Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/59oIXHOrOrjZ58bJ7RHM6_KeaoM.roa
File: 59oIXHOrOrjZ58bJ7RHM6_KeaoM.roa (raw, json)
Hash identifier: 4vKOr6awDAAr2kuC49O+LeURG3SFhmveoeNLySII2+8=
Subject key identifier: E7:DA:08:5C:73:AB:3A:B8:D9:E7:C6:C9:ED:11:CC:EB:F2:9E:6A:83
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 018248B78847208F6B838DA39B89D9DE23E5
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/59oIXHOrOrjZ58bJ7RHM6_KeaoM.roa
Signing time: Fri 29 Jul 2022 06:49:23 +0000
ROA not before: Fri 29 Jul 2022 06:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
91.149.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:b7:88:47:20:8f:6b:83:8d:a3:9b:89:d9:de:23:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Jul 29 06:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7da085c73ab3ab8d9e7c6c9ed11ccebf29e6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:e1:7a:04:5b:5a:63:06:0a:46:80:79:12:
af:58:d1:fc:de:e7:27:84:d4:6a:10:27:2f:34:3f:
64:b2:9a:4e:e7:44:c1:c4:80:39:7b:5a:98:21:5a:
31:25:61:22:5a:3f:48:84:14:f1:bd:ad:52:78:85:
67:46:c5:46:e5:7c:1f:89:c1:28:56:f1:d5:2d:83:
4c:51:e9:df:17:c6:c2:ae:14:f6:6f:c8:9d:36:8c:
02:73:2c:90:9b:2e:20:66:30:46:ed:e1:02:4a:5a:
24:f3:95:d1:35:55:9a:52:ad:32:fb:2c:1c:8d:68:
6f:5a:ad:b9:8d:a8:d5:1b:c5:db:05:41:aa:0b:38:
ae:14:ee:0f:51:6f:93:a8:2a:b3:3d:8e:c2:15:3a:
d1:27:5d:69:a5:05:7d:7d:aa:01:2d:60:96:c7:89:
5b:0a:d0:47:f7:02:d9:bd:1b:f2:11:d4:50:8e:a8:
e8:d3:37:e2:68:13:c6:82:28:6d:90:01:d5:0f:d1:
52:de:3b:98:ac:6f:3f:ff:2b:e7:fb:e1:8e:59:d2:
da:ee:3d:bd:a4:46:3f:da:ff:21:cd:bd:ca:92:4d:
b9:22:54:df:6b:58:0b:89:13:ec:ec:20:31:86:aa:
74:e0:aa:b3:fc:c3:6e:e2:c9:30:6e:d6:ac:0e:1f:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DA:08:5C:73:AB:3A:B8:D9:E7:C6:C9:ED:11:CC:EB:F2:9E:6A:83
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/59oIXHOrOrjZ58bJ7RHM6_KeaoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
91.149.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a6:6f:99:6c:f5:e8:8a:fd:29:3b:eb:08:3c:73:22:25:f4:
66:8e:43:f7:70:38:7d:b4:43:7e:87:de:98:2b:d9:9b:33:33:
cb:cd:b8:e9:f1:39:45:8c:48:4a:9b:81:99:0e:12:81:66:8a:
c1:0c:f2:8c:34:bb:3e:7a:41:fb:13:b6:03:af:f2:ed:81:be:
f0:c1:99:cd:02:1c:d4:ae:af:c1:fa:8d:f7:14:1c:3f:10:8f:
60:f8:54:b7:c6:8e:de:2a:45:be:a4:fc:80:f1:fd:08:ec:c9:
fc:79:22:52:f5:f3:5a:c1:3f:6d:db:84:80:c2:e7:c3:f5:c4:
ed:f1:5e:76:01:fb:c0:c4:00:9d:fb:f3:c5:f3:a4:21:cb:b4:
68:04:54:05:c3:13:df:d6:07:27:79:f7:ea:71:b5:60:46:d4:
ae:c4:e9:81:3f:b6:4e:2b:c1:98:46:fc:0b:a5:82:57:3e:df:
4b:66:c3:8e:21:2e:a4:0e:37:6d:4d:8d:52:6c:8d:6e:93:50:
fe:cd:eb:e3:66:17:5f:11:4d:4c:35:46:6c:b0:1b:45:f2:85:
5c:1b:ea:d5:21:8d:f2:43:ce:d7:e4:0c:69:11:8a:dc:31:ff:
13:b1:b4:2c:2e:54:47:b8:56:4a:74:7b:7b:c0:c2:fa:34:d3:
26:bf:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-ams.rpki-client.org