Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/iZbWlaR-nnX1GmHKnDatz7IlkwM.roa
File: iZbWlaR-nnX1GmHKnDatz7IlkwM.roa (raw, json)
Hash identifier: nykZlLlJgSoRYCgURyS/a8Ap8ZdJkQ/X7T9tkHL/n3A=
Subject key identifier: 89:96:D6:95:A4:7E:9E:75:F5:1A:61:CA:9C:36:AD:CF:B2:25:93:03
Certificate issuer: /CN=191023518d3d0551d053e828b70b18221e89fe8c
Certificate serial: 02A810CC
Authority key identifier: 19:10:23:51:8D:3D:05:51:D0:53:E8:28:B7:0B:18:22:1E:89:FE:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRAjUY09BVHQU-gotwsYIh6J_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/iZbWlaR-nnX1GmHKnDatz7IlkwM.roa
Signing time: Fri 27 May 2022 06:20:13 +0000
ROA not before: Fri 27 May 2022 06:20:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 91.200.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44568780 (0x2a810cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191023518d3d0551d053e828b70b18221e89fe8c
Validity
Not Before: May 27 06:20:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8996d695a47e9e75f51a61ca9c36adcfb2259303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:1c:19:3b:17:30:9c:4a:25:7a:8a:8b:f0:
5f:d3:a3:a2:f3:31:f5:61:1f:c2:80:79:ca:c1:fe:
5c:d6:15:13:83:b2:06:7f:da:69:01:fb:b7:04:b1:
76:20:ad:2e:e3:02:c1:d1:d4:61:57:3a:51:e0:5c:
02:bc:cb:b6:45:9a:1d:a9:9b:80:05:82:12:bd:19:
45:02:a8:97:33:8e:0f:a2:72:cd:e1:f0:97:ac:e0:
43:b1:bd:33:6b:e2:71:3c:4b:7a:6c:86:5f:f0:da:
ba:5b:2c:ff:aa:29:68:7b:11:86:2e:d9:aa:86:ee:
69:58:93:0f:7b:e5:74:e2:88:5a:36:b6:d1:df:4e:
c5:d3:58:b5:22:6a:f5:1b:14:65:2c:1d:52:e8:ee:
1a:61:07:39:8d:c7:87:f6:bc:b7:4a:f7:8e:cc:50:
97:3f:d5:4b:75:07:8c:eb:d9:a6:a5:af:a0:50:9d:
de:cc:84:de:60:49:21:e0:ad:2a:7d:b8:71:cf:72:
d8:2e:c9:6b:5e:cb:93:17:d8:fb:18:8a:50:d7:fd:
7e:ae:4a:a8:82:a1:fd:d6:6a:1b:39:c8:36:8d:84:
5f:83:09:73:06:8a:50:fd:ee:d1:34:f7:e1:6d:e1:
1f:e7:67:21:01:4a:39:6d:90:e4:27:22:72:5f:d7:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:D6:95:A4:7E:9E:75:F5:1A:61:CA:9C:36:AD:CF:B2:25:93:03
X509v3 Authority Key Identifier:
keyid:19:10:23:51:8D:3D:05:51:D0:53:E8:28:B7:0B:18:22:1E:89:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRAjUY09BVHQU-gotwsYIh6J_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/iZbWlaR-nnX1GmHKnDatz7IlkwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/GRAjUY09BVHQU-gotwsYIh6J_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.192.0/22
Signature Algorithm: sha256WithRSAEncryption
59:6f:87:c0:ea:5f:cb:3e:14:67:2c:8a:02:ac:29:f2:3b:6c:
34:60:82:1e:f1:ad:24:7d:53:8a:c0:72:d5:12:73:14:01:cb:
59:60:10:3d:b4:18:82:47:cf:88:9f:ed:09:1e:a0:e1:c1:72:
88:c2:63:d6:f5:c5:d7:5b:ce:05:ac:eb:84:5d:c9:63:c8:2b:
f6:41:f6:3b:a5:d5:85:dd:a5:67:96:ac:10:44:77:89:db:e0:
f1:0c:be:9e:3e:9c:30:d2:b4:63:25:af:b9:54:4a:27:47:aa:
33:f8:a8:38:c6:b3:46:f7:97:3a:f3:cf:09:9e:e0:07:a2:8b:
ca:62:f0:b5:f7:cc:95:35:bd:78:c4:40:9a:a9:e7:b1:00:65:
5c:64:ce:31:6d:59:6e:af:f8:11:5f:17:10:19:ee:99:f6:09:
d2:d0:82:7b:33:b3:e1:0b:77:1c:c7:c6:78:65:a6:3e:8e:80:
64:45:f0:7f:2c:02:b5:ea:df:15:52:0e:b3:9c:09:c7:d9:c0:
ed:26:fa:28:ab:41:9a:8c:f8:43:f8:6b:2e:85:4e:fc:d9:53:
c7:25:cd:ee:f2:5a:30:d3:12:c3:66:fa:ba:7c:7b:87:58:77:
4a:48:3f:29:4f:bf:b8:e2:1a:bc:d4:95:02:8e:db:8c:07:9c:
d7:64:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:29 2025 by rpki-client