Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Np4hjwXPA1xUfNOYABoO1MJ8u8U.roa
File: Np4hjwXPA1xUfNOYABoO1MJ8u8U.roa (raw, json)
Hash identifier: APQY3d98sGMpGmMzMfoVkOgDh+pH+Mz6O6doqDzrmX8=
Subject key identifier: 36:9E:21:8F:05:CF:03:5C:54:7C:D3:98:00:1A:0E:D4:C2:7C:BB:C5
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 087BD764
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Np4hjwXPA1xUfNOYABoO1MJ8u8U.roa
Signing time: Thu 03 Feb 2022 15:57:30 +0000
ROA not before: Thu 03 Feb 2022 15:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142333796 (0x87bd764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Feb 3 15:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=369e218f05cf035c547cd398001a0ed4c27cbbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:5d:76:3d:7d:23:a8:2f:90:be:62:fc:53:
ed:d9:83:0a:4d:16:36:4c:3f:1b:d7:b2:1f:05:0c:
ce:77:38:5f:e9:f2:71:89:65:76:24:32:7e:96:c4:
4f:81:38:14:8c:25:e5:aa:dc:10:9b:fd:49:44:ed:
3e:b7:8a:28:84:22:78:e9:de:ad:fa:13:44:6c:a4:
66:5a:be:a4:75:c7:16:c7:ed:6f:5a:59:da:3c:cf:
8f:94:32:bb:37:aa:53:2c:17:50:ad:5a:f2:dd:17:
12:0c:1c:06:af:c8:9f:48:b5:9c:d1:16:2f:77:58:
1b:f2:9f:2a:3e:34:a6:e6:86:be:6f:48:40:34:17:
cd:1f:4e:a8:1d:e9:0e:56:24:3a:12:e8:2b:b9:86:
da:14:ce:8a:47:cc:99:fd:88:f9:33:6f:5b:90:ae:
e1:70:26:56:ad:9c:56:ec:cd:40:c4:68:2f:14:1c:
60:90:a8:92:8f:fd:af:1c:b3:96:b8:07:1a:04:6b:
b3:ed:8b:95:dd:6a:3d:da:4d:11:f1:70:c9:cc:15:
af:a5:d4:a9:62:0f:04:24:37:0f:2e:9b:7a:15:cc:
42:ce:3d:8a:4d:32:85:a2:d3:ec:ba:78:1e:2a:2d:
cd:7a:5a:86:04:0b:85:cd:e2:d4:f3:8b:e7:1f:50:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9E:21:8F:05:CF:03:5C:54:7C:D3:98:00:1A:0E:D4:C2:7C:BB:C5
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Np4hjwXPA1xUfNOYABoO1MJ8u8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
Signature Algorithm: sha256WithRSAEncryption
22:28:db:16:cf:d7:df:a1:b6:d9:ca:c8:be:84:52:70:da:36:
d7:53:76:ef:32:5c:28:38:86:38:81:f5:a3:25:2b:b4:c6:d3:
41:9a:2e:86:58:e4:13:bf:ca:90:b9:9d:86:d4:3d:65:b1:f4:
9b:20:d4:53:bb:e4:e2:15:5b:3a:8b:c3:f1:21:81:55:03:50:
73:6c:f4:19:47:db:26:ac:53:c9:3e:fb:f7:68:21:4a:4b:db:
92:04:28:7a:9a:e2:6d:86:19:82:9e:92:6d:1b:92:d6:97:97:
29:bb:0b:cd:bf:90:eb:70:8a:98:ab:dd:fc:29:6b:e3:b3:0d:
07:41:f2:18:11:e2:9c:d3:6c:88:b3:d8:6d:63:fe:37:0a:5d:
98:6e:76:df:e0:6c:ef:c5:3d:a9:57:61:ba:20:a1:28:ad:3e:
a2:40:51:9f:a1:75:13:fe:13:fc:bc:c9:5c:de:74:7e:26:85:
7b:f2:14:fa:96:69:9d:93:d2:a3:ce:49:b7:fa:d0:43:8a:17:
23:3f:94:99:40:9e:8b:5f:91:b4:25:46:79:1a:ec:13:ad:23:
05:a1:f7:92:18:ae:69:aa:78:9b:b2:a4:62:a1:f6:64:11:78:
fe:5b:40:08:38:4a:23:64:26:50:39:1c:38:02:10:3b:52:48:
e2:a4:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org