Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b3e5e9-5b65-4461-be96-368af02cf775/1/RYxpAycRmeibJz3LFEBJxzzA4NA.roa
File: RYxpAycRmeibJz3LFEBJxzzA4NA.roa (raw, json)
Hash identifier: WC0Cf/WaSLkrzgz7QVO3f9YoFzMCPMZt5+KNHtcVpMQ=
Subject key identifier: 45:8C:69:03:27:11:99:E8:9B:27:3D:CB:14:40:49:C7:3C:C0:E0:D0
Certificate issuer: /CN=5387c2d0108e13b201f0505a9025cad76b5f5098
Certificate serial: 016D7C29
Authority key identifier: 53:87:C2:D0:10:8E:13:B2:01:F0:50:5A:90:25:CA:D7:6B:5F:50:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4fC0BCOE7IB8FBakCXK12tfUJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b3e5e9-5b65-4461-be96-368af02cf775/1/RYxpAycRmeibJz3LFEBJxzzA4NA.roa
Signing time: Sat 01 Jan 2022 04:56:32 +0000
ROA not before: Sat 01 Jan 2022 04:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42947
IP address blocks: 91.213.74.0/24 maxlen: 24
91.213.75.0/24 maxlen: 24
91.213.121.0/24 maxlen: 24
91.213.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23952425 (0x16d7c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5387c2d0108e13b201f0505a9025cad76b5f5098
Validity
Not Before: Jan 1 04:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=458c6903271199e89b273dcb144049c73cc0e0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f0:4f:84:4e:2a:05:b5:dd:bd:31:aa:e3:a2:
7d:da:03:07:f9:2d:df:91:ce:e3:04:0d:98:5c:12:
53:ee:52:c4:43:6b:23:bd:05:bf:83:33:ab:d0:0b:
9a:c8:f1:9f:1a:9c:7a:91:b6:58:67:75:d8:7e:c8:
4f:2f:1b:09:b0:21:d7:0e:17:4e:2f:a1:50:d5:61:
d9:0b:3f:f4:64:52:91:9a:4d:ef:96:b5:d6:2a:d6:
b2:3d:1c:c1:36:d9:a2:c8:b6:f2:77:31:8e:74:69:
3d:00:c5:87:6d:74:33:e0:1a:b0:87:9f:b7:c2:c7:
2d:28:c6:e5:70:f6:08:c4:af:21:c5:e4:61:c4:01:
05:1b:f8:b0:57:81:04:db:9a:96:9f:13:23:46:b4:
41:29:30:16:79:88:fc:2a:28:f6:e5:06:34:ec:99:
c1:c8:bc:31:2a:c7:29:75:45:23:15:28:b4:66:bc:
68:6c:e7:00:df:1d:f2:b9:be:89:40:6b:91:bf:db:
4b:ae:3e:b1:25:75:01:40:0a:23:87:88:a0:3a:7d:
c1:e8:62:59:7b:5b:ae:96:38:9e:c1:f4:25:ea:5b:
92:90:23:7c:e5:8b:64:76:8c:8e:6a:54:a7:3b:6e:
f0:54:d8:89:c2:50:15:79:58:93:af:91:55:5b:f4:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:69:03:27:11:99:E8:9B:27:3D:CB:14:40:49:C7:3C:C0:E0:D0
X509v3 Authority Key Identifier:
keyid:53:87:C2:D0:10:8E:13:B2:01:F0:50:5A:90:25:CA:D7:6B:5F:50:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4fC0BCOE7IB8FBakCXK12tfUJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b3e5e9-5b65-4461-be96-368af02cf775/1/RYxpAycRmeibJz3LFEBJxzzA4NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b3e5e9-5b65-4461-be96-368af02cf775/1/U4fC0BCOE7IB8FBakCXK12tfUJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.74.0/23
91.213.120.0/23
Signature Algorithm: sha256WithRSAEncryption
25:80:73:aa:d3:9f:94:be:42:88:dd:7e:45:d4:1d:b5:b7:73:
3d:5e:85:36:5b:de:5f:8c:36:db:72:ce:96:32:92:1c:ad:69:
93:87:6c:40:d0:96:f9:74:3a:0e:af:26:9a:66:fd:18:3c:9c:
a1:13:33:c5:ef:35:42:b2:c9:f6:64:02:97:38:86:f8:a0:c9:
93:60:e1:4e:27:54:0f:04:55:db:8d:a8:fe:d9:c2:c1:64:23:
9c:a3:38:74:53:0d:ec:57:fc:c6:f1:d7:5b:ca:95:31:56:e5:
c1:af:31:54:18:e2:a7:db:2d:e0:da:83:88:85:8d:c7:97:b7:
41:6d:b4:b7:27:3d:54:94:5b:9c:7d:02:eb:60:f8:b0:ae:a9:
2c:5d:f5:3a:90:4d:99:a5:6f:aa:24:ae:89:25:ed:3a:da:61:
cf:f0:86:2d:39:30:07:ee:be:f4:cd:6d:b0:1a:c3:06:7e:15:
ee:bf:c9:8e:2f:e5:f5:52:a5:bc:c5:aa:22:00:47:fa:cc:2a:
8d:ac:68:44:a0:b1:cc:23:06:9a:53:71:31:4d:3d:c6:b8:92:
ed:49:b2:94:28:75:1c:a6:73:0b:e0:79:d6:44:6f:91:c3:d0:
35:67:a6:c2:24:78:3d:f7:ea:09:04:25:54:3d:87:87:37:bd:
c7:8b:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-fra.rpki-client.org