Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/aLyHmHFniM1hsDVZGhN1C0Fr23I.roa
File: aLyHmHFniM1hsDVZGhN1C0Fr23I.roa (raw, json)
Hash identifier: oWpJnM+h54sEKcpxlIdIdNQ7DtduWNadRkYFGDjIw+s=
Subject key identifier: 68:BC:87:98:71:67:88:CD:61:B0:35:59:1A:13:75:0B:41:6B:DB:72
Certificate issuer: /CN=feacfef50c2ce5ed159f4f806483c1ea6882ebb0
Certificate serial: 12BC5EA7
Authority key identifier: FE:AC:FE:F5:0C:2C:E5:ED:15:9F:4F:80:64:83:C1:EA:68:82:EB:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qz-9Qws5e0Vn0-AZIPB6miC67A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/aLyHmHFniM1hsDVZGhN1C0Fr23I.roa
Signing time: Sat 01 Jan 2022 15:59:55 +0000
ROA not before: Sat 01 Jan 2022 15:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198537
IP address blocks: 91.236.33.0/24 maxlen: 24
91.236.34.0/24 maxlen: 24
91.236.35.0/24 maxlen: 24
91.236.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314334887 (0x12bc5ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feacfef50c2ce5ed159f4f806483c1ea6882ebb0
Validity
Not Before: Jan 1 15:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68bc8798716788cd61b035591a13750b416bdb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:1c:0c:22:ee:1c:a4:98:b2:36:18:03:fd:
e6:9a:b0:bd:44:3e:37:ae:18:28:34:2d:8b:de:d7:
d5:27:0c:74:46:01:71:45:de:ec:6e:84:ae:9e:91:
cd:9c:62:e0:69:0a:0b:e3:57:5e:38:7e:82:ae:b9:
bc:42:6e:f7:41:dc:10:02:14:20:03:9c:a0:0a:10:
ca:41:a0:d9:21:b2:53:d5:5d:5a:8d:27:ea:92:0c:
7c:a5:b9:d3:5f:ad:bc:3b:29:17:5f:55:26:08:f1:
df:17:81:fd:ec:3e:de:37:50:ae:6b:c2:53:d1:b2:
97:b1:4b:92:84:f3:b9:90:be:69:40:a0:be:0f:91:
ef:6f:2b:21:71:32:fa:e2:93:ae:eb:b3:ad:0f:41:
28:ae:cc:1a:b3:1f:31:13:b2:f3:c1:7b:e9:ce:f3:
4e:14:86:b8:b6:8e:55:45:63:8a:3b:a6:d1:52:52:
ba:5f:89:7c:40:d1:2c:0c:3d:f2:81:3f:e3:ee:03:
ea:b8:3a:4d:2b:ba:a0:08:d9:34:08:f7:f6:18:08:
6c:8f:60:49:95:68:7b:d7:fc:19:76:45:b8:b6:b3:
c7:ae:69:cc:a2:02:d1:46:2d:62:41:73:b2:e7:34:
83:ce:dc:60:49:93:37:35:da:36:7e:14:00:11:e3:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:87:98:71:67:88:CD:61:B0:35:59:1A:13:75:0B:41:6B:DB:72
X509v3 Authority Key Identifier:
keyid:FE:AC:FE:F5:0C:2C:E5:ED:15:9F:4F:80:64:83:C1:EA:68:82:EB:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qz-9Qws5e0Vn0-AZIPB6miC67A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/aLyHmHFniM1hsDVZGhN1C0Fr23I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/_qz-9Qws5e0Vn0-AZIPB6miC67A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:e0:ac:f5:5d:14:7e:75:cb:69:8e:43:a6:c9:db:7f:1e:20:
e9:2b:c7:a8:26:4f:44:36:c1:82:90:ce:1e:4b:ea:e8:30:3e:
64:a1:e3:5e:e6:0d:99:b0:27:95:f9:fa:8b:b1:4f:58:c3:76:
0f:31:e0:e5:f3:2b:0e:ab:ba:1e:40:f9:4a:9c:76:8d:b2:2b:
97:81:8a:17:32:9c:a3:17:d0:62:67:28:38:09:80:c6:f5:09:
1a:d9:4d:a2:52:d1:ef:6f:96:ed:32:e9:1d:b0:28:82:cb:27:
82:fd:42:51:58:6b:51:2f:60:85:79:c7:e5:15:16:2a:ca:1b:
c4:8f:36:33:6e:94:4d:e1:8e:72:27:67:b3:5c:32:12:b5:68:
e5:06:08:ba:5c:18:2e:b3:74:13:32:19:c6:b4:e8:af:5b:7f:
7b:29:2f:1f:30:dc:a4:e8:b1:29:0f:b1:04:ad:12:61:24:77:
6f:72:a6:29:50:c9:53:7a:64:e8:26:27:78:08:c0:b4:c9:d1:
52:1d:4f:c7:40:48:33:36:78:d6:93:7c:12:3d:f1:4d:e5:d1:
9e:89:d4:78:2f:4d:90:de:9d:8c:50:d6:6c:df:9a:95:be:63:
fe:95:47:ae:36:fd:64:c5:8c:39:78:f8:89:c6:71:34:c3:bd:
e3:31:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-fra.rpki-client.org