Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/Nquyx9wQy-_VFEjQWeq9wE1_OGM.roa
File: Nquyx9wQy-_VFEjQWeq9wE1_OGM.roa (raw, json)
Hash identifier: yDcHYyFO7DLchgUvgvpPf3D7jrFKg8u8pzPJ8i3g09Y=
Subject key identifier: 36:AB:B2:C7:DC:10:CB:EF:D5:14:48:D0:59:EA:BD:C0:4D:7F:38:63
Certificate issuer: /CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Certificate serial: 0185403E989CF663B62D0F5CE6C40F2EDD18
Authority key identifier: F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/Nquyx9wQy-_VFEjQWeq9wE1_OGM.roa
Signing time: Fri 23 Dec 2022 18:28:42 +0000
ROA not before: Fri 23 Dec 2022 18:28:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 91.242.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:3e:98:9c:f6:63:b6:2d:0f:5c:e6:c4:0f:2e:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Validity
Not Before: Dec 23 18:28:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36abb2c7dc10cbefd51448d059eabdc04d7f3863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8e:be:48:ed:23:98:08:3c:2d:f1:f9:1c:0b:
91:a5:29:4d:21:ff:ec:27:86:13:26:39:09:d8:c8:
e2:91:b8:bf:4a:37:c0:93:e7:69:08:62:e7:ea:91:
99:0e:b0:86:16:85:bd:9d:2c:70:30:22:5f:fe:ec:
d0:5e:20:4b:0a:af:bc:d7:07:c4:80:ca:9a:5f:76:
0c:86:c0:1b:e0:b8:ed:61:00:1b:66:16:f0:4e:10:
89:ed:66:88:d9:b4:56:17:35:4a:d9:e5:23:91:04:
ae:9e:80:0e:c1:dd:e1:47:74:2c:3b:46:74:80:da:
6a:3d:35:6f:ec:a4:3a:ee:51:69:3f:82:25:26:7e:
63:ce:4d:2e:b4:2b:4d:29:e1:f0:73:2c:d3:98:bd:
5b:ee:9d:8f:79:9b:25:31:df:0e:eb:14:d2:70:7a:
35:78:60:b6:99:93:f5:aa:f5:26:04:6b:cf:e4:16:
db:94:f4:54:ab:e7:aa:c3:d5:6d:5c:56:52:d1:2a:
41:97:b6:58:80:27:98:00:87:d4:cc:17:8a:1b:9a:
6c:ec:83:53:0b:52:44:d5:50:d9:ff:92:1a:ae:e8:
4c:f2:19:57:62:e5:71:79:8d:e0:89:c8:50:d4:72:
d0:b1:90:0c:3e:0b:c4:c3:2a:13:9f:1f:00:88:9d:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:B2:C7:DC:10:CB:EF:D5:14:48:D0:59:EA:BD:C0:4D:7F:38:63
X509v3 Authority Key Identifier:
keyid:F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/Nquyx9wQy-_VFEjQWeq9wE1_OGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/8RdcgR7p7i4KIPwdtKuKTWB0bls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.228.0/24
Signature Algorithm: sha256WithRSAEncryption
43:40:e2:b2:7c:45:6e:1b:13:95:85:a6:e1:a7:83:e3:54:45:
5f:3d:89:08:87:d3:90:89:a5:69:3a:9a:84:a7:b9:c6:2b:b0:
c9:a0:10:8d:b8:0f:5f:b8:c1:17:73:46:30:c4:ac:40:88:d1:
4a:5c:9f:fa:bc:ae:53:b1:18:88:8e:8a:00:4d:c9:ad:5b:ed:
ea:d8:9e:dc:9b:1a:bf:07:b1:3d:e4:c8:42:85:91:57:b2:4d:
29:60:77:88:09:c2:f5:3c:8c:78:1b:8e:5a:93:0d:fd:c6:41:
5c:15:1f:a1:c8:bd:d9:2c:66:a4:19:d0:00:86:af:28:e7:d8:
d7:95:3e:0c:c2:60:74:09:c6:9d:d7:ed:60:36:e2:d8:39:de:
2c:76:3c:36:3b:42:1f:76:38:8a:50:84:46:10:53:5f:18:34:
d7:77:ca:f4:62:fb:98:3f:bf:ca:72:f0:6f:14:71:4a:26:0e:
93:d0:54:d4:ed:24:25:ec:59:59:84:2f:15:bd:4c:d5:a6:1c:
7c:56:9d:55:61:4e:4a:8a:dc:f5:91:bf:ed:32:6c:76:bd:7d:
82:88:a2:52:7b:96:ab:96:e1:01:d7:d5:35:77:d7:a0:0a:bf:
59:f8:b9:9e:fa:32:0b:89:0d:cb:08:3c:f2:ed:78:f1:56:24:
ad:eb:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:36 2024 by rpki-client on console-fra.rpki-client.org