Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/kpzgZcvUC8x0heSre9qeulxM9Kk.roa
File: kpzgZcvUC8x0heSre9qeulxM9Kk.roa (raw, json)
Hash identifier: Qb4y3srdtZHEFtNLA81f6qutaigaE79cIXA9oS0ZhhA=
Subject key identifier: 92:9C:E0:65:CB:D4:0B:CC:74:85:E4:AB:7B:DA:9E:BA:5C:4C:F4:A9
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 018248B78903802E4FB4549976DD8ED8870B
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/kpzgZcvUC8x0heSre9qeulxM9Kk.roa
Signing time: Fri 29 Jul 2022 06:49:23 +0000
ROA not before: Fri 29 Jul 2022 06:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 91.149.231.0/24 maxlen: 24
91.149.230.0/24 maxlen: 24
91.149.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:b7:89:03:80:2e:4f:b4:54:99:76:dd:8e:d8:87:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Jul 29 06:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=929ce065cbd40bcc7485e4ab7bda9eba5c4cf4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:d2:30:06:fe:b3:42:e4:5d:4a:f5:a9:91:
b1:d2:6e:17:a4:ff:6b:7f:cc:cd:10:89:d1:d5:2b:
de:8d:0e:28:97:54:7d:41:95:fc:bd:0e:60:5f:c3:
6c:2a:cd:6d:2e:0e:4f:a2:33:2d:dc:db:c0:7b:08:
83:b0:e0:4c:1f:f7:8f:02:8c:43:9d:66:ac:4a:b5:
4f:c4:04:03:5e:0b:35:86:d4:a2:87:a9:ac:57:9a:
0b:95:e4:5b:71:df:4c:65:ce:94:7b:3a:43:b2:0b:
99:cc:3d:47:e4:e7:b2:78:e9:23:57:e6:36:ad:e3:
b0:0e:71:51:b3:51:4a:e3:cf:b3:43:35:e0:d3:8a:
0f:44:dc:9b:14:de:c0:02:e8:71:72:73:2a:bf:99:
0e:48:63:2b:d2:70:d8:54:1a:a4:4f:59:6f:9b:34:
08:6e:f9:d4:73:7e:4d:a9:63:a8:cb:3f:f7:12:87:
14:db:ae:bd:24:46:15:90:35:bc:16:c0:d3:54:9f:
11:93:73:7c:90:7f:e1:76:ad:ee:14:e3:6a:a8:ea:
83:26:0c:ed:25:13:ba:f1:5a:25:a1:8e:bb:45:7a:
60:eb:be:8c:f1:a1:a9:c2:d0:b6:b4:62:7d:a6:0c:
67:87:12:c9:1b:75:06:1e:32:9d:88:c2:57:41:be:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:E0:65:CB:D4:0B:CC:74:85:E4:AB:7B:DA:9E:BA:5C:4C:F4:A9
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/kpzgZcvUC8x0heSre9qeulxM9Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.229.0-91.149.231.255
Signature Algorithm: sha256WithRSAEncryption
67:3e:c5:36:e8:0f:25:78:61:ad:8d:5c:37:e9:aa:3f:1f:9c:
55:c7:8b:ac:64:69:a2:3e:d7:12:d6:95:ef:ad:2f:28:03:ad:
b0:6d:64:ef:2b:d3:87:68:5c:73:b3:87:45:68:30:17:6c:1f:
6c:0e:1b:f0:fd:12:01:42:f9:ad:f8:a0:cd:e4:56:b7:c8:46:
e3:b5:09:5b:11:5a:b2:cc:ec:c1:e2:8b:9d:a5:2f:e4:89:7e:
6c:65:16:65:78:62:81:f9:f3:84:61:b3:76:02:2e:93:5d:06:
dd:4d:f1:fd:03:3d:8a:fa:c2:86:96:fe:cb:d6:d5:33:78:99:
25:d1:59:70:6b:f3:43:d3:d0:2f:96:f5:6d:26:04:35:67:a6:
a6:7a:84:76:52:e9:2d:a2:d5:93:86:43:65:56:94:eb:aa:fb:
05:26:09:f5:a8:3e:b9:9c:75:20:4f:d6:5c:41:73:d3:9c:27:
a6:5d:ce:6b:94:19:3b:3d:27:04:94:f6:0f:fe:27:c6:4e:47:
94:4a:a2:d4:f1:96:8a:9f:b9:df:5e:3f:61:5f:c6:9e:8d:67:
5c:4d:06:69:88:b0:d7:65:e9:7f:38:a0:cf:7f:fa:d0:2a:b8:
af:3b:a8:bc:df:6d:36:90:09:5b:04:e1:9e:ff:ba:94:7e:62:
ac:e0:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org