Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d9ccc4-cc19-4d75-a7de-9b354597f7b5/1/MsYb9p_CrMn5BrSk_7fJ1S4c2RQ.roa
File: MsYb9p_CrMn5BrSk_7fJ1S4c2RQ.roa (raw, json)
Hash identifier: TCSUNuNYZ1ksAyU7X6LhuYgvfKFsSamQK+6yeaKCZyo=
Subject key identifier: 32:C6:1B:F6:9F:C2:AC:C9:F9:06:B4:A4:FF:B7:C9:D5:2E:1C:D9:14
Certificate issuer: /CN=633fa5a0c3309ea589533aab838096ac46bc24ee
Certificate serial: 01856C53DDC9508C839FD4AE4DF73C07CB39
Authority key identifier: 63:3F:A5:A0:C3:30:9E:A5:89:53:3A:AB:83:80:96:AC:46:BC:24:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz-loMMwnqWJUzqrg4CWrEa8JO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d9ccc4-cc19-4d75-a7de-9b354597f7b5/1/MsYb9p_CrMn5BrSk_7fJ1S4c2RQ.roa
Signing time: Sun 01 Jan 2023 07:55:13 +0000
ROA not before: Sun 01 Jan 2023 07:55:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197791
IP address blocks: 91.226.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:dd:c9:50:8c:83:9f:d4:ae:4d:f7:3c:07:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633fa5a0c3309ea589533aab838096ac46bc24ee
Validity
Not Before: Jan 1 07:55:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32c61bf69fc2acc9f906b4a4ffb7c9d52e1cd914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:55:cc:28:cb:a8:67:63:46:90:94:23:46:
61:90:6d:98:56:15:6e:87:c2:a2:33:52:58:a9:ac:
a3:62:88:dc:b7:a4:22:87:bd:c9:98:24:a1:10:90:
59:03:fa:5f:af:96:07:71:63:fd:12:e5:fe:fc:8e:
9c:d6:2b:8d:90:94:01:b0:bf:93:c8:77:34:b6:24:
4e:66:1a:bb:53:b8:c2:18:56:ce:50:e8:e4:f8:bf:
bc:30:9f:64:33:e4:16:d8:7b:e5:38:8d:80:ab:cf:
6f:22:1f:87:ac:79:88:e8:2d:4f:66:ad:07:4a:c2:
a6:4b:00:ba:f4:6d:77:f9:64:fe:c2:dc:87:26:7f:
aa:af:e6:2d:98:0b:f1:50:96:c2:9e:0e:f2:fe:d9:
b0:39:96:10:2a:ca:e2:1e:79:27:4b:10:54:0e:9b:
0f:99:14:3a:8f:1f:62:70:26:a2:30:02:f1:f9:de:
00:c7:50:41:03:01:ed:49:98:1a:42:7d:95:e0:78:
68:02:de:fe:07:c9:77:49:c0:06:4d:f8:ca:9d:6e:
81:75:fc:23:0f:d6:6f:7b:63:86:2a:7a:cd:12:a7:
c6:33:0d:0f:66:45:a3:06:0f:ad:88:f6:58:f8:09:
ab:71:b5:e2:a4:78:2a:45:c0:ce:62:4a:53:ba:16:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C6:1B:F6:9F:C2:AC:C9:F9:06:B4:A4:FF:B7:C9:D5:2E:1C:D9:14
X509v3 Authority Key Identifier:
keyid:63:3F:A5:A0:C3:30:9E:A5:89:53:3A:AB:83:80:96:AC:46:BC:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz-loMMwnqWJUzqrg4CWrEa8JO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d9ccc4-cc19-4d75-a7de-9b354597f7b5/1/MsYb9p_CrMn5BrSk_7fJ1S4c2RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d9ccc4-cc19-4d75-a7de-9b354597f7b5/1/Yz-loMMwnqWJUzqrg4CWrEa8JO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.246.0/24
Signature Algorithm: sha256WithRSAEncryption
82:51:bf:c9:e2:3e:a0:06:95:86:84:a4:7b:dd:d0:66:0a:3d:
5c:b4:ca:e0:ad:2c:1c:5c:7b:a0:08:42:38:78:2a:c3:7e:f1:
14:7c:2e:6e:28:39:e0:9f:f4:bd:2f:23:f6:59:5a:ec:a7:c5:
82:8d:7f:4b:82:84:b3:62:ca:e1:8d:a2:0c:af:42:25:1c:53:
ab:72:16:0f:67:8d:5b:23:38:0a:71:1f:6f:97:e7:cc:1e:e6:
d5:11:de:03:6c:60:6d:21:05:10:a9:08:02:30:27:2d:cb:b4:
bb:db:99:fa:72:f0:38:e4:6e:6e:18:33:56:5c:10:a8:96:cb:
3a:4c:84:a3:e9:cd:6f:16:b1:f4:29:b3:f3:5c:1b:31:00:26:
b8:bd:35:7c:94:9c:1e:32:5b:4a:dd:68:f6:6f:8d:4e:42:83:
eb:3e:1a:af:0b:4d:d3:8a:3e:af:1f:42:82:e2:8e:19:00:5c:
06:60:ed:b8:bb:4e:59:b3:15:48:c0:16:bf:2a:02:c3:c9:d3:
5f:7f:44:b5:f9:81:02:8d:76:3e:f7:37:35:d7:88:aa:db:42:
5b:dc:1a:91:9e:4e:2e:b7:38:9e:24:fb:56:67:4e:01:e6:65:
ab:3f:f3:4a:3f:cc:7e:87:23:1f:1e:39:fd:ea:70:fd:fe:bd:
cc:04:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:49 2024 by rpki-client on console-fra.rpki-client.org