Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/ka61TQyk-I6A0KAgtagg9qh6Zrs.roa
File: ka61TQyk-I6A0KAgtagg9qh6Zrs.roa (raw, json)
Hash identifier: ERu2i1LKsX5h1+plwrYTHZRW3xGkx0kBjB7lUZzKbxc=
Subject key identifier: 91:AE:B5:4D:0C:A4:F8:8E:80:D0:A0:20:B5:A8:20:F6:A8:7A:66:BB
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 018216FA67048115BE8074DA83814F3E523A
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/ka61TQyk-I6A0KAgtagg9qh6Zrs.roa
Signing time: Tue 19 Jul 2022 15:01:25 +0000
ROA not before: Tue 19 Jul 2022 15:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48357
IP address blocks: 91.149.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:fa:67:04:81:15:be:80:74:da:83:81:4f:3e:52:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Jul 19 15:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91aeb54d0ca4f88e80d0a020b5a820f6a87a66bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:d2:19:c2:a2:a4:64:b8:d1:ca:59:98:61:
2e:2c:3f:bb:4b:03:29:e0:13:8f:0b:d4:aa:79:35:
60:0f:31:4e:75:7f:29:31:73:0a:68:a0:d6:93:97:
86:c8:df:8f:6e:f9:35:57:53:a1:fc:7b:ed:f3:83:
ef:f7:fc:19:f0:dc:5e:70:7b:82:5e:a3:aa:ff:2f:
1b:6f:f6:d1:87:56:5d:83:ea:ad:20:89:c6:e0:21:
c3:e1:4f:ec:92:d9:1c:10:57:b4:7b:18:23:bc:95:
69:e8:51:6f:a6:2a:84:6f:43:f2:5d:86:11:48:5f:
a9:1f:32:d9:90:6e:1b:96:cb:68:98:98:19:ef:0a:
f7:c0:c3:53:ae:39:1d:1f:79:69:90:4b:56:c4:f0:
a1:5c:60:a7:0c:11:d1:43:54:c4:3e:23:b7:0e:2c:
30:7f:23:dd:0f:de:7a:c6:f2:a8:11:0e:de:2a:ab:
a5:92:fd:63:0f:f8:33:48:e8:56:2e:de:19:3a:de:
ad:6f:0f:f5:6b:c7:76:5f:22:ef:df:4e:f2:de:8e:
f8:4e:fa:40:46:2f:19:dd:ea:80:bf:b7:b4:cd:38:
38:fd:e1:e9:5d:02:ae:1d:18:a5:99:d4:59:a6:17:
93:91:96:da:14:fc:9b:11:b9:1b:91:8f:c3:f9:71:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:B5:4D:0C:A4:F8:8E:80:D0:A0:20:B5:A8:20:F6:A8:7A:66:BB
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/ka61TQyk-I6A0KAgtagg9qh6Zrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.192.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d3:fe:1d:41:c5:c3:00:70:8f:42:3a:02:08:68:c9:42:9c:
b2:5b:62:13:51:fc:56:11:04:ff:af:fc:cf:22:b8:a0:9f:64:
37:a7:f9:af:9f:be:2c:c2:f9:92:69:91:e0:70:b2:19:ff:7d:
ef:23:71:49:73:23:d5:f3:b9:eb:a2:79:54:42:af:57:1a:d8:
38:56:11:a3:b4:66:a5:25:2c:6d:00:49:08:ad:84:50:23:05:
16:8b:95:49:d4:32:f6:d4:4b:d4:bc:0f:cc:39:b0:b2:18:c0:
c8:5f:06:ec:51:44:2f:56:78:97:55:f1:7a:77:77:96:17:58:
bd:94:df:a9:8c:9a:5f:99:6f:0f:cb:db:da:5b:2e:1c:66:2d:
90:a8:cc:70:f9:07:68:b2:71:a9:26:35:70:12:52:60:2d:22:
c5:a4:18:35:bb:83:74:73:f3:f8:46:63:f5:64:8c:e5:a8:db:
e2:02:27:51:45:e4:3a:bc:ba:49:5b:7c:d1:8e:19:03:7b:bd:
32:87:06:50:ce:c0:c4:d5:26:af:48:84:ca:ba:43:52:e5:40:
7d:8c:f4:be:d8:9c:f0:dc:f5:d7:fb:b7:57:29:c2:17:73:eb:
0a:56:c9:2e:89:d8:e7:a9:df:4f:83:fb:10:eb:6a:b3:37:cf:
93:84:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org