Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/fsCrsLuqZlfUib0xme19JjNVnYM.roa
File: fsCrsLuqZlfUib0xme19JjNVnYM.roa (raw, json)
Hash identifier: xG1zni0dprB3zZsJzLCniK6jhBjt/6pRveH+lmj/7NA=
Subject key identifier: 7E:C0:AB:B0:BB:AA:66:57:D4:89:BD:31:99:ED:7D:26:33:55:9D:83
Certificate issuer: /CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Certificate serial: 9F21D3
Authority key identifier: F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/fsCrsLuqZlfUib0xme19JjNVnYM.roa
Signing time: Sat 01 Jan 2022 01:56:57 +0000
ROA not before: Sat 01 Jan 2022 01:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 91.242.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10428883 (0x9f21d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Validity
Not Before: Jan 1 01:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ec0abb0bbaa6657d489bd3199ed7d2633559d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:44:75:da:3a:43:61:07:be:a2:2d:0b:63:
64:c6:ee:b1:83:3e:e7:8b:30:51:95:30:1e:10:50:
97:cf:de:d8:fa:81:5d:4d:43:29:81:c8:56:84:10:
80:82:6d:58:79:21:12:a9:28:d8:d5:db:7c:c8:70:
c8:bc:c4:4b:6f:6d:38:6d:ea:8d:48:26:32:f3:0d:
da:63:82:cc:d0:1a:46:55:00:01:7d:aa:2c:42:63:
27:1d:bb:51:bb:cb:e7:63:a3:2d:39:ba:ae:82:f3:
01:68:1b:39:33:8d:66:ff:21:47:4c:ae:30:c7:fa:
f8:22:32:49:80:cd:43:87:74:f0:3b:10:a6:f9:6a:
a3:36:b9:f7:3b:5c:a5:1a:97:13:fc:85:d5:18:8d:
d1:bc:5d:53:77:b3:8a:d0:10:88:00:e2:05:69:7c:
b3:95:1f:9c:13:00:73:92:25:2a:5b:53:55:5a:05:
6c:44:f0:2e:f4:2e:00:8d:b5:08:76:dd:aa:b9:02:
56:29:57:4f:82:7f:f7:f5:4b:29:48:bf:84:5c:4b:
a8:48:f8:af:87:80:eb:27:82:5a:3e:37:d2:d7:88:
79:15:fb:c7:f6:2d:39:e6:2f:f4:bb:62:4b:21:03:
53:76:ea:bb:91:c3:1c:57:0d:37:70:f8:b1:72:59:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:AB:B0:BB:AA:66:57:D4:89:BD:31:99:ED:7D:26:33:55:9D:83
X509v3 Authority Key Identifier:
keyid:F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/fsCrsLuqZlfUib0xme19JjNVnYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/8RdcgR7p7i4KIPwdtKuKTWB0bls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.228.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0a:44:75:1b:83:60:e2:3e:05:68:0b:91:6d:e3:62:a1:15:
56:24:de:06:3d:36:da:2f:58:63:0a:67:21:09:0b:0b:a5:86:
88:b6:25:99:fd:14:3d:ed:76:55:0f:82:c0:c0:58:0f:d4:42:
f4:8e:f9:0b:59:e3:53:99:45:d5:aa:12:02:08:4a:b6:e2:81:
53:c9:1e:27:42:05:c2:74:cc:be:62:87:4a:f1:3b:ca:df:da:
b6:b7:8f:50:d9:1b:8c:7b:7c:7a:f5:46:d0:ea:f8:20:64:5e:
01:d6:5e:66:41:f2:c9:dd:6e:c9:af:78:db:60:f6:eb:3b:43:
fc:eb:14:ec:8b:32:1c:1f:b7:02:eb:06:f8:b1:eb:4a:ae:1a:
a4:f1:53:3f:e1:9a:24:58:1c:38:58:10:a7:5e:9a:ac:d3:ce:
7f:d3:8b:68:e7:5f:e1:d0:75:df:e1:87:b1:5d:62:8a:a0:9f:
19:27:50:1e:5c:5c:36:04:95:8e:8e:34:5c:75:07:19:a1:17:
67:18:39:e3:13:dc:c3:d0:ff:48:b7:5a:7d:87:af:0a:13:ff:
09:74:25:48:88:f8:29:2f:5f:68:e9:de:06:bb:28:1a:9f:eb:
30:f2:30:8f:f4:d1:6a:b0:21:71:f2:fd:27:de:31:50:eb:b6:
4c:d8:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:13 2024 by rpki-client on console-ams.rpki-client.org