Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/gefUjl7WQs4oOwQD5Jb-Gm1x8oU.roa
File: gefUjl7WQs4oOwQD5Jb-Gm1x8oU.roa (raw, json)
Hash identifier: Ix6SVBv85MtMKae4GPT4uVZoxswchcECLjowdO39kD0=
Subject key identifier: 81:E7:D4:8E:5E:D6:42:CE:28:3B:04:03:E4:96:FE:1A:6D:71:F2:85
Certificate issuer: /CN=7f779a440f19c7d727401512254b5c30cd078e32
Certificate serial: 0183EB82F48453E98B813BCAFDC453BD4D9B
Authority key identifier: 7F:77:9A:44:0F:19:C7:D7:27:40:15:12:25:4B:5C:30:CD:07:8E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/gefUjl7WQs4oOwQD5Jb-Gm1x8oU.roa
Signing time: Tue 18 Oct 2022 14:32:51 +0000
ROA not before: Tue 18 Oct 2022 14:32:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21009
IP address blocks: 91.220.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:82:f4:84:53:e9:8b:81:3b:ca:fd:c4:53:bd:4d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f779a440f19c7d727401512254b5c30cd078e32
Validity
Not Before: Oct 18 14:32:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81e7d48e5ed642ce283b0403e496fe1a6d71f285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:63:1b:12:d2:43:b6:76:4b:d8:3f:e6:aa:
31:52:bb:da:e1:dc:68:8a:91:48:b6:26:df:27:7f:
50:28:86:0f:31:3d:d6:92:a1:10:21:b6:ab:c0:f5:
53:70:60:e3:92:78:6d:8d:37:5a:1e:2d:c2:c9:03:
23:3d:00:e1:89:3f:b9:29:e3:24:0b:12:0a:cd:1f:
19:72:23:b2:db:34:e1:47:8f:1c:aa:70:54:de:59:
7d:21:bf:6c:72:f4:be:85:b8:de:7c:ba:cd:ae:83:
64:48:63:11:bd:18:d8:86:09:0d:b1:c1:0b:0d:08:
b4:d4:94:83:e4:84:7b:22:7f:1d:63:ba:9d:60:eb:
50:a9:5e:59:a4:f5:b6:b0:10:c2:9f:45:ad:b3:65:
5a:5f:b0:74:fb:0b:3e:03:c3:35:76:f1:9e:6f:73:
a0:74:d4:f6:6b:71:44:ad:4d:8e:db:8e:ee:47:54:
1b:59:fe:29:58:8e:76:38:1e:65:bf:dc:ce:2a:a7:
12:6a:7f:f7:8b:0d:fc:e1:a5:39:3c:7f:d3:3f:99:
bf:2d:14:d1:8a:b5:bc:83:23:56:33:0f:4b:97:ef:
a2:65:a5:d7:0c:87:d8:9d:34:1c:fa:71:f6:9e:ef:
16:b3:5e:79:27:7c:fc:81:b9:c7:7f:5c:1c:cf:8a:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E7:D4:8E:5E:D6:42:CE:28:3B:04:03:E4:96:FE:1A:6D:71:F2:85
X509v3 Authority Key Identifier:
keyid:7F:77:9A:44:0F:19:C7:D7:27:40:15:12:25:4B:5C:30:CD:07:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/gefUjl7WQs4oOwQD5Jb-Gm1x8oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.158.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e1:ea:2d:05:80:8e:ee:53:83:f0:66:be:5f:ec:f8:7b:6c:
9a:a3:e1:fd:b3:38:af:9a:a1:c1:d0:da:79:fd:a6:1a:fd:7c:
04:eb:d7:f8:68:47:fa:85:4a:03:33:92:7b:82:15:81:fb:39:
13:da:50:6e:63:95:8f:9d:04:32:57:d2:d1:48:64:66:f3:c0:
d2:0c:43:95:aa:19:8e:0a:da:53:dd:8c:b7:72:fb:69:e3:90:
c9:25:09:0d:7b:b4:07:d5:e2:8f:70:de:ec:42:f1:3a:a1:a6:
02:72:1c:1f:77:18:c3:56:9c:b4:10:01:d5:cb:45:dc:fe:f0:
7d:a5:cb:15:fe:21:35:ea:d0:27:5b:ff:a5:48:4e:65:22:c1:
33:16:31:dd:47:8b:e2:75:c9:d4:fd:90:5c:05:27:95:6a:5a:
67:69:9e:aa:c7:9e:97:f0:6f:8a:e3:5d:86:c5:16:d0:e7:d3:
08:ef:b0:c5:2c:2e:32:20:76:ad:59:4a:4a:90:8d:b2:ea:95:
58:ab:72:56:4c:71:41:87:b2:1f:3c:f0:9e:19:3e:b8:29:37:
41:d0:90:22:2f:82:10:ee:ab:80:32:21:85:dd:4d:b0:50:78:
51:92:77:ce:55:e3:c0:8c:ec:90:c9:13:73:1a:44:2c:3f:6c:
29:5d:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:02 2024 by rpki-client on console-fra.rpki-client.org