Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/R2C1UTQMBKzRFM-rw85RnqQb-e8.roa
File: R2C1UTQMBKzRFM-rw85RnqQb-e8.roa (raw, json)
Hash identifier: 0Vz8oIy+Cs5dCadbZ/93DKjxfxuEAyAVdrusqUhd51M=
Subject key identifier: 47:60:B5:51:34:0C:04:AC:D1:14:CF:AB:C3:CE:51:9E:A4:1B:F9:EF
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 01850B39222D1D04E8AFA31BF7CF8EA0CEDB
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/R2C1UTQMBKzRFM-rw85RnqQb-e8.roa
Signing time: Tue 13 Dec 2022 11:22:51 +0000
ROA not before: Tue 13 Dec 2022 11:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:39:22:2d:1d:04:e8:af:a3:1b:f7:cf:8e:a0:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Dec 13 11:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4760b551340c04acd114cfabc3ce519ea41bf9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:95:e1:9d:ea:b3:fc:a2:62:fe:e7:2c:1b:
76:e3:2d:d4:a3:30:25:f2:f2:fb:fb:74:0a:98:b7:
a6:37:11:be:c1:22:1c:9f:c9:60:fa:29:1b:1a:47:
2e:f7:3a:fe:be:41:3d:a2:31:bb:93:61:89:11:77:
27:c3:ea:71:af:0e:48:50:a8:f2:94:cf:1d:36:ba:
d2:bc:d7:e9:7b:07:c3:c0:09:ed:95:a5:8c:4f:1d:
f2:e5:7e:34:ff:dc:cc:52:73:51:29:66:bf:f0:d4:
88:09:dd:7f:1b:ec:49:8a:61:9a:30:56:09:e6:a1:
8b:31:26:dc:29:6c:f5:36:47:d2:f1:a2:28:87:c0:
3b:9a:86:60:f1:b5:2d:8b:4a:bf:ce:84:38:82:61:
ff:96:0b:e6:bb:d2:74:44:9a:cb:54:6f:6a:f7:2f:
07:97:b2:ee:a5:23:b1:f2:c9:d4:52:ff:e8:ea:25:
fb:3c:80:18:72:a7:0a:2c:be:a0:c6:d4:ee:ef:02:
db:65:35:5b:37:0c:74:f0:18:2b:7f:2a:47:35:6e:
f2:87:84:83:29:79:76:eb:e2:cc:8a:57:c2:7d:76:
42:c3:7b:e2:77:2e:a9:9f:39:c8:57:9f:f0:ad:f9:
16:28:ce:c7:24:90:64:86:d5:af:79:f7:36:87:b4:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:B5:51:34:0C:04:AC:D1:14:CF:AB:C3:CE:51:9E:A4:1B:F9:EF
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/R2C1UTQMBKzRFM-rw85RnqQb-e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b9:96:70:43:e6:48:b3:ed:5e:15:aa:8d:57:ca:e0:97:43:
a6:e7:04:76:18:9a:57:27:d3:1e:cd:cd:38:99:7d:01:d9:ef:
64:da:d3:ec:86:89:bd:c4:d7:d3:0f:12:ee:b1:1e:45:e8:ba:
6e:d2:88:0f:97:8f:b2:88:50:d5:87:3a:ea:4a:6f:09:9a:bc:
54:35:a1:71:f9:ec:60:6a:e4:24:cf:4b:4e:5e:6d:b9:61:39:
f0:65:19:a7:4a:f5:7e:59:52:c0:01:53:6a:8a:32:44:f1:ff:
59:0c:55:ec:57:d9:42:8c:72:83:ad:41:d5:7c:e2:c7:5e:da:
3e:0a:34:cd:e1:5c:ea:8d:e3:c4:93:f1:de:ce:be:ee:2f:7e:
22:08:eb:7d:ad:b6:1e:97:ad:c8:02:1f:fb:74:03:c8:09:fd:
02:07:24:37:53:37:12:bd:8b:02:ea:d2:59:50:c5:38:1a:1d:
7f:26:2d:7e:48:0a:80:44:f3:81:dd:01:82:ea:8f:e7:6c:9a:
fe:46:86:6a:b1:e1:1f:f7:15:19:b1:49:75:ff:99:9a:d1:86:
b9:79:e7:16:85:17:0f:67:21:49:bd:1a:23:e9:17:cb:2f:6f:
f1:66:39:13:1a:bf:d4:97:38:64:bb:c1:9b:52:25:95:fe:a0:
92:a4:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org