Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/wOdjRZ6XjP6i2NMge6cUPrwy9JM.roa
File: wOdjRZ6XjP6i2NMge6cUPrwy9JM.roa (raw, json)
Hash identifier: 9jw273CgeQI0tDM+bZorl1UVJE4KIV21O7ROcTioxEo=
Subject key identifier: C0:E7:63:45:9E:97:8C:FE:A2:D8:D3:20:7B:A7:14:3E:BC:32:F4:93
Certificate issuer: /CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Certificate serial: 018CC2DB4041CECBAB94F4E3CC2EC23ECD1F
Authority key identifier: EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/wOdjRZ6XjP6i2NMge6cUPrwy9JM.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 91.212.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:40:41:ce:cb:ab:94:f4:e3:cc:2e:c2:3e:cd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0e763459e978cfea2d8d3207ba7143ebc32f493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:c1:9f:9f:c0:ba:83:c3:e0:0b:f8:d3:f1:
bb:27:64:13:53:13:bf:13:34:63:11:79:4a:bf:6c:
c2:53:dd:63:eb:e0:7d:05:91:9d:b0:da:98:5b:e0:
23:22:c6:ce:31:34:29:6d:27:48:b4:0f:94:4a:f7:
1f:3e:66:cc:0c:4a:d2:30:8f:7d:1c:c6:b8:d0:8b:
48:17:48:dc:76:b4:ef:a1:84:43:98:13:f0:6f:85:
04:c8:0d:e2:5e:d5:85:25:87:a8:82:bd:a6:90:c6:
f0:51:25:bd:d2:29:19:b8:00:8e:bd:4c:c5:71:31:
89:6e:18:69:27:3f:b0:f0:0c:16:89:cd:ab:fe:b7:
51:e7:f9:dd:02:3f:e9:98:96:98:4b:1a:81:29:73:
8c:e0:f0:39:a0:4e:1d:80:d4:53:e5:b8:b0:ae:da:
39:be:11:36:11:88:07:c4:19:01:31:0e:01:21:77:
47:84:a5:15:db:f5:60:42:4d:c6:b4:64:ac:d7:4a:
63:c4:ab:bc:56:6a:fb:76:6c:9a:39:56:74:e7:46:
b4:64:18:3a:f8:f2:6d:d2:94:b3:9e:62:e2:fd:25:
dc:2a:98:f8:97:7a:d1:6e:93:d8:dd:72:59:db:24:
60:00:08:f0:0f:83:e1:6d:3c:1a:10:8a:13:6f:da:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E7:63:45:9E:97:8C:FE:A2:D8:D3:20:7B:A7:14:3E:BC:32:F4:93
X509v3 Authority Key Identifier:
keyid:EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/wOdjRZ6XjP6i2NMge6cUPrwy9JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.216.0/24
Signature Algorithm: sha256WithRSAEncryption
92:62:46:fd:4d:c0:8e:a5:5c:97:61:b4:30:fe:55:3a:01:80:
4e:1f:c0:eb:e4:bb:98:84:48:0f:f5:4c:54:7a:8f:a5:12:7a:
73:01:6a:0e:4a:c6:a8:e6:dc:da:c0:29:91:08:ab:d2:3a:a7:
19:b9:46:31:c7:b6:99:a9:c7:9f:b4:11:c6:66:0c:3f:9a:c2:
81:0e:99:85:44:1f:01:d0:25:e0:3f:a9:40:92:44:be:e5:b5:
23:f0:1b:4f:8d:88:90:68:4e:bb:ce:8f:54:cc:07:7f:04:57:
3d:e2:31:01:58:f2:0a:3b:ed:22:f2:c2:de:c9:95:45:9d:d5:
ed:8c:8d:ef:c2:5c:31:bf:0a:72:b3:1e:07:89:e8:0d:51:8d:
ea:0c:02:bc:fc:9a:17:02:dc:ad:e1:50:ea:ba:16:d3:a0:0f:
97:bb:57:ad:89:f6:91:84:94:dd:0f:4b:74:17:e5:25:42:a2:
7d:69:57:ad:54:49:82:25:ec:de:64:52:ad:72:4e:32:cf:39:
b6:29:be:b0:6e:05:5f:66:9a:3a:ef:a0:ee:2b:2c:b1:2f:41:
84:97:d8:58:f0:10:95:0e:35:02:7e:78:9b:9a:82:89:85:e0:
5d:59:66:36:18:64:ff:d7:4e:d0:67:76:8f:ed:8c:ef:26:46:
dc:f5:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:12 2024 by rpki-client on console-fra.rpki-client.org