Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/92a0b9-f6d0-4a74-894b-d8ec738d9549/1/LCnESN4ErvjGUjxd8J1qDAdSYIk.roa
File: LCnESN4ErvjGUjxd8J1qDAdSYIk.roa (raw, json)
Hash identifier: YwuEFDI+Vx4BBOp+P0olDM+OHUCu7T3zPczJxy3JqKc=
Subject key identifier: 2C:29:C4:48:DE:04:AE:F8:C6:52:3C:5D:F0:9D:6A:0C:07:52:60:89
Certificate issuer: /CN=1e95d98e620be955f1f967908e61addd83fd05cd
Certificate serial: 01882086748DC36F07902073B10E997592D8
Authority key identifier: 1E:95:D9:8E:62:0B:E9:55:F1:F9:67:90:8E:61:AD:DD:83:FD:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpXZjmIL6VXx-WeQjmGt3YP9Bc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/92a0b9-f6d0-4a74-894b-d8ec738d9549/1/LCnESN4ErvjGUjxd8J1qDAdSYIk.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 91.246.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:74:8d:c3:6f:07:90:20:73:b1:0e:99:75:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95d98e620be955f1f967908e61addd83fd05cd
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c29c448de04aef8c6523c5df09d6a0c07526089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:34:53:fa:65:62:34:82:1f:ce:69:df:8e:
5b:e5:56:be:60:7b:14:11:96:45:53:bb:50:03:d5:
d6:82:05:9d:b1:67:d7:14:5b:ca:3f:4b:c3:b3:35:
a2:0f:35:dc:8a:bc:b5:27:88:bc:8f:72:32:77:44:
92:9b:dd:da:2a:b7:e5:fa:59:ed:be:0b:a6:c9:9c:
9c:c7:76:a6:98:5e:ca:cc:fe:3f:02:b9:91:58:d6:
08:ad:bd:f9:11:17:8d:62:00:91:86:d5:bc:88:d5:
06:35:a7:77:42:19:e1:5d:a3:b1:be:67:c7:32:a4:
f7:6c:0a:f4:35:51:35:39:a8:1b:52:6e:02:db:66:
16:3c:2f:4c:78:49:5b:27:6c:91:62:7c:08:87:1e:
95:c4:d4:9b:b8:b3:e8:ca:3b:40:c0:3e:8f:e6:d7:
2a:5c:df:82:92:de:f3:63:3e:20:49:70:8f:e0:e1:
5e:71:e2:a6:af:71:87:ac:99:db:b4:cf:91:20:06:
25:38:93:15:a9:de:10:a3:4c:a7:63:d4:d9:d9:42:
af:85:32:db:c4:7f:58:b8:e8:93:16:53:e8:bb:fc:
8c:22:1d:3e:d4:26:67:c6:94:7c:cd:cb:ca:3f:7e:
2b:b7:b3:3d:98:82:88:4f:f9:90:e9:3f:4c:df:ae:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:C4:48:DE:04:AE:F8:C6:52:3C:5D:F0:9D:6A:0C:07:52:60:89
X509v3 Authority Key Identifier:
keyid:1E:95:D9:8E:62:0B:E9:55:F1:F9:67:90:8E:61:AD:DD:83:FD:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpXZjmIL6VXx-WeQjmGt3YP9Bc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/92a0b9-f6d0-4a74-894b-d8ec738d9549/1/LCnESN4ErvjGUjxd8J1qDAdSYIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/92a0b9-f6d0-4a74-894b-d8ec738d9549/1/HpXZjmIL6VXx-WeQjmGt3YP9Bc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
48:16:7f:7c:93:f9:d0:29:9b:50:34:e1:8f:d8:3c:7c:50:1d:
10:44:a7:de:f0:3e:86:0f:e9:42:04:41:2e:8a:45:90:5c:6a:
5b:04:c7:6f:42:51:8e:00:e0:a2:47:eb:0b:63:e3:9a:f1:94:
1e:6a:7f:04:ff:45:17:fa:b4:6f:82:13:c4:fb:52:b6:68:d5:
9c:8f:69:f6:1c:68:48:ff:f0:1d:43:fc:05:a8:ce:aa:3f:5e:
20:21:a1:5b:c1:d0:ae:0c:c4:6f:c3:60:f8:59:2e:de:9d:5c:
51:59:e5:19:2f:94:63:75:ae:38:51:8f:f4:f2:66:7f:93:5d:
68:fc:bf:af:0f:7a:b6:34:f1:4f:d5:f6:45:08:fb:5e:23:da:
0d:d8:4c:44:f1:6e:0b:c3:37:75:e8:5e:83:65:4f:03:4e:72:
28:6c:12:c5:16:c8:23:6e:c1:67:75:54:e3:eb:d3:09:b6:93:
ee:02:e8:d9:e7:1f:ae:0b:f8:99:4d:62:57:5b:6f:0b:ac:6c:
01:fa:e2:09:52:9c:d8:18:25:d0:2c:9a:15:7b:94:00:bf:48:
aa:99:55:c9:fd:83:32:d1:37:62:c0:f6:0e:9c:61:21:10:2c:
f8:48:9c:8c:8b:ce:91:94:12:08:ee:be:ff:fb:6c:d3:58:29:
57:3a:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:40 2024 by rpki-client on console-ams.rpki-client.org