Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/p6iWbA7D82KNSsS1RI5yrsePmys.roa
File: p6iWbA7D82KNSsS1RI5yrsePmys.roa (raw, json)
Hash identifier: O7LEsQRU3czCxGeFahYkWOpm7O5RILGgLuq4Xs3VPt8=
Subject key identifier: A7:A8:96:6C:0E:C3:F3:62:8D:4A:C4:B5:44:8E:72:AE:C7:8F:9B:2B
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 0183C22967D1FEE0AC66728C885A75B9A0B0
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/p6iWbA7D82KNSsS1RI5yrsePmys.roa
Signing time: Mon 10 Oct 2022 13:50:36 +0000
ROA not before: Mon 10 Oct 2022 13:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 91.149.202.0/23 maxlen: 23
91.149.215.0/24 maxlen: 24
91.149.218.0/23 maxlen: 23
91.149.221.0/24 maxlen: 24
91.149.236.0/22 maxlen: 22
91.149.235.0/24 maxlen: 24
91.149.252.0/24 maxlen: 24
91.149.255.0/24 maxlen: 24
91.149.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:29:67:d1:fe:e0:ac:66:72:8c:88:5a:75:b9:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Oct 10 13:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7a8966c0ec3f3628d4ac4b5448e72aec78f9b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:35:65:34:46:a3:06:e6:f8:47:ea:a3:1e:
73:8c:4d:1c:0e:f0:c8:74:1d:ae:1b:72:4e:e2:8a:
fc:df:05:03:a0:a4:09:68:ae:33:2e:8e:d2:a3:55:
3a:12:c3:66:6d:ad:e7:15:72:90:eb:d8:26:84:ad:
3d:1d:8e:8d:57:cd:7c:57:9d:33:00:ba:f4:88:c3:
72:0a:d7:30:ca:0d:01:08:ee:bc:bb:ab:ab:08:59:
f3:50:04:b1:48:61:96:5e:a2:83:2f:ae:5f:6f:f7:
48:97:de:5e:55:ef:64:af:66:bb:f4:37:cb:8f:b2:
db:c2:3b:ef:59:2f:c1:7d:d7:5a:38:57:06:d8:80:
be:ee:12:ab:dd:48:64:9c:6c:8c:88:35:c0:ce:69:
b5:94:2e:22:ba:81:85:e7:93:74:a8:5b:e1:69:28:
d0:21:24:b6:da:9c:5c:7f:4f:74:94:b9:23:38:69:
65:19:ac:18:c8:aa:b2:4d:56:35:d5:e5:ef:46:f3:
4c:a8:55:37:11:45:7b:50:05:00:e1:88:e1:e8:4f:
40:87:16:0e:b9:15:ab:c3:59:3d:b7:ad:26:0f:08:
49:95:35:92:48:06:0d:38:54:3b:b9:bf:2b:38:73:
25:89:be:0a:cb:27:1c:d3:96:c4:aa:77:f2:61:a3:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:96:6C:0E:C3:F3:62:8D:4A:C4:B5:44:8E:72:AE:C7:8F:9B:2B
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/p6iWbA7D82KNSsS1RI5yrsePmys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.202.0/23
91.149.215.0/24
91.149.218.0/23
91.149.221.0/24
91.149.235.0-91.149.239.255
91.149.252.0/24
91.149.254.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:61:3e:dd:3a:3a:5a:af:48:01:41:f3:64:ee:a5:19:9d:2b:
c4:4b:98:c2:53:95:3e:48:e9:da:c9:18:0e:6b:a9:71:69:6a:
43:dc:69:cc:15:0b:e7:42:46:ba:6a:97:13:ae:65:b4:24:1e:
34:5a:37:bf:e1:33:17:38:02:04:25:6e:6e:46:0d:31:ae:d9:
d3:73:7b:71:a0:e0:06:1b:d2:b9:ee:d6:13:90:cf:a5:05:a7:
e6:6c:33:71:94:55:33:fc:39:c6:6b:5c:63:88:52:81:86:74:
5f:cc:c2:78:90:f5:cf:00:ed:5e:77:07:1f:3e:55:18:10:43:
16:80:c0:0f:49:fe:d7:db:54:32:2a:3d:4f:a8:d1:f1:aa:60:
8e:d3:42:ce:e4:52:e8:18:dd:99:ae:d5:b7:83:62:6b:28:43:
45:26:fa:25:a6:12:89:93:0b:3a:ff:2b:0d:5a:db:37:a1:ec:
ab:31:20:30:1e:fc:71:4f:00:d1:5c:a4:ab:8b:1a:60:25:60:
9e:a8:2d:3c:41:03:a1:cf:d2:f2:08:b8:c6:1e:1b:6a:87:26:
79:6c:27:fd:f6:2c:e3:7b:36:e4:ef:38:48:86:44:3d:c1:4c:
e9:bd:b9:cc:f6:be:10:a7:59:e0:d0:18:58:4a:f8:96:39:ae:
fc:92:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org