Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/x1WmSUa-ZdJDvyrqaGEGaI1n4_c.roa
File: x1WmSUa-ZdJDvyrqaGEGaI1n4_c.roa (raw, json)
Hash identifier: BjLFcbSvuciOb+zXdxP02Uhj33hwM4btZxXZJkzNTWY=
Subject key identifier: C7:55:A6:49:46:BE:65:D2:43:BF:2A:EA:68:61:06:68:8D:67:E3:F7
Certificate issuer: /CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Certificate serial: 01856F1DC86F62AD4B67579998E1B8AE1C1F
Authority key identifier: EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/x1WmSUa-ZdJDvyrqaGEGaI1n4_c.roa
Signing time: Sun 01 Jan 2023 20:55:00 +0000
ROA not before: Sun 01 Jan 2023 20:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33387
IP address blocks: 91.212.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c8:6f:62:ad:4b:67:57:99:98:e1:b8:ae:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Validity
Not Before: Jan 1 20:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c755a64946be65d243bf2aea686106688d67e3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:48:e2:ad:3b:11:76:b5:58:1b:38:43:67:
92:f2:83:1b:39:82:96:f4:d2:f2:e0:34:0a:10:c7:
f0:72:7e:8d:4c:b9:2d:19:75:98:b4:4d:7e:a7:c4:
4a:92:ff:55:1f:5d:56:f0:22:42:66:d7:8e:c8:31:
dc:57:5c:c3:90:1f:63:6e:5d:2b:89:6f:76:bd:6c:
10:39:ab:b1:bc:1a:3f:bf:f7:d9:a7:21:d7:2c:e5:
d9:5b:8f:9a:8b:b4:84:b7:6a:93:9f:5e:c2:43:9d:
28:37:a7:bf:21:d0:9e:2b:51:3d:7b:88:6e:7e:2f:
0c:35:da:8a:cc:47:6f:aa:80:7f:f9:3e:01:5f:a1:
be:a6:5b:cf:88:57:d0:24:1d:e1:78:5d:11:be:43:
36:3d:e2:cd:bb:85:6e:55:f2:60:18:10:2d:2f:38:
25:c4:f0:a6:74:80:14:38:b0:3e:6e:2b:f1:22:c1:
38:05:97:5c:5e:ba:ad:fc:c3:fd:07:a0:5c:5b:b2:
d3:80:c9:25:87:42:8a:1b:48:02:df:49:71:09:03:
5d:9f:4a:38:43:9e:7c:65:ba:af:82:0e:82:42:17:
99:ec:c5:3b:c6:73:69:a9:d9:ad:91:b2:6d:94:7a:
cd:43:98:d2:b8:5e:24:c6:4a:9a:1e:66:0f:0a:8e:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:A6:49:46:BE:65:D2:43:BF:2A:EA:68:61:06:68:8D:67:E3:F7
X509v3 Authority Key Identifier:
keyid:EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/x1WmSUa-ZdJDvyrqaGEGaI1n4_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.216.0/24
Signature Algorithm: sha256WithRSAEncryption
12:32:6c:00:41:60:71:46:be:a1:fc:f6:ed:7e:38:25:bf:5f:
bf:20:ae:e3:03:2e:4a:f5:3b:43:e4:b5:5d:4c:aa:a1:74:c9:
de:41:de:46:87:6d:0f:60:f1:ff:a8:4b:03:68:44:33:84:67:
24:51:36:5a:10:e1:77:d1:83:75:4a:94:a6:db:dc:bf:03:9d:
c2:20:1c:98:7a:75:21:b3:df:f6:07:43:e0:ff:52:1e:8c:a7:
56:3e:01:13:14:9c:a0:d0:9c:73:1e:98:6f:78:8e:80:6b:57:
2e:26:10:14:63:3e:63:77:35:12:95:a7:aa:a7:95:88:3a:57:
85:41:9a:7e:c1:74:ed:c3:eb:df:2c:2d:a4:5e:62:e2:6e:12:
e9:44:36:dc:54:5a:62:b8:89:b9:7f:e1:56:7f:b8:b5:54:1c:
dd:ea:37:74:12:64:c4:6a:71:96:b2:bb:0b:60:ef:20:bf:2b:
0f:91:51:32:46:0a:c4:77:c0:dc:8f:53:74:05:53:78:dd:45:
ba:66:22:0f:5c:2c:73:2b:22:6a:bc:12:ad:b9:5e:30:de:35:
7a:b3:34:8b:7e:2a:41:e4:4e:73:d5:c0:5a:5a:3b:43:42:33:
1b:23:81:b8:c6:f6:de:5e:6d:1c:b7:53:e9:c9:b9:eb:a5:d1:
f7:0d:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:12 2024 by rpki-client on console-fra.rpki-client.org