Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/a06cfW2j85z4x3eZP4ZghhQsvUQ.roa
File: a06cfW2j85z4x3eZP4ZghhQsvUQ.roa (raw, json)
Hash identifier: vhx/mA6JfehORZm2LcHziw5iqD+pZ/TbARt6i5ph/Sg=
Subject key identifier: 6B:4E:9C:7D:6D:A3:F3:9C:F8:C7:77:99:3F:86:60:86:14:2C:BD:44
Certificate issuer: /CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Certificate serial: 01856CE5E76E46125A44FDF70E52C47EAD20
Authority key identifier: C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/a06cfW2j85z4x3eZP4ZghhQsvUQ.roa
Signing time: Sun 01 Jan 2023 10:34:44 +0000
ROA not before: Sun 01 Jan 2023 10:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210512
IP address blocks: 91.195.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:e7:6e:46:12:5a:44:fd:f7:0e:52:c4:7e:ad:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Validity
Not Before: Jan 1 10:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4e9c7d6da3f39cf8c777993f866086142cbd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:92:12:81:de:f8:d1:d8:3a:ef:6a:0a:f5:
29:08:75:05:f9:de:bd:2d:41:1a:f1:45:85:3b:54:
56:6c:c0:79:c3:57:50:aa:70:fe:21:aa:7b:20:25:
51:1e:08:a8:2c:46:17:33:ef:d6:8a:eb:62:0e:43:
79:64:a1:6a:fb:6e:37:a6:0f:27:ef:01:68:f4:df:
fc:f4:ab:82:71:7f:ef:ee:8c:51:37:7a:7a:6d:06:
ff:6c:3c:2a:78:d0:b5:30:df:f1:a5:76:6a:e6:8b:
53:78:5e:87:2c:fe:0a:49:ce:6f:6c:53:0a:ac:85:
86:a6:8b:4c:26:0e:96:c0:c2:c1:e9:5c:f8:6e:55:
86:dd:46:75:d4:22:5c:ae:5a:f5:f2:10:aa:87:6e:
74:71:55:66:9e:c7:dd:c0:d0:a8:5a:d8:87:e0:c1:
85:b9:77:b0:ef:68:c8:63:39:39:7c:6f:c0:8e:50:
8a:e6:9b:34:e2:e2:18:90:5f:d4:d4:39:44:00:1e:
d5:23:5d:40:36:cc:31:fe:c9:d3:ef:bf:05:1b:0c:
b7:c0:38:0f:61:6f:03:15:54:a9:58:e7:5a:14:01:
e3:b7:65:b0:0c:10:96:c5:f4:fb:42:3a:ed:f5:13:
63:90:d3:99:68:6d:0c:2e:89:04:93:e6:e3:7e:d3:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4E:9C:7D:6D:A3:F3:9C:F8:C7:77:99:3F:86:60:86:14:2C:BD:44
X509v3 Authority Key Identifier:
keyid:C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/a06cfW2j85z4x3eZP4ZghhQsvUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/yUy0Im5tJMHg6WhXiKX51ZQxLMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:30:fe:4c:91:d7:07:55:99:7c:a1:8a:75:4f:3a:8e:e8:ef:
38:d4:47:44:df:dc:4a:1a:85:13:0f:fa:85:de:e2:a2:c4:26:
e1:da:40:0d:10:09:f1:41:23:a4:dc:93:87:a7:1b:73:3f:b0:
67:37:40:e3:b1:7a:52:67:50:fa:0f:96:7f:54:76:fd:47:41:
dd:0e:37:db:2e:d9:a6:a7:cc:34:8b:5d:6b:38:c5:14:69:83:
08:c7:f8:68:77:1c:2a:7c:bd:e8:7f:0b:fc:45:3d:b7:96:07:
66:28:6c:5b:df:7d:d3:14:87:f4:3c:4c:a9:2e:91:a0:45:dc:
0e:26:78:a5:4f:50:82:ad:d2:9e:6c:01:68:92:ff:3b:b2:37:
79:42:be:39:a8:30:7c:82:c2:ba:19:4a:b3:de:04:00:48:11:
a9:65:8b:c9:f9:0f:28:b6:5c:3b:80:29:94:b2:eb:2b:a8:7e:
f5:89:d3:81:96:d2:3e:98:7a:80:36:59:49:78:4a:f4:d0:69:
7d:fb:cf:ba:8f:22:5c:8d:50:93:76:9c:98:ed:ce:51:8c:6d:
ec:5b:cd:3c:56:57:3b:d9:27:1f:7d:7f:32:fb:9b:8f:43:c1:
de:3f:56:43:d8:18:49:83:fd:73:1f:f2:b9:a7:e1:cb:c8:d7:
35:c2:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 12:16:53 2023 by rpki-client on console-fra.rpki-client.org