Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/B3o0IAe_nlyPKM4LU4EQPbtUvws.roa
File: B3o0IAe_nlyPKM4LU4EQPbtUvws.roa (raw, json)
Hash identifier: fUOiFPGMbY/erF+F3EoPG1aDaLZZcdEfoRagAZ2LD3E=
Subject key identifier: 07:7A:34:20:07:BF:9E:5C:8F:28:CE:0B:53:81:10:3D:BB:54:BF:0B
Certificate issuer: /CN=9f8de721e3aa46c02a386bab94e34d8a5800583a
Certificate serial: 0183EB8D0AA4DED6AF43BAF4A421185E2D83
Authority key identifier: 9F:8D:E7:21:E3:AA:46:C0:2A:38:6B:AB:94:E3:4D:8A:58:00:58:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n43nIeOqRsAqOGurlONNilgAWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/B3o0IAe_nlyPKM4LU4EQPbtUvws.roa
Signing time: Tue 18 Oct 2022 14:43:52 +0000
ROA not before: Tue 18 Oct 2022 14:43:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394540
IP address blocks: 91.205.112.0/24 maxlen: 24
91.205.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:8d:0a:a4:de:d6:af:43:ba:f4:a4:21:18:5e:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8de721e3aa46c02a386bab94e34d8a5800583a
Validity
Not Before: Oct 18 14:43:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=077a342007bf9e5c8f28ce0b5381103dbb54bf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:07:8e:e3:66:a8:20:cb:94:56:7e:1f:33:
b3:06:dc:6e:8c:6d:2b:7f:55:e5:49:97:94:78:3a:
ef:da:c6:00:31:7b:91:b3:e7:3a:6c:c3:d7:40:8b:
58:e8:0a:c3:d4:a4:25:75:c6:cf:10:1a:1f:36:f7:
db:30:67:bb:45:38:7d:e1:57:48:00:00:8d:b5:87:
b6:95:4c:7c:84:01:da:e0:b0:59:ec:93:e3:19:38:
a5:5b:13:ba:c3:17:6e:1a:1e:8e:88:be:e4:f7:0a:
0c:64:55:13:3d:c9:75:bf:f8:e4:2a:d7:a8:6d:51:
51:eb:20:11:e2:4c:de:6a:a6:38:d4:f5:38:01:52:
cf:b6:d6:67:97:f4:fd:4b:b1:fd:ac:82:3f:bc:bd:
3e:51:96:d5:96:c9:70:ff:0f:11:aa:10:40:d7:f4:
b1:22:77:b2:11:6d:72:8a:c4:a4:c2:37:b9:b0:8b:
48:13:0f:d6:df:6f:90:df:be:c8:ce:2b:ab:de:34:
33:ec:aa:8b:eb:7b:82:72:4e:8c:1a:31:4a:09:d5:
a6:13:15:d6:92:a8:aa:c4:e7:2b:70:cb:5e:d9:0c:
8f:8c:a9:dc:62:ff:a2:e5:d5:68:71:4c:21:8d:1f:
c2:61:65:52:ec:d0:87:bf:6f:b4:a7:14:d5:eb:d6:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:34:20:07:BF:9E:5C:8F:28:CE:0B:53:81:10:3D:BB:54:BF:0B
X509v3 Authority Key Identifier:
keyid:9F:8D:E7:21:E3:AA:46:C0:2A:38:6B:AB:94:E3:4D:8A:58:00:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n43nIeOqRsAqOGurlONNilgAWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/B3o0IAe_nlyPKM4LU4EQPbtUvws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/n43nIeOqRsAqOGurlONNilgAWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.112.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:f8:27:79:5a:8c:13:c4:3a:32:36:91:a0:0a:86:c3:4b:2e:
99:32:88:01:ff:d8:f8:b4:88:61:97:c9:a4:18:dd:98:78:4c:
3e:52:13:86:57:d1:00:28:85:88:f8:2f:a9:58:16:34:75:ae:
1d:df:eb:98:51:e6:1d:a1:34:c6:7e:19:aa:9a:f3:b8:fb:e4:
71:72:f8:4a:8c:fb:65:29:60:42:4e:ca:80:c3:62:5d:74:95:
9e:00:34:ad:c0:51:48:b6:27:b9:14:c3:fe:07:8c:35:58:31:
2c:f7:d5:5a:e3:6a:0a:fc:2c:bb:31:69:28:a5:57:cb:a2:1a:
70:ef:73:e5:2e:3a:54:5f:23:62:0d:6a:01:1f:e9:01:58:b8:
1f:63:fd:0f:e6:4b:df:2e:ab:12:ee:f1:b3:0a:dd:f7:1d:5a:
8b:3c:d8:f5:13:d6:32:22:67:7a:db:b6:3a:46:dc:83:95:10:
9e:34:fe:05:54:7e:49:ed:d6:12:27:07:b8:29:57:96:ab:87:
2f:c0:0b:b3:3a:e1:28:e7:c2:fc:e5:b0:7d:34:7f:d2:e3:b7:
81:ff:2b:95:ed:45:b2:aa:35:1a:27:d9:4f:50:ea:e5:27:b6:
ce:a7:2b:58:8d:9e:52:96:db:3c:09:eb:4a:13:b4:88:2e:3c:
f7:fa:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org