Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/XcRwlz9jmt7WyGYO0hDZ1pI3GgY.roa
File: XcRwlz9jmt7WyGYO0hDZ1pI3GgY.roa (raw, json)
Hash identifier: VHT7XEERzNELDblKTaolAlvQbMpoQtjCz1E/bsnE18s=
Subject key identifier: 5D:C4:70:97:3F:63:9A:DE:D6:C8:66:0E:D2:10:D9:D6:92:37:1A:06
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 3539A4C2
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/XcRwlz9jmt7WyGYO0hDZ1pI3GgY.roa
Signing time: Wed 15 Jun 2022 14:04:46 +0000
ROA not before: Wed 15 Jun 2022 14:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.224.0/19 maxlen: 19
91.108.255.0/24 maxlen: 24
91.108.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892970178 (0x3539a4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jun 15 14:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dc470973f639aded6c8660ed210d9d692371a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:11:8f:33:3f:28:4c:fc:cb:e3:5d:6c:67:
a7:63:1a:64:af:98:27:5f:f1:4c:11:a4:05:9a:72:
34:d6:41:65:94:b8:a6:04:b2:82:e7:96:95:41:82:
7e:6b:d1:eb:e2:00:51:e0:1b:44:a6:e2:e7:39:9a:
4a:10:95:3d:fb:99:05:50:05:b5:9b:b5:7c:d0:df:
16:54:1d:f7:20:04:93:e7:92:f5:ac:7a:a9:cc:b2:
aa:a3:48:3b:fe:6b:0a:f4:ed:ea:80:31:b6:fc:46:
d9:e1:3d:d5:e4:93:f1:08:aa:6a:c8:21:af:4e:49:
c7:21:dd:16:fb:70:9d:06:81:e3:18:0c:91:39:d2:
e3:3e:37:70:d5:4e:d4:58:6e:81:1b:a8:ad:30:a3:
24:69:3c:7a:c5:ae:34:0e:63:d6:5d:e3:87:b8:e1:
b7:80:07:e8:f4:36:53:83:dc:f3:6e:26:61:46:43:
d5:11:d8:7a:30:de:79:b6:c8:61:32:a2:f1:7e:10:
84:e1:37:35:8f:63:89:34:37:c9:e0:37:a8:ce:55:
55:7a:66:fe:d5:06:e5:15:cb:95:6e:dc:8c:73:c1:
b0:dc:2d:8e:63:17:d0:52:35:cd:02:14:3f:e4:29:
30:53:e5:21:0e:19:c4:3b:bb:90:6a:27:36:89:99:
d7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C4:70:97:3F:63:9A:DE:D6:C8:66:0E:D2:10:D9:D6:92:37:1A:06
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/XcRwlz9jmt7WyGYO0hDZ1pI3GgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/22
91.108.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:70:fd:50:77:3c:13:0b:3c:20:54:cc:1d:c2:a2:e8:48:37:
5e:ce:c3:27:20:bb:45:b7:ae:73:b7:27:18:f5:9a:80:8e:a9:
26:fe:a7:55:0d:67:d3:30:18:12:65:0a:ad:13:a1:3a:a2:ea:
a3:23:26:40:d1:7b:af:a4:c9:6c:30:cb:f7:0f:3a:6c:3c:7d:
34:00:91:fb:ac:fb:da:1d:e5:03:97:20:66:44:a8:5b:9f:2f:
69:2d:00:35:05:97:58:50:9f:72:11:f1:22:b9:b5:7e:c7:49:
50:02:54:a2:43:8c:a2:25:19:de:27:67:2f:cb:5a:43:44:ca:
2d:36:c3:5d:5a:e0:84:fe:d5:7c:7b:2f:94:ee:cf:c2:bb:db:
b7:5f:6a:6c:a3:61:75:29:99:47:97:33:c0:c8:89:cb:ba:8c:
2e:44:a8:53:b1:37:a6:85:3a:55:10:78:95:8b:73:80:08:e7:
2a:c0:a6:49:45:03:c3:e8:49:64:94:79:fe:9c:62:f8:61:ac:
1c:2c:e7:77:3c:bd:1f:f6:53:6a:86:59:eb:4c:a1:0d:37:d1:
6d:4a:5d:60:6b:c4:11:c4:22:50:f6:7b:62:ee:36:07:a5:f8:
c4:cf:aa:24:47:71:1f:5d:39:ea:71:5e:bf:93:ce:e6:d7:a8:
69:5f:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org