Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/_SirRy2UpJD8_BWEh8kMC9tNc6g.roa
File: _SirRy2UpJD8_BWEh8kMC9tNc6g.roa (raw, json)
Hash identifier: 6B43pncnzrWPxvn7Eoe1jx+T9vJZIxK1GLbqbTIcrK0=
Subject key identifier: FD:28:AB:47:2D:94:A4:90:FC:FC:15:84:87:C9:0C:0B:DB:4D:73:A8
Certificate issuer: /CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Certificate serial: 01887362C391AB9C0EBC3971F73EB68E9788
Authority key identifier: C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/_SirRy2UpJD8_BWEh8kMC9tNc6g.roa
Signing time: Wed 31 May 2023 19:57:12 +0000
ROA not before: Wed 31 May 2023 19:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.48.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:62:c3:91:ab:9c:0e:bc:39:71:f7:3e:b6:8e:97:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Validity
Not Before: May 31 19:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd28ab472d94a490fcfc158487c90c0bdb4d73a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:e7:31:df:4a:e4:4e:06:f5:ea:4c:1f:16:
68:74:54:2f:41:d0:10:fc:60:02:ae:31:4f:36:82:
9c:19:ec:0d:22:b9:47:f1:c0:db:4f:4b:bc:74:06:
a8:34:4c:0e:58:4f:53:62:1b:52:a0:d8:94:f9:67:
e2:57:4c:19:5b:51:76:3d:08:a7:55:45:36:f1:df:
a7:57:ed:70:b9:67:df:00:70:91:34:96:f9:fa:61:
14:81:15:dd:b9:e0:dd:2f:36:79:36:5a:0c:3b:63:
2c:4a:52:13:58:b6:fb:b6:82:23:16:6b:10:51:13:
e7:a4:75:4f:87:cf:63:0a:0c:02:08:97:24:af:93:
6a:c3:6b:09:ca:53:ad:e4:7c:ad:ed:97:f6:b5:3f:
90:42:0a:5b:a5:8a:a7:23:6c:b3:ef:45:93:98:7d:
3e:7f:0a:ea:64:93:8f:88:1b:f4:16:15:45:a9:ff:
e8:65:fb:54:45:f7:9a:e0:a9:2d:8b:04:10:86:9d:
e1:f8:07:89:aa:ac:d6:9b:10:55:2c:b3:ef:bd:13:
cf:14:46:63:26:84:27:49:1c:dd:0b:16:ed:31:c5:
4b:af:36:e2:8b:3a:45:3d:ac:32:a5:5c:ee:09:52:
78:7b:f9:fb:5a:18:9c:0b:78:32:65:a0:a5:08:c8:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:28:AB:47:2D:94:A4:90:FC:FC:15:84:87:C9:0C:0B:DB:4D:73:A8
X509v3 Authority Key Identifier:
keyid:C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/_SirRy2UpJD8_BWEh8kMC9tNc6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/yaNv36QcdGnOc9yLvs6UYty4yCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.100.0/22
Signature Algorithm: sha256WithRSAEncryption
36:a5:76:db:80:98:63:22:48:ee:f2:6f:ef:4e:9f:54:fb:70:
50:e2:83:42:20:c9:4a:18:2e:9f:7f:38:83:15:49:bf:bb:9f:
35:5f:b4:a7:38:73:12:f2:7d:86:65:65:53:d7:05:e2:51:00:
19:e6:55:98:68:ad:1a:5f:e4:bd:88:78:9d:7c:c3:b2:d6:4e:
43:51:04:09:f0:80:07:40:7f:7d:51:07:40:a3:b7:c3:bf:42:
71:b0:3d:03:4c:da:b9:d3:0f:d4:77:41:68:87:91:20:70:f5:
e6:c5:a8:07:6b:de:f5:b9:7a:3e:e1:69:80:ee:a2:8a:18:40:
1b:fc:f0:cc:80:ed:bb:7a:13:dc:03:fe:89:65:9a:1f:4b:b2:
a9:d9:a9:8f:65:95:ba:3d:c2:29:18:2c:f7:3f:ce:54:7b:f3:
7c:31:ad:a9:24:e6:b8:92:f6:83:81:b3:77:06:19:e7:a0:54:
af:14:49:31:67:66:de:ed:bc:ad:d2:cc:cf:5d:c9:e4:9f:1a:
fa:6a:de:c3:c1:46:b5:8a:c6:f2:6f:6a:0e:e4:1e:14:6f:6d:
23:b2:ca:27:7a:43:3c:ad:1f:b8:71:f5:20:ac:76:f3:8d:8b:
1e:42:63:cb:39:01:9e:b2:4e:7f:92:f4:9e:e5:b6:2e:47:cc:
03:82:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-fra.rpki-client.org