Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/6s5itKCgCB5Fu0WV5ajhDS-OgJk.roa
File: 6s5itKCgCB5Fu0WV5ajhDS-OgJk.roa (raw, json)
Hash identifier: EwnJrm+tbVVHT/pTisUBmi1OnSPX1gBNbcoJbg7vQ8g=
Subject key identifier: EA:CE:62:B4:A0:A0:08:1E:45:BB:45:95:E5:A8:E1:0D:2F:8E:80:99
Certificate issuer: /CN=b8b82200a1332e9995437f9c647ea24b416198af
Certificate serial: 01882086B074D017CA3886DF2B512D2E91B4
Authority key identifier: B8:B8:22:00:A1:33:2E:99:95:43:7F:9C:64:7E:A2:4B:41:61:98:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/6s5itKCgCB5Fu0WV5ajhDS-OgJk.roa
Signing time: Mon 15 May 2023 17:47:57 +0000
ROA not before: Mon 15 May 2023 17:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 91.242.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b0:74:d0:17:ca:38:86:df:2b:51:2d:2e:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b82200a1332e9995437f9c647ea24b416198af
Validity
Not Before: May 15 17:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eace62b4a0a0081e45bb4595e5a8e10d2f8e8099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:3f:7c:29:3c:1e:73:3b:20:d9:77:00:1c:
46:e8:77:3e:ef:7e:98:4b:ee:66:57:e8:51:b9:fb:
b3:13:04:c4:a8:62:be:17:05:6c:18:0b:51:63:d6:
26:22:1d:69:13:7d:b8:45:b2:a3:b4:ce:43:2e:50:
28:81:44:a0:b5:e6:00:f3:47:a8:fe:8e:1d:a4:ff:
5a:76:c6:50:30:18:36:ff:3d:69:2b:20:aa:2a:08:
fb:6e:38:8f:bb:1c:cd:d3:3c:eb:78:b1:43:8d:b3:
06:f3:f1:b4:ba:89:d0:5e:14:40:47:c4:da:84:61:
1f:bf:b7:1d:d2:64:06:e5:26:43:ef:7e:d9:98:c8:
a4:f6:ed:5e:2c:06:dc:57:74:4c:66:06:b2:76:c2:
76:6e:42:52:19:e9:f4:b2:8f:c5:cb:59:76:45:80:
f9:8a:bc:f6:4a:5b:d6:9b:02:a4:5e:2e:6d:0c:c1:
22:67:b8:48:42:95:4b:52:c9:f9:02:46:2e:79:ea:
fd:82:90:af:3b:b7:03:de:13:da:3c:c8:a9:33:c2:
69:11:d8:f7:ef:d4:68:af:58:22:86:13:bc:08:7a:
01:b6:6e:c3:37:00:79:c7:7c:ad:90:49:e5:7f:bd:
b4:32:7a:be:3b:cb:c7:cc:bc:13:41:e8:3a:ac:8f:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:62:B4:A0:A0:08:1E:45:BB:45:95:E5:A8:E1:0D:2F:8E:80:99
X509v3 Authority Key Identifier:
keyid:B8:B8:22:00:A1:33:2E:99:95:43:7F:9C:64:7E:A2:4B:41:61:98:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/6s5itKCgCB5Fu0WV5ajhDS-OgJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.252.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8c:a0:25:35:67:14:c3:ff:e3:07:08:41:65:44:6c:b4:7f:
86:0f:9b:bb:59:cb:b2:ad:9b:69:0d:68:2f:46:52:a0:fa:ef:
cd:87:45:cc:cf:e1:2c:1c:2b:29:1b:90:24:f1:75:80:3e:6b:
df:ad:d0:8c:f9:42:d9:79:69:ca:ea:75:39:4f:bd:7d:5f:95:
4a:c9:38:a5:e5:4b:45:a2:fc:78:5c:91:3e:ca:00:23:65:36:
bd:30:8e:62:ab:da:26:f4:c1:3c:1e:2a:0d:69:01:23:ca:10:
ae:37:8e:a1:46:f2:91:3a:0c:9b:a4:eb:74:40:12:93:f7:6f:
f1:68:b2:15:62:70:97:dd:df:61:48:6c:55:7c:fa:de:22:aa:
c4:c3:f3:1a:95:8b:37:53:6c:b1:0a:3a:2d:1f:cf:47:28:64:
2f:05:1f:ac:91:f3:cb:e5:b8:cc:da:fc:77:6d:b5:4b:e0:99:
f0:02:b7:b1:20:83:92:96:27:67:a8:ce:36:ee:2f:04:01:f6:
22:c4:f6:0b:00:3d:32:76:88:28:c0:13:05:e2:31:d0:66:f0:
47:b9:95:64:63:32:b9:9a:cc:13:1e:42:1c:5c:6c:79:20:af:
3a:39:be:91:75:7b:11:63:0c:c9:44:33:6b:73:a8:e7:c3:9e:
67:ec:e4:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrB00BfKOIbfK1EtLpG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YjgyMjAwYTEzMzJlOTk5NTQzN2Y5YzY0N2VhMjRiNDE2
MTk4YWYwHhcNMjMwNTE1MTc0NzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWNlNjJiNGEwYTAwODFlNDViYjQ1OTVlNWE4ZTEwZDJmOGU4MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvI/fCk8HnM7INl3ABxG6Hc+736Y
S+5mV+hRufuzEwTEqGK+FwVsGAtRY9YmIh1pE324RbKjtM5DLlAogUSgteYA80eo
/o4dpP9adsZQMBg2/z1pKyCqKgj7bjiPuxzN0zzreLFDjbMG8/G0uonQXhRAR8Ta
hGEfv7cd0mQG5SZD737ZmMik9u1eLAbcV3RMZgaydsJ2bkJSGen0so/Fy1l2RYD5
irz2SlvWmwKkXi5tDMEiZ7hIQpVLUsn5AkYueer9gpCvO7cD3hPaPMipM8JpEdj3
79Ror1gihhO8CHoBtm7DNwB5x3ytkEnlf720Mnq+O8vHzLwTQeg6rI+N6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrOYrSgoAgeRbtFleWo4Q0vjoCZMB8GA1UdIwQY
MBaAFLi4IgChMy6ZlUN/nGR+oktBYZivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUxnaUFLRXpMcG1WUTMtY1pINmlTMEZobUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZDBiNTUtODZhNC00OTdmLTllZWIt
NjYxZTFhNTZiYzc2LzEvNnM1aXRLQ2dDQjVGdTBXVjVhamhEUy1PZ0prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZDBiNTUtODZhNC00OTdmLTllZWItNjYxZTFhNTZiYzc2
LzEvdUxnaUFLRXpMcG1WUTMtY1pINmlTMEZobUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/L8MA0G
CSqGSIb3DQEBCwUAA4IBAQABjKAlNWcUw//jBwhBZURstH+GD5u7WcuyrZtpDWgv
RlKg+u/Nh0XMz+EsHCspG5Ak8XWAPmvfrdCM+ULZeWnK6nU5T719X5VKyTil5UtF
ovx4XJE+ygAjZTa9MI5iq9om9ME8HioNaQEjyhCuN46hRvKROgybpOt0QBKT92/x
aLIVYnCX3d9hSGxVfPreIqrEw/MalYs3U2yxCjotH89HKGQvBR+skfPL5bjM2vx3
bbVL4JnwArexIIOSlidnqM427i8EAfYixPYLAD0ydogowBMF4jHQZvBHuZVkYzK5
mswTHkIcXGx5IK86Ob6RdXsRYwzJRDNrc6jnw55n7OT+
-----END CERTIFICATE-----
Generated at Thu Nov 2 12:50:17 2023 by rpki-client on console-ams.rpki-client.org