Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/O36XgAxFu8JI5E8arOtMJ2cdKFY.roa
File: O36XgAxFu8JI5E8arOtMJ2cdKFY.roa (raw, json)
Hash identifier: LksDy4hPyfL8kiLdqRRdNW1wOy/wtoaWxEwXZq/I2nY=
Subject key identifier: 3B:7E:97:80:0C:45:BB:C2:48:E4:4F:1A:AC:EB:4C:27:67:1D:28:56
Certificate issuer: /CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Certificate serial: 018338561C6C4EAA05FE87D6160EE9B8CA9F
Authority key identifier: F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/O36XgAxFu8JI5E8arOtMJ2cdKFY.roa
Signing time: Tue 13 Sep 2022 19:31:50 +0000
ROA not before: Tue 13 Sep 2022 19:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 91.242.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:56:1c:6c:4e:aa:05:fe:87:d6:16:0e:e9:b8:ca:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Validity
Not Before: Sep 13 19:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b7e97800c45bbc248e44f1aaceb4c27671d2856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:2e:69:9d:44:90:ca:81:ab:29:86:7c:3e:
f7:1d:eb:02:91:50:eb:c5:fd:d1:c5:3d:c0:3a:de:
0d:0a:42:6b:22:14:88:52:ea:d0:83:6a:8c:87:4a:
88:b4:51:1f:e2:cf:10:9a:f9:8d:72:b6:ee:ba:44:
23:80:06:c5:b5:7b:83:73:d2:9e:17:78:0e:6d:36:
b3:ec:91:ce:d3:ae:94:ea:69:6d:95:64:0c:68:20:
e5:94:9d:d8:74:93:e3:9b:f6:f9:37:00:1a:06:26:
b1:c7:b0:8a:90:c0:14:59:15:72:75:b8:c8:fb:f2:
55:86:48:fc:96:fb:e4:31:35:ea:20:60:e2:02:51:
ec:d8:e7:7a:e2:63:15:33:ac:f8:9a:bf:c4:9c:56:
34:b1:85:ea:f0:6c:63:a3:f3:c7:41:5b:52:42:4a:
ee:a3:59:ab:2a:6f:e1:f8:5b:2e:eb:44:42:f6:03:
0c:c5:5d:5c:fd:b0:69:6b:d6:7f:c8:44:5f:3b:87:
5e:29:b0:09:cb:98:2e:21:cc:b8:47:fc:44:88:61:
37:58:67:bc:b3:db:f8:24:eb:e3:69:37:3e:35:90:
13:82:10:ad:4b:dc:bb:4b:f5:a5:7d:bf:c7:be:7d:
0a:cb:c6:62:88:0c:44:93:5f:85:05:46:c6:26:b3:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:97:80:0C:45:BB:C2:48:E4:4F:1A:AC:EB:4C:27:67:1D:28:56
X509v3 Authority Key Identifier:
keyid:F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/O36XgAxFu8JI5E8arOtMJ2cdKFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/8RdcgR7p7i4KIPwdtKuKTWB0bls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.228.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a2:6d:37:9e:41:23:b4:df:17:a3:76:2a:59:0f:61:23:c7:
3f:8a:8a:17:11:2c:e5:bb:37:9d:b4:40:9b:b0:c8:8e:90:c6:
6b:39:8b:b0:ef:a6:45:af:fe:8a:7b:62:35:d0:a1:09:45:07:
25:1d:83:aa:38:e4:6c:3b:12:fd:fc:06:e9:33:b1:75:0f:c6:
03:87:a0:20:a3:03:a2:6d:76:b5:1d:0b:09:cf:1f:96:7d:70:
1a:d1:1f:26:7d:17:75:d6:84:d9:6c:68:42:26:0f:f7:1e:5c:
80:a3:49:50:b4:3a:4c:03:a6:18:34:47:0d:84:88:90:32:95:
ac:fb:3b:39:3e:be:5a:69:5b:f8:09:48:d7:70:aa:75:d7:c5:
c0:9e:a6:41:1c:5c:bc:f5:06:32:b8:93:a0:b0:53:56:56:a5:
17:ee:85:2c:c5:6d:bb:ec:b2:bd:4e:6f:17:3a:50:97:a6:4c:
ed:e7:b5:f6:4b:18:77:13:02:b8:46:cb:cb:2a:88:58:d6:b0:
0b:77:5a:c2:ba:6d:97:9b:56:d7:f1:2e:31:81:ac:25:d4:2e:
30:15:81:e3:b7:6c:8b:60:a5:88:76:e6:93:35:59:da:3d:56:
7f:bb:21:ec:31:1b:10:b0:ea:e8:15:68:7e:af:d4:b1:68:3b:
3c:46:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:13 2024 by rpki-client on console-ams.rpki-client.org