Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/18ub3agWi1MhSOTBj8YawvHXMVI.roa
File: 18ub3agWi1MhSOTBj8YawvHXMVI.roa (raw, json)
Hash identifier: uRPE1xz8EE3FE1EsJQQxxJ+eByVFxewqSWGBUPQJokY=
Subject key identifier: D7:CB:9B:DD:A8:16:8B:53:21:48:E4:C1:8F:C6:1A:C2:F1:D7:31:52
Certificate issuer: /CN=91aa574b511c291b7cfae9195bdd09e0038602c0
Certificate serial: 01856F54BB756CC28DF65EE22DAD08FDA47C
Authority key identifier: 91:AA:57:4B:51:1C:29:1B:7C:FA:E9:19:5B:DD:09:E0:03:86:02:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kapXS1EcKRt8-ukZW90J4AOGAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/18ub3agWi1MhSOTBj8YawvHXMVI.roa
Signing time: Sun 01 Jan 2023 21:55:01 +0000
ROA not before: Sun 01 Jan 2023 21:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:bb:75:6c:c2:8d:f6:5e:e2:2d:ad:08:fd:a4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aa574b511c291b7cfae9195bdd09e0038602c0
Validity
Not Before: Jan 1 21:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7cb9bdda8168b532148e4c18fc61ac2f1d73152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:c9:a3:ce:37:27:5a:d8:cd:0f:bd:6c:46:
69:e8:06:59:ac:e7:f6:b5:6b:73:25:e4:a6:47:39:
27:d8:11:e7:a4:36:2f:db:73:63:51:df:ca:50:20:
ab:4e:b2:21:fb:c0:e2:ff:44:39:79:01:19:38:95:
53:e4:1e:02:13:62:b5:b3:83:03:ff:6c:4d:55:13:
8d:02:c2:2b:b6:6a:7e:39:9d:fd:57:61:b8:24:73:
a3:12:2e:bf:44:ef:fc:c3:3d:f7:6a:77:c0:fe:df:
e4:b9:73:2e:dc:37:8f:f9:8e:f3:18:49:1c:4a:1f:
c5:34:61:b1:a7:2f:47:39:29:96:58:d5:7e:14:1b:
b3:d5:4d:dd:55:16:4b:73:e3:7e:2b:31:aa:cd:a5:
44:bc:97:78:52:b1:dd:7b:a9:91:34:3a:6a:2a:fb:
4e:a1:54:f8:18:79:9b:35:20:27:9b:2e:de:58:6e:
44:b0:0d:37:3e:34:9f:0f:f1:ff:43:f4:f3:60:41:
45:af:c9:5f:d2:f0:fc:da:af:9c:0e:9c:7b:1d:9f:
dc:2b:f1:7f:9e:59:78:26:c5:09:fe:64:b6:02:bc:
f3:e3:b0:30:f3:c9:9c:bf:40:77:31:bb:f7:47:be:
90:f5:b1:1e:42:b3:e4:3d:3c:59:1b:3e:05:9b:76:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:9B:DD:A8:16:8B:53:21:48:E4:C1:8F:C6:1A:C2:F1:D7:31:52
X509v3 Authority Key Identifier:
keyid:91:AA:57:4B:51:1C:29:1B:7C:FA:E9:19:5B:DD:09:E0:03:86:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kapXS1EcKRt8-ukZW90J4AOGAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/18ub3agWi1MhSOTBj8YawvHXMVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/kapXS1EcKRt8-ukZW90J4AOGAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.225.0/24
Signature Algorithm: sha256WithRSAEncryption
40:da:9b:c0:9b:56:92:94:e9:66:b3:95:61:5d:c1:9c:2c:d0:
a4:2c:97:3d:55:aa:f9:b5:29:89:91:f1:29:d0:7d:c5:66:c7:
73:68:dd:90:bb:8a:e6:c6:17:4b:6d:e6:72:b9:ba:90:11:0f:
b1:21:41:10:82:6d:ee:44:bc:03:eb:c7:73:ad:a4:88:b5:0d:
e2:f1:b3:47:80:37:0d:dc:53:2a:35:b3:64:7e:38:00:67:f2:
ea:d4:e3:34:9f:f3:f8:08:7b:1b:39:2d:fb:89:de:44:e3:ab:
4a:b7:4c:25:ad:a1:1d:43:eb:99:91:1e:db:1c:1e:a8:e7:4e:
e4:1e:a3:74:5d:32:05:24:2a:8a:50:20:fe:1f:d1:13:62:b1:
a8:ba:4f:14:23:dd:e4:ca:ce:a8:1d:cf:0f:b1:91:f0:bd:87:
53:e2:ff:e0:58:67:8a:bb:3d:d4:44:90:a6:ed:ec:88:0d:87:
f7:c1:bb:f0:1b:7e:6b:71:12:8d:b5:c9:6c:a2:b2:01:3e:c6:
d7:87:0e:13:70:e9:6c:6b:63:61:8d:1b:0e:ce:6e:36:3c:3b:
71:5f:cb:d8:92:8b:b6:f9:54:4f:62:f3:e3:f5:2a:39:35:08:
bb:bb:8e:6e:cf:d5:1b:1e:8f:bc:23:76:87:e3:1e:b5:4d:6d:
e1:b7:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org