Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/icqkjFcfOSApsQQtkpOyV-EPYpw.roa
File: icqkjFcfOSApsQQtkpOyV-EPYpw.roa (raw, json)
Hash identifier: vgFd041Jo3AiKfL7wtzfD4aPTnlg/fBu+NCyE/JXjfI=
Subject key identifier: 89:CA:A4:8C:57:1F:39:20:29:B1:04:2D:92:93:B2:57:E1:0F:62:9C
Certificate issuer: /CN=1685cdba5d7daf6ddccf8675a90a25b6ed6444d7
Certificate serial: 018CC2DAFF41773FE6D37D5FE0BF0E9E16BE
Authority key identifier: 16:85:CD:BA:5D:7D:AF:6D:DC:CF:86:75:A9:0A:25:B6:ED:64:44:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoXNul19r23cz4Z1qQoltu1kRNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/icqkjFcfOSApsQQtkpOyV-EPYpw.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207990
IP address blocks: 91.199.253.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ff:41:77:3f:e6:d3:7d:5f:e0:bf:0e:9e:16:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1685cdba5d7daf6ddccf8675a90a25b6ed6444d7
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89caa48c571f392029b1042d9293b257e10f629c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:65:9c:28:3d:b6:a4:10:a7:4f:5f:b0:bc:e3:
f9:0f:14:ac:8c:be:06:11:0b:c4:5a:37:9d:3a:96:
ba:ec:c3:3d:bd:5b:cd:74:56:20:63:40:70:91:f1:
59:ca:29:85:87:91:70:c9:d8:09:7b:49:2d:f4:bf:
7e:70:40:12:c2:eb:7f:e1:35:b1:ba:e9:df:a1:cf:
36:89:b1:c8:44:69:01:10:e0:b6:c5:f9:a6:0a:da:
82:b3:60:47:7f:4e:e5:14:04:c4:11:ce:c8:6c:18:
ab:63:25:10:b5:e3:9a:2c:c7:d8:ae:b2:3d:15:61:
7a:79:2d:47:68:7a:be:bd:81:b4:c0:62:7e:c3:44:
a4:9f:9c:25:ab:53:85:00:26:50:12:2e:a8:06:31:
40:97:90:29:fc:52:f1:53:88:0a:c4:48:9f:9d:23:
cd:f7:04:f9:48:92:31:4e:ed:28:85:c8:a4:77:2d:
c1:3f:32:19:01:b4:95:d7:bc:e1:39:0f:e1:17:56:
3b:90:6c:9c:40:58:02:6b:95:36:5b:77:6f:8c:4f:
82:5f:3d:75:2e:48:d4:e5:52:da:55:57:7e:bc:6c:
af:f8:0a:c0:89:0d:bb:03:15:21:ed:23:79:7b:78:
10:5b:32:74:61:22:82:c8:cf:73:b0:9c:e9:ea:e4:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CA:A4:8C:57:1F:39:20:29:B1:04:2D:92:93:B2:57:E1:0F:62:9C
X509v3 Authority Key Identifier:
keyid:16:85:CD:BA:5D:7D:AF:6D:DC:CF:86:75:A9:0A:25:B6:ED:64:44:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoXNul19r23cz4Z1qQoltu1kRNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/icqkjFcfOSApsQQtkpOyV-EPYpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/FoXNul19r23cz4Z1qQoltu1kRNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1d:f9:5b:bf:77:99:26:01:b1:f3:41:c1:4d:29:7b:5f:a9:
54:f2:69:fc:e5:fd:5b:f1:29:ca:34:fc:ba:ba:97:5c:8a:76:
d4:bf:18:60:0c:be:2c:4d:b9:93:2e:6a:0a:6a:d5:59:15:7f:
fb:dd:32:47:32:54:cb:4f:cc:e6:5a:6a:91:35:b2:7f:bf:34:
b3:82:2d:a2:2e:d2:fd:ac:7c:fa:30:bf:58:65:2d:df:0d:78:
ee:ca:46:77:cc:ed:62:35:cd:e7:6e:78:56:d8:5b:29:d5:4c:
11:89:90:b6:4b:d9:91:3c:36:b4:65:28:b5:7b:b1:38:bb:9e:
f3:eb:13:3d:32:26:1c:d1:77:92:c6:25:0b:ef:54:b0:d3:43:
4c:25:9d:eb:f9:8a:ed:43:55:6b:48:0b:71:b6:8a:6c:e1:b7:
85:2c:ae:8e:61:59:7d:05:75:6b:8b:71:ae:8b:9a:ad:ff:96:
eb:80:b2:d1:db:ad:16:7e:d6:07:c2:72:8a:46:fb:1c:30:c9:
9b:fe:a2:77:f1:5d:79:fe:e3:cf:1a:c0:3c:ba:f5:73:ba:f1:
c1:8d:6a:96:77:bd:11:7c:b9:d3:96:f0:ac:86:8f:ea:7f:d6:
85:9c:14:d6:3e:95:be:d9:9b:fb:9d:3e:74:a8:ae:41:80:fa:
e1:78:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:30 2024 by rpki-client on console-fra.rpki-client.org