Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/g53NDJ6DEjtPIYmf9KQw0Q4zToA.roa
File: g53NDJ6DEjtPIYmf9KQw0Q4zToA.roa (raw, json)
Hash identifier: 2Ikp6L073+Ha1A5Xz0v9GPOBh9zBV9zVxlfAaiUOpYQ=
Subject key identifier: 83:9D:CD:0C:9E:83:12:3B:4F:21:89:9F:F4:A4:30:D1:0E:33:4E:80
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 0183882A797C21430509A8641C89029F5661
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/g53NDJ6DEjtPIYmf9KQw0Q4zToA.roa
Signing time: Thu 29 Sep 2022 07:33:48 +0000
ROA not before: Thu 29 Sep 2022 07:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26383
IP address blocks: 91.149.222.0/23 maxlen: 23
91.149.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:2a:79:7c:21:43:05:09:a8:64:1c:89:02:9f:56:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Sep 29 07:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=839dcd0c9e83123b4f21899ff4a430d10e334e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:8a:51:7e:84:65:4d:bd:f7:6b:bc:da:b8:
40:11:5f:ed:19:66:47:8c:29:63:d1:24:75:cc:e6:
ea:54:15:94:a7:d8:31:11:bd:cc:ac:7d:44:30:bd:
84:60:2a:50:b2:d9:80:4b:db:6b:d9:36:21:72:00:
da:e2:32:42:86:bc:c2:0f:3e:d2:cb:67:d7:16:56:
fb:63:b8:6b:5a:32:fc:d2:4e:92:82:09:20:4d:a9:
b0:73:5e:6e:4e:68:2b:8f:74:12:8c:a8:8d:0f:31:
6d:89:d9:89:7d:ec:6c:c5:60:c6:a7:a0:02:53:cd:
70:1e:68:b9:11:cf:1b:ca:74:42:42:23:1b:f9:6b:
5f:9e:a8:c7:b2:a6:f7:96:d8:28:76:39:02:62:79:
20:a6:01:62:fa:ab:c0:2e:49:54:c3:eb:9b:b8:5d:
15:73:f8:c0:ca:6b:0b:bf:b3:b2:96:38:79:4d:d7:
f6:94:98:c6:5b:ad:b0:17:55:08:4b:08:d6:08:ad:
e1:f7:36:42:ac:05:7e:15:3d:77:86:10:66:07:31:
e6:1a:06:70:c0:8f:b5:96:8f:b6:88:4d:cd:8a:b9:
4f:63:0d:38:fa:1c:ac:99:7c:c9:05:7a:f5:2e:83:
20:e4:07:62:70:04:15:bd:6f:e1:d7:25:c9:5b:9c:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9D:CD:0C:9E:83:12:3B:4F:21:89:9F:F4:A4:30:D1:0E:33:4E:80
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/g53NDJ6DEjtPIYmf9KQw0Q4zToA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.222.0/23
91.149.232.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:b4:9c:c8:8e:87:3b:e2:e8:87:b5:c5:97:3e:a4:15:c3:b0:
42:a1:c2:5c:c8:00:bf:ed:b2:38:c7:34:79:e1:55:bf:ce:64:
9c:0b:e8:35:24:64:e3:19:92:54:b9:8a:2a:4e:bc:f4:81:48:
55:30:7e:85:08:91:30:60:51:15:8d:84:b3:6d:5f:81:20:f6:
4f:c4:00:7f:a1:e5:c3:1c:3a:40:b6:1a:49:eb:f5:b1:67:cc:
2a:2e:ec:27:18:e0:1b:5f:08:5d:7e:69:42:3c:b1:e1:6e:1a:
7e:4c:3a:e9:f8:fd:72:62:7d:64:51:a0:28:be:7f:e0:27:3f:
10:d8:2a:53:25:73:c5:21:29:11:eb:b8:d5:26:43:a4:25:43:
89:91:30:dd:78:fb:fb:ef:9a:84:39:7a:dd:1f:7b:75:df:65:
46:a8:25:5a:32:38:b0:45:e2:41:17:1f:1b:9f:22:c0:16:54:
46:22:7f:55:34:d0:2f:25:07:d3:55:92:04:9e:57:01:f1:ab:
f7:47:80:d2:fa:5c:6a:d2:f6:9e:18:b7:fc:e5:8d:73:87:45:
73:98:3d:ac:1b:22:bf:71:71:e1:83:d9:80:af:1e:60:bb:57:
a2:42:1c:0e:b1:1a:4a:86:4f:93:a1:18:92:91:1a:25:64:af:
a9:e3:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-ams.rpki-client.org