Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/92a0b9-f6d0-4a74-894b-d8ec738d9549/1/sThlANR_AX65zUbkkWYKErXfASo.roa
File: sThlANR_AX65zUbkkWYKErXfASo.roa (raw, json)
Hash identifier: 1GOcr59VeSXgV3BaYDi2yS5wtQdnLA65iH4hEvAbjl8=
Subject key identifier: B1:38:65:00:D4:7F:01:7E:B9:CD:46:E4:91:66:0A:12:B5:DF:01:2A
Certificate issuer: /CN=1e95d98e620be955f1f967908e61addd83fd05cd
Certificate serial: 0185710C022C85B3FC4BAB388260A44C0DEF
Authority key identifier: 1E:95:D9:8E:62:0B:E9:55:F1:F9:67:90:8E:61:AD:DD:83:FD:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpXZjmIL6VXx-WeQjmGt3YP9Bc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/92a0b9-f6d0-4a74-894b-d8ec738d9549/1/sThlANR_AX65zUbkkWYKErXfASo.roa
Signing time: Mon 02 Jan 2023 05:54:50 +0000
ROA not before: Mon 02 Jan 2023 05:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.246.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:02:2c:85:b3:fc:4b:ab:38:82:60:a4:4c:0d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95d98e620be955f1f967908e61addd83fd05cd
Validity
Not Before: Jan 2 05:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1386500d47f017eb9cd46e491660a12b5df012a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a5:f4:99:2c:d6:13:93:e4:0f:62:f5:ce:85:
46:6a:b1:a6:6c:98:7b:13:06:fe:cb:84:f5:3b:70:
97:c4:7a:65:87:5d:27:98:e6:a5:32:50:d9:20:f4:
39:42:cd:18:12:c3:21:3d:ff:61:5a:7f:70:ac:63:
e5:35:ce:21:88:45:06:22:f9:86:b0:73:58:be:bb:
1b:31:59:0f:2c:c9:ff:1c:bb:f6:cf:ad:d4:f7:ac:
f9:3a:48:68:84:90:91:17:55:3c:02:06:3f:a4:a2:
49:4f:4e:bb:c5:18:d3:d1:af:07:fe:36:81:c8:42:
08:79:98:19:b7:63:fa:d4:ea:3e:82:76:ec:8f:ff:
b6:5b:12:35:c7:4b:3e:3f:05:1c:1b:f0:88:3a:ae:
25:5b:b6:80:24:a6:b9:2c:55:4a:4f:ce:07:3c:4e:
92:be:4b:10:42:06:03:cb:3a:c6:b0:cf:28:90:f2:
9a:95:2d:c6:e7:e5:fe:ae:cf:a9:d5:e3:3f:ed:a0:
0e:e5:80:ba:b1:a8:8a:88:bf:f6:13:24:32:54:ec:
4a:6e:ab:23:76:43:24:1d:38:ad:5a:c6:8a:52:17:
1f:4a:df:db:39:bf:46:47:dd:9d:2d:4b:4b:74:6a:
90:87:85:66:ee:b6:40:18:2c:fd:7a:47:e5:ec:ba:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:38:65:00:D4:7F:01:7E:B9:CD:46:E4:91:66:0A:12:B5:DF:01:2A
X509v3 Authority Key Identifier:
keyid:1E:95:D9:8E:62:0B:E9:55:F1:F9:67:90:8E:61:AD:DD:83:FD:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpXZjmIL6VXx-WeQjmGt3YP9Bc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/92a0b9-f6d0-4a74-894b-d8ec738d9549/1/sThlANR_AX65zUbkkWYKErXfASo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/92a0b9-f6d0-4a74-894b-d8ec738d9549/1/HpXZjmIL6VXx-WeQjmGt3YP9Bc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1a:38:38:2c:13:46:49:f1:e7:1b:4d:72:f5:db:92:8c:30:
a2:40:da:71:07:bc:9d:4e:ae:a7:e9:ed:7b:15:ea:30:c5:e2:
aa:88:70:a6:49:8c:11:eb:26:e8:fa:e3:bb:73:42:16:2b:1c:
dd:8a:fb:4e:3a:3e:2f:50:f0:86:b0:2a:37:92:3e:f6:cb:ca:
6e:a6:b7:21:cd:e3:84:c0:7f:02:8e:02:94:e9:0f:f0:7d:4d:
6f:6a:22:2b:d3:30:5b:b8:ba:6b:ee:c2:be:6d:75:5c:d4:1f:
25:95:f4:56:83:2f:6c:9c:3c:9c:a6:6e:e1:d1:d0:8f:6d:e0:
b5:60:43:5a:1e:7b:93:19:18:2e:79:e1:41:ad:15:f2:d4:52:
cf:33:dd:9a:e4:c3:ef:23:1d:2b:f4:a7:11:95:5c:8c:af:03:
94:03:5c:98:da:08:ba:92:a7:8b:0a:6f:2d:b3:f3:fb:00:f9:
21:10:4a:26:fa:60:c4:aa:97:ae:81:cf:cc:58:5b:24:01:12:
80:04:5f:d4:4e:75:4e:06:87:6a:c0:96:86:48:f4:37:e1:77:
12:e4:06:13:07:5a:2f:af:43:e5:dc:10:fc:5c:e1:ad:b3:a0:
02:a0:ac:8a:58:18:ac:d9:90:92:56:40:7c:b5:b7:c3:bc:88:
d5:f2:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:40 2024 by rpki-client on console-ams.rpki-client.org