Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/yNY4IAiC32cCx6Ph02xwlvN-irE.roa
File: yNY4IAiC32cCx6Ph02xwlvN-irE.roa (raw, json)
Hash identifier: wLOu3FKLv/mmZWXM7OkxLto9RJWe4fsxEeMARqvhbM0=
Subject key identifier: C8:D6:38:20:08:82:DF:67:02:C7:A3:E1:D3:6C:70:96:F3:7E:8A:B1
Certificate issuer: /CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Certificate serial: 9F9C74
Authority key identifier: F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/yNY4IAiC32cCx6Ph02xwlvN-irE.roa
Signing time: Sat 01 Jan 2022 01:56:58 +0000
ROA not before: Sat 01 Jan 2022 01:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 91.242.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10460276 (0x9f9c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Validity
Not Before: Jan 1 01:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8d638200882df6702c7a3e1d36c7096f37e8ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:0e:af:98:38:c9:f7:20:0f:92:54:58:10:
93:a8:ca:26:ea:b2:84:37:65:7f:c9:a5:a8:cd:d7:
10:f6:ff:d6:a1:49:67:08:09:68:f9:55:83:8c:aa:
d8:d7:e6:84:41:fc:40:71:46:1d:a0:66:c8:f9:f7:
98:e4:f0:43:ae:11:67:6b:be:5a:0d:e2:fd:c2:3a:
11:f5:90:e3:64:3b:f5:b6:be:34:20:10:c3:3c:ca:
43:e9:41:27:a3:6b:d0:77:3c:a6:12:81:db:e0:b0:
ca:13:84:e8:7d:f6:20:7a:50:f9:c5:ba:99:eb:8c:
2c:c3:c5:83:3d:0a:0e:96:a1:13:d4:24:8f:54:f5:
2c:6a:29:a7:e2:ed:ac:e5:44:e0:17:ea:52:ba:59:
02:d0:b7:66:62:73:3a:2b:c1:26:9e:f2:aa:32:74:
d1:8c:51:d0:9d:5a:55:5f:75:51:26:04:ca:bf:d9:
b1:e2:a4:87:24:d0:66:eb:4c:d9:ed:3b:61:72:04:
23:6a:91:f8:26:bc:5b:d2:8a:66:d9:ab:5d:57:4d:
e8:fb:82:1f:89:4e:b0:8d:aa:76:b1:51:2e:e5:b3:
86:10:a6:b4:a1:cf:9c:3c:1c:1f:46:fe:de:80:1b:
8f:4b:18:ae:7e:3b:0a:f6:2b:48:87:0a:e7:ed:3c:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:38:20:08:82:DF:67:02:C7:A3:E1:D3:6C:70:96:F3:7E:8A:B1
X509v3 Authority Key Identifier:
keyid:F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/yNY4IAiC32cCx6Ph02xwlvN-irE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/8RdcgR7p7i4KIPwdtKuKTWB0bls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.228.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bf:4a:56:97:3a:32:62:1d:2e:74:de:1f:47:c1:5e:04:fd:
b2:38:9c:09:50:27:15:a9:ff:98:43:ac:16:fb:f7:78:eb:95:
c4:23:50:5e:9f:e4:28:c0:a1:39:21:f0:0f:4b:86:3c:d9:c7:
7f:83:f2:e0:e6:e6:e5:57:51:17:41:bb:31:88:28:08:0b:eb:
0e:aa:16:07:86:e0:ef:be:88:b9:a3:be:8f:f9:0b:f0:b4:5f:
c7:9d:a5:6e:8c:88:ba:b7:e6:9b:25:4a:cc:c1:3d:15:4e:16:
e1:eb:02:32:f1:15:f9:ee:77:0c:7f:d6:c8:fd:7c:e2:e2:1f:
1e:d6:a6:5c:47:fb:b9:36:61:6a:38:55:8c:71:bd:b4:d7:5a:
41:04:fb:e2:04:aa:39:41:49:bf:77:d2:14:c9:ae:3b:ca:96:
98:30:de:2a:27:5f:45:34:e5:a2:3c:dd:02:9d:53:65:ce:9e:
a2:77:b7:7d:76:d3:25:fd:62:97:e8:6d:48:6f:65:40:09:a9:
39:a8:4d:45:68:b5:8a:f0:39:dd:6b:5d:db:15:09:17:35:72:
4b:6b:ac:72:34:23:c1:85:ea:4a:fe:90:f5:10:81:a1:eb:77:
d1:9c:15:1a:b7:a4:20:fe:71:0a:37:0f:3a:9d:3e:9b:99:58:
c2:c6:d5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:36 2024 by rpki-client on console-fra.rpki-client.org