Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/27cf00-a8bd-4108-a56a-76a09215f9e9/1/74iM-y05d43g_Xrnn7bfizSkJuA.roa
File: 74iM-y05d43g_Xrnn7bfizSkJuA.roa (raw, json)
Hash identifier: SQVF2NdoIvbEJEE5mw0IM1hPxlhGAwuRikAZfqBsv/s=
Subject key identifier: EF:88:8C:FB:2D:39:77:8D:E0:FD:7A:E7:9F:B6:DF:8B:34:A4:26:E0
Certificate issuer: /CN=3e8712f7be8cb487783fc0a69b01b7dbe8729e71
Certificate serial: ACE705
Authority key identifier: 3E:87:12:F7:BE:8C:B4:87:78:3F:C0:A6:9B:01:B7:DB:E8:72:9E:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocS976MtId4P8CmmwG32-hynnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/27cf00-a8bd-4108-a56a-76a09215f9e9/1/74iM-y05d43g_Xrnn7bfizSkJuA.roa
Signing time: Sat 01 Jan 2022 06:54:04 +0000
ROA not before: Sat 01 Jan 2022 06:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34412
IP address blocks: 91.246.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11331333 (0xace705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8712f7be8cb487783fc0a69b01b7dbe8729e71
Validity
Not Before: Jan 1 06:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef888cfb2d39778de0fd7ae79fb6df8b34a426e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:ac:30:ea:0e:c0:ab:ef:85:52:d3:e0:2f:
e4:ed:f6:1d:75:8f:8e:31:30:4a:56:67:51:77:29:
4d:6b:dc:97:b2:00:f9:e3:1f:76:43:1b:3f:c9:e1:
d2:f9:07:49:b7:c6:aa:a3:b4:e5:cf:d2:ec:04:1a:
54:c2:f5:45:74:7a:8f:c7:d7:9c:71:9f:c2:74:e0:
88:77:93:24:24:7b:7e:46:8b:ac:ef:11:e4:3e:60:
21:eb:75:76:fa:6c:29:b9:c3:e6:02:5b:40:ab:3c:
0d:89:f9:0e:09:c4:9f:84:81:c4:8e:06:8c:8b:dc:
1e:77:89:57:a0:5b:92:4a:5d:d4:69:9f:b0:f2:e1:
01:01:03:28:11:b9:81:36:76:9e:7f:d0:07:a4:5b:
2d:50:09:7f:4c:43:0d:a8:69:12:be:19:06:4e:3a:
b4:7b:05:5c:7c:3b:ed:de:f5:87:97:80:10:b8:af:
ee:99:dd:fc:f0:cf:b3:9f:d1:b8:69:6a:b6:f9:a4:
3c:ce:65:4e:a5:ca:ed:94:78:24:34:d5:1a:e3:90:
23:d4:51:ae:5c:c1:ac:88:9f:50:69:71:11:b1:09:
6f:60:c4:f7:eb:f9:02:6b:69:b3:11:d2:c2:c2:5e:
82:80:5c:6d:f0:d5:d9:54:8d:ae:a9:83:c4:82:1f:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:88:8C:FB:2D:39:77:8D:E0:FD:7A:E7:9F:B6:DF:8B:34:A4:26:E0
X509v3 Authority Key Identifier:
keyid:3E:87:12:F7:BE:8C:B4:87:78:3F:C0:A6:9B:01:B7:DB:E8:72:9E:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocS976MtId4P8CmmwG32-hynnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/27cf00-a8bd-4108-a56a-76a09215f9e9/1/74iM-y05d43g_Xrnn7bfizSkJuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/27cf00-a8bd-4108-a56a-76a09215f9e9/1/PocS976MtId4P8CmmwG32-hynnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f6:7d:ae:c7:0b:56:1d:37:56:42:75:56:06:98:ec:24:93:
65:a8:55:7f:5d:c7:46:f2:73:76:d1:c0:c4:93:16:41:a0:21:
f2:57:bf:20:ed:54:b0:82:22:84:8e:80:51:f4:ba:b6:ce:e1:
06:4d:33:22:33:b5:22:db:81:20:d7:06:c8:19:e4:e1:1e:fb:
61:14:3d:44:f7:04:29:dd:66:1a:7a:b8:b7:79:e1:f4:1e:ed:
b4:ad:4e:c8:bf:13:84:5b:af:64:b2:12:d5:90:63:81:58:cf:
65:f1:6e:c4:49:1c:29:aa:60:ae:d0:ab:66:f7:37:f7:e0:b3:
01:e2:3d:d0:52:0a:34:6e:eb:49:e0:8e:d7:f8:f2:53:ac:e6:
8f:1a:bf:4a:e0:12:97:54:00:c1:25:2f:0b:5e:26:77:59:27:
68:6a:6c:6f:fb:83:82:2f:4e:d7:0b:a4:b5:ef:c0:46:24:b6:
7c:f7:0f:1d:a1:6a:02:24:5c:8f:d7:0b:31:4d:07:0c:6d:7f:
58:a1:2a:57:96:ed:31:64:fb:21:f1:5e:44:a5:1a:72:93:fd:
7d:3d:e5:c8:f3:8c:ce:03:22:37:a8:69:0e:60:75:98:e3:85:
f4:2f:f4:62:84:dc:54:7c:fc:d4:50:40:81:0b:58:e9:37:1e:
53:32:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:42 2024 by rpki-client on console-ams.rpki-client.org