Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/1-vjoSIx7_L-OxFvkUY10fcZPBrw.roa
File: 1-vjoSIx7_L-OxFvkUY10fcZPBrw.roa (raw, json)
Hash identifier: BmEd8C2Yq0vzkhNbh5tOU+FH37vK9Iqs7ABztS2zsw4=
Subject key identifier: FA:F8:E8:48:8C:7B:FC:BF:8E:C4:5B:E4:51:8D:74:7D:C6:4F:06:BC
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 33A92F90
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/1-vjoSIx7_L-OxFvkUY10fcZPBrw.roa
Signing time: Sat 01 Jan 2022 15:03:56 +0000
ROA not before: Sat 01 Jan 2022 15:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 91.108.255.0/24 maxlen: 24
91.108.192.0/19 maxlen: 19
91.108.192.0/22 maxlen: 22
91.108.196.0/22 maxlen: 22
91.108.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866725776 (0x33a92f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 1 15:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf8e8488c7bfcbf8ec45be4518d747dc64f06bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:f5:49:5c:f0:6f:68:5b:f2:d4:86:2d:12:
a0:a6:3f:2b:7c:f9:5d:ab:96:13:74:e6:db:bc:06:
f6:15:1d:d3:4a:90:3d:f8:0a:07:64:0e:05:71:06:
a5:8a:2c:99:0e:dc:fd:eb:2a:ad:9c:ff:1e:1f:64:
a0:4f:0b:da:a3:b8:c3:7b:ef:9a:67:b4:0e:be:8a:
d3:84:32:65:88:db:1c:79:2f:cf:ce:18:e7:05:20:
0b:47:40:32:8a:67:fc:03:17:0c:4c:e8:77:36:43:
49:3a:16:c3:04:93:06:39:d1:c0:7a:4f:ce:76:1b:
25:f7:8c:cb:dd:30:ec:c5:e4:14:c4:07:f4:97:84:
04:48:7b:66:09:b7:37:d8:40:15:2c:3f:37:fd:9c:
59:23:22:15:74:7d:9e:00:b8:7e:da:01:97:96:4b:
4b:cf:c2:56:96:e8:cb:12:88:91:e0:92:64:70:fa:
59:96:93:42:f3:4c:1d:f1:f0:ea:28:26:9a:74:21:
ad:78:ea:6c:82:67:c1:65:23:f4:dd:54:ce:8b:83:
1a:b3:2e:41:6c:0b:b7:f6:9d:ef:e7:4f:6c:99:26:
5d:67:9b:91:4a:a3:70:4a:6e:11:fd:4b:6f:c7:f5:
d2:40:ea:d5:05:e9:23:9c:80:19:89:4e:2c:ae:8f:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:E8:48:8C:7B:FC:BF:8E:C4:5B:E4:51:8D:74:7D:C6:4F:06:BC
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/1-vjoSIx7_L-OxFvkUY10fcZPBrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/19
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:87:e9:43:1d:91:9d:1e:51:fa:02:09:92:9d:7d:59:79:c8:
61:6b:52:4d:8a:b2:0a:3b:b6:01:17:3b:bb:ac:c3:f2:76:b8:
89:bc:fe:a9:2a:02:a2:ed:ed:eb:42:a1:59:0d:6b:ba:d6:1f:
8a:e1:40:f0:78:bb:bf:5e:db:02:a5:d3:43:99:82:21:01:2a:
98:8d:56:ff:c8:b9:95:ee:e9:0e:bf:5e:9f:85:2f:92:d7:53:
49:34:3d:fd:37:12:68:02:85:fc:db:d2:f6:5e:1d:cf:21:d2:
a4:c2:09:3d:de:34:e8:f0:5d:99:28:dd:18:34:ad:dc:5d:af:
bd:d5:11:27:98:c6:30:d9:5d:17:80:69:cb:ea:d3:5f:6e:58:
9e:06:f1:dd:d8:60:47:87:86:34:22:a8:0a:ac:41:2c:13:aa:
de:cb:23:6e:97:e0:b0:87:7a:35:8a:ac:0d:cd:f6:88:de:8f:
24:6b:54:da:dc:0e:81:84:cd:df:94:49:47:c7:a1:56:3a:2c:
d4:85:23:ac:ba:04:1e:b2:77:a7:91:cb:91:0d:75:1a:e6:98:
c7:cf:69:dd:b9:77:e3:9f:31:34:63:ea:00:36:51:dc:12:55:
00:7e:30:49:57:7d:f8:36:2b:c8:4a:c9:f4:7f:1f:9e:a8:a9:
93:28:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:00 2024 by rpki-client on console-fra.rpki-client.org