Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/ajPyWpdRnZksxD3_2Gak8J5SdWc.roa
File: ajPyWpdRnZksxD3_2Gak8J5SdWc.roa (raw, json)
Hash identifier: HutYfv3ikg404NYZaeNAdYnVT5himix0AvOR616TJeo=
Subject key identifier: 6A:33:F2:5A:97:51:9D:99:2C:C4:3D:FF:D8:66:A4:F0:9E:52:75:67
Certificate issuer: /CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
Certificate serial: B0B7B0
Authority key identifier: 70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/ajPyWpdRnZksxD3_2Gak8J5SdWc.roa
Signing time: Sat 01 Jan 2022 05:55:44 +0000
ROA not before: Sat 01 Jan 2022 05:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.247.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11581360 (0xb0b7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
Validity
Not Before: Jan 1 05:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a33f25a97519d992cc43dffd866a4f09e527567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:b5:f5:10:4b:c4:be:8c:13:46:cf:65:9c:
78:96:32:f2:2c:af:7c:85:dd:6d:33:8a:c9:9a:5e:
81:c8:3f:e1:1c:94:71:51:a3:54:b2:43:3f:6d:02:
e5:0b:6b:8b:22:27:3d:e1:f6:43:89:ad:6a:db:c2:
a0:3c:c7:90:de:8e:05:8e:e5:d5:42:74:18:aa:d8:
49:cf:90:a9:5c:9b:cb:bd:d3:14:73:b5:a0:4f:5b:
be:12:d7:ea:dc:5c:d3:30:50:17:a0:80:ef:d2:e9:
72:69:ae:a9:63:d5:4a:e9:56:57:b0:bc:ef:5f:8e:
72:9f:6b:c8:10:76:ba:b3:43:bc:63:42:44:73:94:
b7:ea:5a:a2:f5:0a:b7:fe:2d:02:df:cf:01:44:7e:
e2:da:3c:6e:b8:df:d1:42:80:64:ab:0c:a1:32:59:
5a:4e:1b:3a:82:9a:f3:69:4f:6e:2a:26:20:d6:21:
39:b9:7f:f2:c0:67:fe:9b:26:6e:c8:a0:0f:73:20:
a2:ad:e7:28:20:93:5c:ee:0f:e7:c3:67:7f:20:67:
03:5f:c9:1e:a7:4f:c5:96:31:ca:43:95:5a:0d:6a:
55:47:d5:52:d6:17:86:2c:99:8e:7a:1e:21:b6:b3:
4d:c0:a5:bc:45:67:ad:2e:a9:49:62:1b:51:3d:47:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:F2:5A:97:51:9D:99:2C:C4:3D:FF:D8:66:A4:F0:9E:52:75:67
X509v3 Authority Key Identifier:
keyid:70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/ajPyWpdRnZksxD3_2Gak8J5SdWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/cKm5fx-KHtRzjFAK7P-tJPE2cWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:46:ba:ca:47:97:4a:38:be:a8:89:1f:3b:71:71:3f:f2:c4:
7d:60:19:e5:97:83:b6:78:45:b0:47:c0:60:12:62:0b:c9:d3:
b7:b5:4a:48:7e:16:7c:86:0f:39:5c:71:73:87:22:30:ef:58:
bf:22:7a:d9:81:c6:ac:9b:02:3e:bf:1f:da:7b:10:c5:f6:9c:
60:f1:8d:b0:fc:4d:0a:66:0e:72:55:1d:bb:65:db:85:7a:c8:
55:9b:c4:17:87:5c:6d:6c:ef:32:06:b1:fa:55:03:bc:08:92:
a6:a8:40:94:57:af:ce:aa:4d:b5:20:9a:c3:11:13:df:92:b6:
35:63:8a:f2:d7:f3:63:05:c1:c5:f3:b6:10:4c:49:6e:16:34:
80:44:95:72:39:31:34:f9:ab:62:de:28:ad:ce:30:a0:4b:d5:
3b:52:85:d3:4c:1a:9f:f5:c4:35:a2:df:c9:01:a2:b2:e8:54:
81:c2:b4:83:7b:a6:e1:65:1c:1c:ba:99:b8:cd:a0:1f:22:2e:
20:7e:d0:eb:bd:8c:4f:a9:d7:61:98:59:43:a3:ae:be:a3:fe:
a9:d6:5e:0f:73:61:63:de:36:64:a6:34:3c:d9:1a:fd:10:55:
3b:91:e7:57:0e:1d:05:b3:ab:93:2d:5d:dc:5d:aa:96:7d:1a:
36:55:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org