Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Fpq1kXMZkUhJZqqGJUf8YYwnNZY.roa
File: Fpq1kXMZkUhJZqqGJUf8YYwnNZY.roa (raw, json)
Hash identifier: Hh0zv7cQeXUuSLK9YaGSfckUt5fpXFyUCrag901YIaw=
Subject key identifier: 16:9A:B5:91:73:19:91:48:49:66:AA:86:25:47:FC:61:8C:27:35:96
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 08E12108
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Fpq1kXMZkUhJZqqGJUf8YYwnNZY.roa
Signing time: Fri 18 Mar 2022 20:18:23 +0000
ROA not before: Fri 18 Mar 2022 20:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 91.149.228.0/22 maxlen: 22
91.149.244.0/22 maxlen: 22
91.149.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148971784 (0x8e12108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Mar 18 20:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=169ab591731991484966aa862547fc618c273596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:6c:7b:de:52:fe:45:37:43:cb:f9:d1:49:
d8:e6:c5:26:70:02:50:89:b5:87:13:22:a7:9d:43:
94:67:d5:4e:67:56:96:da:74:73:60:b8:9b:fe:24:
9c:78:5c:c0:33:09:0b:7f:df:8c:64:80:07:27:90:
08:16:99:3e:d9:cb:58:83:17:a4:ba:17:76:b1:8c:
05:62:7f:81:3b:f0:ca:f6:ba:61:01:67:95:29:e1:
e6:40:46:50:84:70:4a:2a:dd:09:59:be:76:79:64:
95:8b:48:e6:48:76:09:2d:79:0b:5a:85:03:2f:a2:
da:53:3c:ae:cc:fd:6b:61:fd:3f:1c:70:37:c0:dd:
be:65:33:c4:87:bf:4c:f9:c9:8c:ec:cb:5e:3b:d6:
b5:5f:2f:51:b5:39:6b:02:cb:1d:ca:b7:ad:b3:ac:
1d:2e:6f:a3:d6:77:b1:b4:01:41:b1:82:fe:6e:e8:
79:ed:28:ef:5c:51:01:fc:f2:34:cc:fe:e1:39:6d:
a4:f4:30:90:84:64:fc:3f:a3:c3:f8:8b:b9:bf:dd:
38:b5:ef:d1:51:82:38:14:24:3f:7f:74:12:b4:98:
2b:8e:b9:3f:69:04:72:47:aa:78:5a:e3:86:14:cd:
76:d2:7a:ce:d2:10:69:5b:51:b0:e5:53:44:4b:87:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9A:B5:91:73:19:91:48:49:66:AA:86:25:47:FC:61:8C:27:35:96
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Fpq1kXMZkUhJZqqGJUf8YYwnNZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.228.0/22
91.149.244.0-91.149.251.255
Signature Algorithm: sha256WithRSAEncryption
23:d6:32:0e:34:ec:44:67:b0:36:35:0b:e4:f6:d8:45:dd:ec:
4c:af:8a:48:10:4c:54:bd:c8:d8:ce:f4:8c:37:db:dd:1f:d2:
fd:3e:5a:96:d1:45:be:6e:e8:cb:21:ce:29:35:c7:7a:6c:1a:
5a:74:30:28:49:1d:00:18:84:ec:35:9d:24:9d:34:7b:9a:d4:
1d:ef:52:31:3f:69:bb:0b:96:18:b3:c9:82:02:ce:d5:bf:6e:
b7:3c:f8:f5:09:01:9f:d5:c4:2f:d5:ba:cd:c2:81:fd:11:66:
38:4f:f6:dd:d7:68:1e:6d:14:43:d9:c7:92:d0:03:66:d3:9f:
d6:3e:7e:1e:a7:52:8d:cb:2b:d8:31:e1:3a:0a:16:66:08:c7:
ae:cb:62:a1:e9:29:78:3e:84:dc:33:ad:80:76:c5:19:53:57:
f3:44:79:4e:4c:9d:71:46:6f:8f:75:5a:a4:15:25:1c:29:5d:
f2:ad:a1:39:cf:1f:2c:0f:48:c4:b9:8e:0d:4c:66:4a:02:5b:
d1:53:39:80:22:a0:cb:ae:04:7a:a0:fc:fc:19:bd:ef:7b:cd:
32:3d:f4:a7:aa:f9:cc:e3:91:d6:0d:1c:f2:fe:91:4f:79:72:
13:e2:74:28:a4:56:38:26:c4:ec:be:b9:3e:19:71:5f:bf:20:
03:24:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org