Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/DjJ0bfBj_tt94tMMNNZX1BjoJPE.roa
File: DjJ0bfBj_tt94tMMNNZX1BjoJPE.roa (raw, json)
Hash identifier: oEKZgomgTtiR3x2P/G2Y3/HccKjyIgEjo2eMmcmMd3o=
Subject key identifier: 0E:32:74:6D:F0:63:FE:DB:7D:E2:D3:0C:34:D6:57:D4:18:E8:24:F1
Certificate issuer: /CN=06771d23ce8756dfb911e863c08424927a5dde34
Certificate serial: 01856FD51391C10093F309849FD5EFB8ABD6
Authority key identifier: 06:77:1D:23:CE:87:56:DF:B9:11:E8:63:C0:84:24:92:7A:5D:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BncdI86HVt-5EehjwIQkknpd3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/DjJ0bfBj_tt94tMMNNZX1BjoJPE.roa
Signing time: Mon 02 Jan 2023 00:15:13 +0000
ROA not before: Mon 02 Jan 2023 00:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51160
IP address blocks: 91.216.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:13:91:c1:00:93:f3:09:84:9f:d5:ef:b8:ab:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06771d23ce8756dfb911e863c08424927a5dde34
Validity
Not Before: Jan 2 00:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e32746df063fedb7de2d30c34d657d418e824f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:be:fb:13:c2:84:52:08:5c:50:c0:6d:68:
7a:df:39:0e:97:c3:d5:ab:38:c7:b2:b9:f6:ef:91:
59:6b:d3:a2:27:ac:23:c4:3c:ea:4d:df:d0:56:c7:
a5:dc:54:37:ed:0d:7e:31:f1:56:e4:9e:cd:ca:a0:
b1:3a:b8:04:26:c8:c8:f0:fb:db:a9:62:8f:dc:33:
9b:d7:93:12:e9:d0:13:19:d4:a7:6b:23:78:d6:47:
d5:88:a7:99:f8:87:28:31:e1:6c:d0:cb:12:ed:0c:
81:9f:bd:85:f2:00:76:01:be:da:ce:bc:42:71:0f:
fe:c7:7c:00:48:40:bb:0c:1e:84:c3:8b:3c:49:4b:
0c:d2:88:11:a1:ac:f0:e1:2d:21:e0:f2:71:cc:dd:
6b:7d:8c:80:01:82:52:2a:7c:7e:ec:ec:27:96:b0:
22:51:b7:fe:8e:57:c5:ad:64:bd:53:22:d1:45:aa:
bf:4c:30:ed:88:77:76:9e:1c:44:c9:26:ac:de:16:
52:31:e9:62:b4:96:6c:fc:ca:61:e7:87:8f:b4:b7:
66:b1:40:49:cb:97:cf:6e:df:47:26:5a:5b:3f:e9:
f6:5e:c4:95:c6:5a:c0:22:c8:f3:2b:47:2a:70:89:
e4:16:fe:c8:1e:32:e8:98:c2:05:ea:21:d7:41:3c:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:74:6D:F0:63:FE:DB:7D:E2:D3:0C:34:D6:57:D4:18:E8:24:F1
X509v3 Authority Key Identifier:
keyid:06:77:1D:23:CE:87:56:DF:B9:11:E8:63:C0:84:24:92:7A:5D:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BncdI86HVt-5EehjwIQkknpd3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/DjJ0bfBj_tt94tMMNNZX1BjoJPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/BncdI86HVt-5EehjwIQkknpd3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.176.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9a:c3:d4:41:09:d7:a6:5e:7b:5b:0f:98:bb:33:00:26:b2:
dc:57:2a:b2:2d:b2:6d:6b:c0:51:6e:2d:7d:93:26:43:aa:78:
98:74:2c:0b:f9:9f:2b:87:20:72:8c:89:30:8c:17:6d:e0:27:
bc:4a:ac:27:93:c8:06:d3:37:ef:71:0e:07:13:31:76:6e:f1:
e8:d1:b0:46:73:53:c9:19:5b:7d:1e:32:33:d2:a8:e9:b3:08:
77:d3:99:11:de:85:4f:e1:20:64:e4:55:ed:db:62:05:1a:da:
6b:d6:e2:6a:aa:e3:90:f1:62:ff:15:71:75:8d:e4:21:7b:39:
85:12:64:d3:ec:7b:28:00:77:ba:d3:3d:26:80:90:d2:4d:34:
50:d5:f3:a4:01:7f:92:d1:6f:27:ea:e0:0c:eb:dc:f7:d1:3a:
95:84:a3:24:72:bb:67:8a:d2:11:3d:6a:2b:a4:8e:28:3a:fb:
c5:ae:9f:4a:6b:1a:c0:db:69:2e:dc:43:f5:a0:ad:8d:40:34:
bb:4f:d8:c8:9d:89:e7:83:0e:b3:cc:fb:df:a4:49:fc:e1:e3:
c2:e2:e5:3b:dd:70:8b:5c:d5:c1:79:a9:61:2e:57:32:e4:da:
0f:eb:6e:f1:5e:44:c7:7a:b3:7e:c3:1d:49:c7:4e:03:53:e6:
3b:87:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-fra.rpki-client.org