Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/zY8xeki1OgDePSleQyb_eifBWgc.roa
File: zY8xeki1OgDePSleQyb_eifBWgc.roa (raw, json)
Hash identifier: zwgfw7aS8Xm/8leyPepWnfa4K/tTlm/ONgN66UsE5qA=
Subject key identifier: CD:8F:31:7A:48:B5:3A:00:DE:3D:29:5E:43:26:FF:7A:27:C1:5A:07
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 01823ED99550B2BE7B9E443C983F1D9EC3F6
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/zY8xeki1OgDePSleQyb_eifBWgc.roa
Signing time: Wed 27 Jul 2022 08:50:23 +0000
ROA not before: Wed 27 Jul 2022 08:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
91.149.230.0/24 maxlen: 24
91.149.231.0/24 maxlen: 24
91.149.228.0/24 maxlen: 24
91.149.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3e:d9:95:50:b2:be:7b:9e:44:3c:98:3f:1d:9e:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Jul 27 08:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd8f317a48b53a00de3d295e4326ff7a27c15a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:a3:5b:33:ef:4f:c2:3a:7a:a8:49:d6:62:
76:44:78:0d:04:09:79:89:90:87:e3:da:05:84:c5:
cb:a6:2e:7b:df:3b:48:8b:3e:87:a5:6b:b3:e2:16:
42:7a:dd:54:7e:48:c7:5f:d4:cc:03:da:78:40:e2:
9b:d7:e0:ba:4b:59:fb:cb:a9:62:68:70:5f:42:33:
f2:6d:51:b9:a9:02:58:fe:80:74:22:c1:ee:00:9e:
7c:0f:05:9d:6f:ad:3b:61:dd:ed:3d:77:d0:6d:24:
bd:f0:d2:fe:2f:ae:ff:ac:d6:39:30:4a:33:20:06:
a0:6e:b4:71:18:31:89:66:36:12:45:46:02:3c:41:
3d:1b:71:ed:e5:95:e7:06:55:07:50:d2:8f:b8:e7:
c6:7c:9e:c6:65:e2:7c:9e:f5:7b:80:0f:de:de:3b:
f9:c1:e3:c4:99:ac:4e:f3:1b:23:13:74:8d:0c:ca:
eb:a6:29:0a:c9:77:5b:b8:14:7f:d4:58:c6:59:25:
44:3d:fb:91:5b:0f:59:83:b2:6f:6e:f1:b8:89:64:
97:b1:96:e4:e4:a7:5c:9d:08:ef:fc:48:d9:73:78:
b1:03:06:95:be:98:4f:4e:0d:20:7d:b6:fb:f4:ad:
d5:90:9c:cb:c3:4f:09:48:04:d4:95:10:3f:6d:23:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8F:31:7A:48:B5:3A:00:DE:3D:29:5E:43:26:FF:7A:27:C1:5A:07
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/zY8xeki1OgDePSleQyb_eifBWgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
91.149.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:c6:67:a1:26:c5:56:8e:7b:a4:9d:77:02:80:9a:cd:30:3a:
0f:4f:93:97:eb:a3:5f:b6:e9:5a:e6:a5:9f:11:8d:d5:01:6e:
5a:fd:e1:c9:03:30:88:7b:5b:93:ff:52:01:4f:73:0c:5e:95:
66:de:a7:06:04:86:fe:74:58:79:2d:d1:45:7c:ed:02:94:58:
b2:41:50:7b:83:6f:33:02:5d:5b:65:a6:1d:15:d7:e1:fe:d5:
71:22:d7:45:f0:23:a8:73:08:78:56:0d:c3:27:b3:12:80:fe:
a7:c1:f5:c5:73:15:f8:a9:99:89:c5:a4:8c:62:98:7e:e8:98:
9f:30:f1:e2:ff:ef:6f:32:94:e4:c1:79:ba:26:1b:80:fb:fa:
80:5a:2d:5c:db:2e:80:85:43:30:c0:13:98:91:92:37:f7:79:
74:fa:b7:f1:e0:e7:e5:ca:f7:66:2c:b5:e3:fb:17:b3:cc:9c:
f1:ae:2f:bc:70:36:99:16:a5:7b:4b:fe:c8:06:35:91:2d:3e:
44:c5:1d:ee:b4:8a:0c:6a:35:78:f6:50:fa:8e:33:32:a8:0c:
7d:4d:52:b7:75:10:e4:14:1f:78:f0:ae:e5:49:69:4d:21:dc:
25:e4:2d:91:63:8e:32:e4:8d:94:9c:c4:b4:7e:2b:f0:54:9d:
1a:6a:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org