Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/nTFilz6Vxf3iSJagAcbbFy-JF7s.roa
File: nTFilz6Vxf3iSJagAcbbFy-JF7s.roa (raw, json)
Hash identifier: 7esHHlfaF0ZPKgVLtzKlTLVSbNivXcuA5u+730zFOy8=
Subject key identifier: 9D:31:62:97:3E:95:C5:FD:E2:48:96:A0:01:C6:DB:17:2F:89:17:BB
Certificate issuer: /CN=7f779a440f19c7d727401512254b5c30cd078e32
Certificate serial: 01856E41DCCF1D9D1388DBD0842EDED2C4C8
Authority key identifier: 7F:77:9A:44:0F:19:C7:D7:27:40:15:12:25:4B:5C:30:CD:07:8E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/nTFilz6Vxf3iSJagAcbbFy-JF7s.roa
Signing time: Sun 01 Jan 2023 16:54:48 +0000
ROA not before: Sun 01 Jan 2023 16:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21009
IP address blocks: 91.220.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:dc:cf:1d:9d:13:88:db:d0:84:2e:de:d2:c4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f779a440f19c7d727401512254b5c30cd078e32
Validity
Not Before: Jan 1 16:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d3162973e95c5fde24896a001c6db172f8917bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:4d:78:80:56:ba:00:e0:be:bd:45:73:b7:
51:fe:62:25:3a:45:51:31:8d:6a:7e:4e:ef:cb:40:
88:5b:b9:14:b3:94:e0:30:fe:fa:77:84:f4:c8:41:
be:b9:03:77:bb:6d:21:d1:68:a7:d7:a7:61:da:94:
34:67:30:de:61:6a:f6:36:bc:53:7e:7d:53:88:12:
5e:7c:25:3c:6c:cc:30:c1:7e:c0:44:c5:26:55:bc:
bb:7c:b5:ff:52:78:76:77:12:f7:df:48:e0:28:ee:
d2:6d:85:31:ea:9b:f3:a4:d3:de:48:c7:b0:f0:fe:
3a:78:6c:e0:25:a8:5e:4e:e8:62:de:05:ae:ef:a3:
5c:4e:c4:0d:42:79:a6:43:07:4f:cd:4d:73:84:19:
dd:6b:d5:ac:8c:48:9d:a4:5d:30:89:96:eb:1c:da:
bf:09:c1:18:28:4a:2c:4c:70:ec:7b:8d:5c:5b:80:
32:87:0c:8a:3e:5f:6d:8f:b8:87:bf:12:09:c2:12:
6b:b5:82:64:73:14:c1:7c:5d:e2:bf:a5:7a:ef:27:
f3:58:70:8a:d6:d4:42:91:76:06:b9:af:ba:9a:30:
b2:ec:e1:35:7d:b1:c6:c3:93:fc:86:0a:c0:2a:8d:
23:71:b3:c7:43:29:52:f1:02:27:65:65:28:14:ea:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:62:97:3E:95:C5:FD:E2:48:96:A0:01:C6:DB:17:2F:89:17:BB
X509v3 Authority Key Identifier:
keyid:7F:77:9A:44:0F:19:C7:D7:27:40:15:12:25:4B:5C:30:CD:07:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/nTFilz6Vxf3iSJagAcbbFy-JF7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.158.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9e:32:37:ff:2b:a8:d5:65:e2:ea:81:33:d9:dc:0b:43:55:
6e:62:b8:49:81:09:07:eb:06:5e:69:df:91:8d:7f:91:b3:cb:
87:3e:b3:dc:d9:5e:1e:86:17:78:2b:50:41:6b:1b:66:f4:01:
6d:e1:7f:b2:50:ea:a1:97:1a:3c:1f:30:52:96:5a:b5:be:e7:
95:98:a7:3c:68:99:91:c1:6b:36:1e:ba:c3:b5:75:3d:7a:41:
44:5f:f7:05:69:78:d5:95:26:6b:a9:ab:cf:99:f2:f3:ad:57:
2b:d8:ca:2c:81:ba:9c:fa:c0:cc:bf:5c:02:48:19:fc:fc:6b:
39:a2:0f:86:1c:6e:a2:15:cb:bb:41:62:0a:a6:71:ac:0c:b1:
50:c8:56:e3:b7:fc:07:52:8f:8e:48:e9:38:58:b3:17:ba:f3:
64:2f:bd:e4:53:d6:56:d0:80:1b:ee:99:20:f1:e2:c0:f5:31:
1b:4b:88:89:d6:ff:83:97:8c:97:45:ce:0d:80:d1:c3:f4:5b:
f8:14:9b:3a:8c:19:a3:2e:21:40:56:ed:7f:fe:9e:1a:81:a4:
0b:90:2b:4b:c4:80:bd:c7:4f:fc:9c:99:8f:b8:49:37:26:78:
3a:b8:0a:9b:d1:1f:dd:50:13:c1:5c:b0:c2:bc:5a:7c:fd:fa:
0e:38:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:02 2024 by rpki-client on console-fra.rpki-client.org