95:02:
1d:05:6a:d3:d1:00:e7:10:45:6d:fe:82:d1:95:46:e6:de:18:
59:0d:49:e7:9e:fd:57:01:d3:da:5a:da:1b:81:a3:4e:fa:69:
d3:e9:9c:6f:61:5c:d9:22:25:92:ce:0d:a7:d5:53:53:6e:59:
35:28:ff:30:e7:01:1e:b9:8c:c7:47:0b:2e:92:14:86:f0:f9:
63:fd:a8:87:2f:7c:d8:87:e3:a2:41:df:c8:9c:d3:f4:9c:68:
d8:2e:b2:5b:4c:1b:4e:cc:bb:07:73:bf:ae:3c:e5:05:b1:fa:
ad:83:7f:56:f1:b5:ff:40:ce:d3:eb:34:32:77:4e:42:06:a4:
54:14:2a:ce:a6:85:bc:75:bb:09:a0:ee:10:fb:55:84:33:8c:
a8:b1:6c:1d:20:ae:ff:8b:8f:06:f1:c9:3a:6d:05:4d:44:ef:
a4:f7:ef:79:c6:c4:d5:ba:05:c5:4c:0c:55:c2:9f:c4:4f:d3:
92:a9:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org