Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/H30auULydNxyy-C7uIlQaiTUbl0.roa
File: H30auULydNxyy-C7uIlQaiTUbl0.roa (raw, json)
Hash identifier: UTM8NraVmGQA1YX012rMJkZhTe04oV+1Lumq9fsy6FM=
Subject key identifier: 1F:7D:1A:B9:42:F2:74:DC:72:CB:E0:BB:B8:89:50:6A:24:D4:6E:5D
Certificate issuer: /CN=711b4f3aa45dc4ec336d62e9a7e89d79b3efcab0
Certificate serial: 018CC6B7B5C053A74E7C95AAB219B3DBEC26
Authority key identifier: 71:1B:4F:3A:A4:5D:C4:EC:33:6D:62:E9:A7:E8:9D:79:B3:EF:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRtPOqRdxOwzbWLpp-idebPvyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/H30auULydNxyy-C7uIlQaiTUbl0.roa
Signing time: Mon 01 Jan 2024 20:29:37 +0000
ROA not before: Mon 01 Jan 2024 20:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 91.238.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b5:c0:53:a7:4e:7c:95:aa:b2:19:b3:db:ec:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711b4f3aa45dc4ec336d62e9a7e89d79b3efcab0
Validity
Not Before: Jan 1 20:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f7d1ab942f274dc72cbe0bbb889506a24d46e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:38:af:ee:b7:8b:04:70:50:5f:3a:78:1b:
b7:41:8a:3b:c1:da:e3:59:5e:a0:89:12:e0:22:31:
67:94:20:ed:99:2c:68:36:7e:d4:ab:a0:64:61:0b:
72:0e:dd:86:12:fc:9c:fa:ce:90:2f:e5:23:e3:33:
ec:4b:d0:48:01:3b:d7:36:5b:9c:a8:b9:5e:0f:0e:
04:7b:55:33:e5:a4:66:26:1d:2e:37:b3:4e:a8:77:
e9:b5:a3:98:5f:80:86:98:94:39:7a:06:e7:dd:43:
56:77:e2:e0:0e:61:12:14:3a:96:ac:03:ca:e5:98:
c3:eb:bc:a3:c0:f5:4d:84:c6:36:07:54:5f:55:c4:
5e:f1:97:e6:37:58:26:5b:6a:a1:2d:ef:f4:8d:18:
83:97:66:c3:fa:14:bf:46:d9:70:fa:3e:33:1f:04:
c3:c9:ef:b5:f9:8b:af:2e:b8:d5:97:bb:0d:56:b7:
e0:39:50:25:9d:53:15:69:af:79:dd:f0:65:93:42:
de:6d:11:59:c7:ad:40:16:13:e3:db:4a:cd:b0:b8:
75:e7:bb:79:6e:7e:88:d6:1c:01:c4:24:f5:c9:c9:
45:60:b3:eb:5d:e1:f3:39:d4:59:e6:43:29:d0:b6:
0f:ed:be:f3:c2:28:cb:68:ce:08:d3:cf:88:c9:59:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7D:1A:B9:42:F2:74:DC:72:CB:E0:BB:B8:89:50:6A:24:D4:6E:5D
X509v3 Authority Key Identifier:
keyid:71:1B:4F:3A:A4:5D:C4:EC:33:6D:62:E9:A7:E8:9D:79:B3:EF:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRtPOqRdxOwzbWLpp-idebPvyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/H30auULydNxyy-C7uIlQaiTUbl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/cRtPOqRdxOwzbWLpp-idebPvyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a3:02:2f:89:f3:ed:4d:dd:ed:5c:2e:e1:d7:9c:a4:5c:5f:
97:38:95:a1:6c:a4:8f:e0:ce:7c:bb:6d:84:e9:88:c4:6e:0f:
a0:a1:98:b9:79:4b:22:94:b7:84:65:c1:e5:21:62:b2:f5:ee:
60:14:98:0f:5c:e8:62:3f:24:2f:a4:4a:f8:55:96:30:d4:2f:
96:53:fd:f5:b6:64:99:af:da:f8:e6:46:10:be:50:1a:d4:c4:
55:e2:07:68:2c:3b:7c:92:8f:6e:98:06:41:ee:b6:48:95:7c:
34:1a:20:80:6f:34:6f:ce:43:99:ae:4e:fa:33:37:b4:6c:21:
6d:c0:76:7f:d7:f4:9b:88:ee:35:c2:76:da:42:e7:41:31:d3:
aa:7a:2f:a2:a9:d7:7b:f6:20:5c:40:cd:48:52:0d:60:27:ac:
4e:cd:33:aa:80:7c:f6:70:ff:01:2f:e3:f7:e2:16:05:67:38:
e3:42:2c:ef:81:e9:3a:3f:51:ab:14:7c:0c:bc:b1:25:37:44:
9a:48:69:4d:dd:45:e8:37:25:fa:5e:15:97:21:f2:f0:88:44:
c6:14:37:34:e9:d3:2d:42:33:81:f8:62:8e:d6:fa:03:7c:e0:
84:ef:a0:83:3e:3a:3c:33:af:33:54:25:14:b9:5e:c9:d3:6d:
40:21:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:43 2024 by rpki-client on console-ams.rpki-client.org