Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/hVhZq7lYC3XLrbHHH8iwu4Ai_G4.roa
File: hVhZq7lYC3XLrbHHH8iwu4Ai_G4.roa (raw, json)
Hash identifier: EVRVJUPq7OkAV0HC22gOpLPiOL+lD8taSU13M+V8j30=
Subject key identifier: 85:58:59:AB:B9:58:0B:75:CB:AD:B1:C7:1F:C8:B0:BB:80:22:FC:6E
Certificate issuer: /CN=057a0525a9781c22652b9fbdbf0298900eee161c
Certificate serial: 018262F77FC639652D0C3AE225E7C4503298
Authority key identifier: 05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/hVhZq7lYC3XLrbHHH8iwu4Ai_G4.roa
Signing time: Wed 03 Aug 2022 09:09:23 +0000
ROA not before: Wed 03 Aug 2022 09:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55569
IP address blocks: 91.199.242.0/24 maxlen: 24
185.235.87.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:f7:7f:c6:39:65:2d:0c:3a:e2:25:e7:c4:50:32:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057a0525a9781c22652b9fbdbf0298900eee161c
Validity
Not Before: Aug 3 09:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=855859abb9580b75cbadb1c71fc8b0bb8022fc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:32:89:68:5b:4f:81:95:c0:5e:57:2e:a4:
65:26:ce:43:44:26:ea:0a:20:56:22:b7:50:72:e7:
07:b5:32:db:7d:71:bc:10:cf:05:1d:a8:ef:2c:d3:
58:77:91:58:41:41:29:aa:9c:04:2d:38:fe:1b:27:
b7:7c:8f:27:46:a8:7a:c1:74:2a:79:7d:fb:51:96:
47:34:8f:ba:03:12:ac:c8:55:49:be:81:66:12:33:
0a:0b:a9:af:c6:9b:4f:6f:e1:02:e6:4e:2b:4d:83:
d1:47:94:8a:16:c9:94:29:3c:b4:ab:35:8b:1d:fe:
d1:56:db:56:4f:aa:bf:89:c5:64:a0:5b:44:c1:0a:
58:63:7c:78:3c:96:5e:0d:6d:05:0d:d2:37:c5:59:
f3:92:0b:d3:f0:1c:76:6f:fc:5c:2e:35:21:47:47:
5c:2b:b3:1d:3b:bf:a6:bc:3b:45:13:ec:f7:69:a5:
86:51:57:23:b5:79:27:05:94:6c:23:d5:2b:2d:ae:
d5:b4:77:1f:b8:7b:b3:16:fc:82:dc:f8:b5:6e:c7:
5c:b2:0f:74:a2:70:b1:53:8e:30:05:85:55:06:f5:
e9:2e:5a:4e:ea:8e:6e:25:fd:b9:a9:42:e4:e1:de:
46:0a:b2:67:e4:43:c6:19:ef:b8:80:4c:34:bf:cf:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:59:AB:B9:58:0B:75:CB:AD:B1:C7:1F:C8:B0:BB:80:22:FC:6E
X509v3 Authority Key Identifier:
keyid:05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/hVhZq7lYC3XLrbHHH8iwu4Ai_G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
185.235.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:92:28:52:d2:cc:97:fa:2a:26:a8:11:40:c1:75:13:8d:58:
f2:37:99:25:13:73:92:fd:6d:05:bd:92:16:9c:c6:9e:4e:fd:
9f:4e:f3:b0:fa:c9:fa:69:96:35:9b:c1:a2:d0:cd:d2:e1:7c:
9b:e7:78:8c:91:74:14:21:64:2e:ad:19:3d:e4:81:b7:be:7b:
67:6a:0e:74:e9:5e:e6:83:f7:17:9a:ad:2c:9a:29:09:00:7e:
bd:41:f9:ae:e7:e5:e0:1e:56:74:ed:c4:f1:88:34:0e:ce:ea:
ee:af:a0:a5:4f:50:d1:e7:e5:8c:c8:40:a1:23:4d:f3:c8:b8:
c3:5a:ee:9b:bb:0c:00:25:1a:87:b6:93:03:3c:d0:95:9b:57:
f8:49:ef:d3:c4:16:0e:f7:00:3b:91:ea:56:25:f6:b8:ac:73:
4b:72:31:2c:a5:26:53:54:96:00:17:0b:e8:88:33:8d:a4:de:
61:64:06:3d:be:08:52:e7:28:cf:55:b7:47:05:32:42:97:bf:
93:a6:14:43:98:b9:ce:75:07:65:33:02:0a:ce:61:77:b1:3c:
94:67:9e:14:e7:0b:ab:2b:c3:51:d9:ff:18:80:0b:ce:1a:52:
be:53:6a:c3:0e:f2:13:bf:69:c9:0a:8f:33:e5:19:df:42:8a:
ce:e1:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:16 2023 by rpki-client on console-ams.rpki-client.org