Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/WZV54DekOy9ya0Cx_ip2erEDp_k.roa
File: WZV54DekOy9ya0Cx_ip2erEDp_k.roa (raw, json)
Hash identifier: 2UNmpLR1waGVwvrd5KJQfPCufZxDhFFwuN9gKAztuJw=
Subject key identifier: 59:95:79:E0:37:A4:3B:2F:72:6B:40:B1:FE:2A:76:7A:B1:03:A7:F9
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 0825492B
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/WZV54DekOy9ya0Cx_ip2erEDp_k.roa
Signing time: Sat 01 Jan 2022 03:52:28 +0000
ROA not before: Sat 01 Jan 2022 03:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 91.149.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136661291 (0x825492b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Jan 1 03:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=599579e037a43b2f726b40b1fe2a767ab103a7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:2f:3b:05:d5:76:fc:04:e5:5d:67:31:ce:
9c:c0:a8:a6:87:96:82:32:eb:84:03:8b:37:87:6a:
26:45:6b:d2:c3:dc:cf:0f:fd:76:a5:5b:99:c6:36:
4b:de:7b:15:7d:06:8a:27:8e:01:57:97:87:e1:01:
1d:79:8b:9c:8e:e7:eb:50:de:94:a4:02:b3:fa:01:
11:c0:f5:fe:b8:ea:cf:7e:8e:b8:66:2b:bc:02:a8:
f8:de:0c:5a:8f:a3:80:e5:5d:3c:58:34:2d:cb:cb:
c0:8d:57:1c:cb:34:a7:91:cc:2e:b9:c7:4f:14:a0:
7b:b7:6d:64:da:b0:2f:12:1e:cb:0e:c7:96:7d:5d:
1e:49:9a:59:32:2d:af:88:56:29:a6:70:80:03:82:
c0:e6:f7:97:f7:46:16:6c:52:79:64:d5:a3:91:10:
57:cd:71:e5:25:d0:33:b2:aa:4d:07:fd:65:4e:85:
74:4a:75:ae:54:b9:c7:5d:c7:cf:65:80:a3:fd:f4:
6c:e4:02:6d:f0:67:0b:fd:e1:66:57:30:a9:02:ef:
f7:31:bd:8a:ae:7b:33:ca:6e:d3:b0:c9:72:2a:2a:
2c:ec:40:5c:6c:f3:c2:ed:89:db:6f:1a:d0:40:16:
c5:bd:1c:71:cb:8e:f1:82:79:6f:88:40:24:45:c2:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:79:E0:37:A4:3B:2F:72:6B:40:B1:FE:2A:76:7A:B1:03:A7:F9
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/WZV54DekOy9ya0Cx_ip2erEDp_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f2:37:62:7e:10:11:0c:01:ec:64:6c:39:62:b5:7a:ec:64:
56:c5:65:af:61:91:71:39:a8:09:08:0d:26:8e:df:b1:9e:ac:
b3:ed:24:20:93:5b:53:fa:36:e2:3b:a7:a1:50:32:db:64:b2:
e8:e5:49:a3:32:81:08:d5:27:b7:1f:e8:ab:2c:4e:44:de:fb:
6b:5c:ce:ef:90:16:21:03:9c:ec:65:78:b5:fc:d3:e1:29:cc:
4e:e2:e4:0d:53:2c:e2:0f:48:60:3e:fa:9d:a9:9c:29:91:e1:
7d:25:94:e4:d1:5e:b9:2a:f6:bc:37:ae:a9:f6:38:24:d3:cd:
8e:7b:25:d8:fc:10:76:bf:5f:d6:80:83:43:d8:92:a7:a7:d7:
b3:f6:74:a4:40:17:17:09:cd:1f:fb:51:12:fb:79:b6:67:78:
63:a7:9c:3a:4b:76:35:30:59:b8:92:f9:54:4a:a8:fe:e2:52:
ce:9f:e5:8a:1f:6e:47:4c:9c:18:8a:b7:aa:6d:70:32:fa:89:
d5:6f:d4:eb:5d:4d:b5:ea:98:02:45:48:0f:1f:05:d6:b3:19:
72:87:cb:3f:44:3a:0d:d1:16:a9:15:84:bd:ca:cb:e7:a4:aa:
01:0e:0b:3e:37:d1:ef:1d:6a:2c:81:23:2a:ca:bb:8d:ec:dd:
13:8f:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org