Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/9EOvr2tp9sL1qlys7iC94KPFuN8.roa
File: 9EOvr2tp9sL1qlys7iC94KPFuN8.roa (raw, json)
Hash identifier: wwHMXVmddS85W0iYpDSKH2l8dZigFZfUPvr+DyNQYUg=
Subject key identifier: F4:43:AF:AF:6B:69:F6:C2:F5:AA:5C:AC:EE:20:BD:E0:A3:C5:B8:DF
Certificate issuer: /CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
Certificate serial: 018602968A949075F81BEE6A930C4CF1841E
Authority key identifier: 48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/9EOvr2tp9sL1qlys7iC94KPFuN8.roa
Signing time: Mon 30 Jan 2023 12:11:05 +0000
ROA not before: Mon 30 Jan 2023 12:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 185.179.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:96:8a:94:90:75:f8:1b:ee:6a:93:0c:4c:f1:84:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
Validity
Not Before: Jan 30 12:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f443afaf6b69f6c2f5aa5cacee20bde0a3c5b8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:41:41:d5:88:4d:f3:07:20:3e:40:86:1d:
8b:ce:85:ab:b0:49:9f:11:5f:f1:68:84:3d:1a:8c:
ee:e1:71:68:d2:6b:2a:50:92:e2:21:05:2c:46:c6:
7b:6d:6c:9d:29:c3:c3:b5:39:86:d6:e0:6c:3f:58:
d2:80:22:1f:2b:b1:13:51:3f:a4:2f:50:f0:86:ec:
0f:69:5d:99:a5:03:29:23:60:c7:be:32:4f:b2:67:
3c:1b:93:fb:c2:d8:cd:71:5f:ba:0c:de:e3:57:a5:
9e:66:55:04:e8:6b:d8:c1:f2:3c:7a:e6:15:b2:42:
7a:c5:52:85:8a:d1:24:66:49:65:3b:3b:67:10:44:
72:46:a9:e5:a2:3a:39:21:95:cd:c5:11:b4:2d:fa:
14:9f:45:90:34:48:ea:14:b4:26:cf:a0:cf:ff:33:
3b:5b:70:66:10:64:a0:03:01:a9:e0:92:50:41:87:
12:3f:44:37:75:85:ed:d9:bb:8f:dc:97:2d:9a:c7:
3a:fa:9d:8d:6c:a3:5a:9f:18:d0:7f:91:5c:30:92:
60:39:ba:b1:88:4a:9d:b9:31:7f:a5:09:06:22:65:
5f:00:6e:75:42:52:38:ea:17:d6:10:e5:49:00:09:
b8:7b:62:e2:6c:13:a0:60:2a:5b:72:8b:88:47:62:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:43:AF:AF:6B:69:F6:C2:F5:AA:5C:AC:EE:20:BD:E0:A3:C5:B8:DF
X509v3 Authority Key Identifier:
keyid:48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/9EOvr2tp9sL1qlys7iC94KPFuN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/SAvxwTbs_9MS_Dm6PIKv-TneJPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:72:08:77:26:50:a4:d8:f0:50:5a:b1:8a:36:d3:6d:ff:f4:
9b:14:71:e7:fa:92:23:eb:bb:89:73:8b:cd:8e:6c:5e:72:82:
c3:5e:fa:da:b5:a4:9c:39:1d:f8:8a:6e:a1:f0:85:9e:93:a6:
b2:d5:b8:f4:db:ec:91:5c:49:c1:2e:cf:b0:b9:6e:ab:25:28:
f2:10:33:4c:48:4c:4b:09:99:93:b6:14:86:32:88:d2:55:54:
e3:38:d6:c2:2a:4e:b6:b5:a6:35:b5:9f:5c:e0:8d:a4:a3:d6:
37:32:aa:1d:ec:64:05:d9:0f:49:f0:4e:99:f6:0b:e1:50:c1:
dc:ed:c4:f8:ab:7b:e2:4b:ad:ff:b6:31:dd:e4:bf:42:06:4e:
c5:dd:a9:a2:b9:a4:cf:d3:b4:ed:76:37:74:bc:9d:7d:2a:f7:
f4:36:cb:bb:95:88:53:52:1c:7a:c6:69:9f:00:29:6e:fc:56:
10:66:b1:34:a9:6e:6c:80:2a:77:c6:e8:71:7d:e4:ee:1a:e0:
98:75:ca:f6:4b:33:43:1a:ee:6e:e8:fe:44:d0:c7:e8:2c:77:
b0:7d:f5:82:f4:88:49:41:8b:2f:8d:aa:69:10:56:5a:e3:77:
28:8f:55:9e:05:ac:95:15:f7:4a:be:c1:db:1e:e2:2d:c3:8c:
b0:4f:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org