Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/JT4AUcD3yTm3GmfX3Ln2j8KmhzY.roa
File: JT4AUcD3yTm3GmfX3Ln2j8KmhzY.roa (raw, json)
Hash identifier: BbqMqBjlREZryjRViuMVB4xze97BD0i4ruDYMV++EmU=
Subject key identifier: 25:3E:00:51:C0:F7:C9:39:B7:1A:67:D7:DC:B9:F6:8F:C2:A6:87:36
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 018570708BE579F5560DC4D10954D6828224
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/JT4AUcD3yTm3GmfX3Ln2j8KmhzY.roa
Signing time: Mon 02 Jan 2023 03:05:02 +0000
ROA not before: Mon 02 Jan 2023 03:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207710
IP address blocks: 91.108.255.0/24 maxlen: 24
91.108.192.0/19 maxlen: 24
91.108.192.0/22 maxlen: 22
91.108.196.0/22 maxlen: 22
91.108.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:8b:e5:79:f5:56:0d:c4:d1:09:54:d6:82:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 2 03:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=253e0051c0f7c939b71a67d7dcb9f68fc2a68736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:c9:5d:04:7a:8c:88:d5:59:cd:1b:c1:d7:
e0:66:72:0a:f3:42:41:1d:cb:63:43:e8:2e:97:68:
78:84:e6:40:59:85:4d:ae:30:9e:b0:06:21:c2:14:
b9:cd:2c:23:4c:d3:e7:df:98:c0:48:61:fe:11:a2:
ea:a5:9f:af:37:76:cd:dd:ae:d5:ad:66:05:3d:00:
89:3f:26:e3:ea:62:9d:6f:36:cf:63:61:ed:f4:1d:
95:dc:e5:44:a5:6c:87:c0:62:18:d2:93:a1:16:2f:
23:64:8d:de:cc:81:82:5f:2f:08:20:2e:d4:27:48:
24:ac:12:51:9e:4e:29:01:74:17:67:a7:fa:ee:2f:
45:94:bc:e7:84:b3:64:ac:7e:b4:5b:51:09:d6:94:
d0:09:2b:c1:60:0d:6b:01:6b:7e:11:b0:6d:02:1c:
38:6a:a0:40:1a:96:82:8b:c4:cc:21:64:31:84:7d:
3f:0f:11:fa:70:31:9e:2c:13:1b:53:01:fb:98:26:
34:ba:da:b0:8c:da:53:af:bb:a5:91:0f:ef:8f:37:
66:1e:e3:68:b7:0d:17:f8:b3:a0:11:69:07:41:52:
18:b9:35:92:45:24:0a:e3:51:a1:8b:d1:9c:d8:7c:
32:01:24:84:8d:d1:9e:34:be:40:6f:f8:97:11:3e:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:00:51:C0:F7:C9:39:B7:1A:67:D7:DC:B9:F6:8F:C2:A6:87:36
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/JT4AUcD3yTm3GmfX3Ln2j8KmhzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/19
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0c:8b:81:e8:b3:7b:7e:4b:a4:73:b3:19:8a:9d:4f:ae:ae:
5c:bb:60:4d:3b:0b:62:07:d4:47:ad:bd:1d:62:98:25:78:f1:
34:38:10:7a:1c:29:05:b9:b6:19:bc:23:d3:d6:61:ae:90:bd:
d7:6e:b9:13:1e:fa:c4:91:93:63:3e:f1:b0:8c:b5:07:98:4b:
d7:2e:18:b4:4f:9a:0c:d2:f4:eb:60:18:04:26:5b:f8:5e:e7:
00:fa:14:3e:12:55:8e:04:6e:11:ee:24:9e:a2:08:a2:0f:c3:
72:c6:bf:e4:13:9f:88:92:b2:a6:1b:f2:1a:8a:27:a4:ad:51:
2c:6a:cc:c6:ad:8e:a8:77:f5:5e:b7:d0:c8:06:82:1e:89:36:
a6:08:3a:d7:12:46:bc:6f:8c:61:7d:ca:11:e4:1a:b6:73:bc:
3a:b4:88:86:a4:92:8e:75:d5:a1:e0:ab:5c:ba:5a:9d:13:97:
bf:0c:ca:7c:db:01:e9:0b:9c:99:df:c7:71:96:ac:83:9f:54:
a8:60:46:d5:7e:48:4d:43:5e:78:d4:60:7b:61:c8:a0:b8:be:
d9:6f:63:3b:3a:4b:de:04:2d:86:49:6c:7a:b0:3b:f3:00:8a:
a1:f4:7e:93:47:8e:aa:98:ef:9e:3b:d1:a9:e6:54:ed:f2:dc:
0a:2a:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org