Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/mYR1pe0nhTrUuscwPv1efG6KRFI.roa
File: mYR1pe0nhTrUuscwPv1efG6KRFI.roa (raw, json)
Hash identifier: Wg9SYOSj96XT7SztucBteVoSgOpbEb+kPK3WiHCWRHM=
Subject key identifier: 99:84:75:A5:ED:27:85:3A:D4:BA:C7:30:3E:FD:5E:7C:6E:8A:44:52
Certificate issuer: /CN=705ee67d4a12d53c44e701cbd896a48575eb2503
Certificate serial: 018CC56E049301F4C8F900299C77D6EA6C69
Authority key identifier: 70:5E:E6:7D:4A:12:D5:3C:44:E7:01:CB:D8:96:A4:85:75:EB:25:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/mYR1pe0nhTrUuscwPv1efG6KRFI.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 91.240.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:04:93:01:f4:c8:f9:00:29:9c:77:d6:ea:6c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705ee67d4a12d53c44e701cbd896a48575eb2503
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=998475a5ed27853ad4bac7303efd5e7c6e8a4452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:6d:ec:e2:32:c6:92:ed:24:6c:e4:85:a0:
76:92:e3:74:51:82:ec:05:8a:c8:c4:4f:9b:c6:e2:
55:31:2b:5e:e0:df:31:aa:5c:98:4b:3d:a5:9a:68:
14:93:65:e8:94:1f:70:e4:4d:10:33:ac:b6:30:b0:
bb:4e:a1:51:69:90:97:d1:4d:f6:4c:44:b3:c4:cd:
c3:ec:49:0a:35:a1:48:6c:50:46:f1:9e:da:88:e7:
58:e0:3a:60:fc:59:4a:9b:ea:3e:85:54:2b:c4:c7:
b3:06:ba:a9:c3:1a:96:6c:e7:ff:19:28:e4:77:54:
dc:d8:51:33:f8:d7:5f:f7:31:94:44:b9:de:ec:26:
d7:d6:84:29:73:df:75:a0:34:de:0b:c4:b4:c9:0c:
36:e1:15:c6:1e:c7:f4:9b:71:b1:b3:d1:39:8e:15:
70:bf:a4:0f:e2:5c:32:32:86:d1:4e:4a:cc:83:e9:
22:23:e3:dc:cc:d6:49:cb:22:46:0f:31:0e:7c:32:
09:15:f9:b5:c8:f3:f2:d1:d7:22:cc:2b:06:37:c4:
6a:11:61:b2:cf:f3:6d:f7:2e:9c:eb:3d:24:25:fd:
cb:88:8e:24:25:ba:46:d6:9e:80:e5:0d:0f:dc:ef:
d1:3d:1c:f5:59:f5:82:89:de:6c:a7:71:b7:d7:1a:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:84:75:A5:ED:27:85:3A:D4:BA:C7:30:3E:FD:5E:7C:6E:8A:44:52
X509v3 Authority Key Identifier:
keyid:70:5E:E6:7D:4A:12:D5:3C:44:E7:01:CB:D8:96:A4:85:75:EB:25:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/mYR1pe0nhTrUuscwPv1efG6KRFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d1:ec:6c:20:eb:33:68:11:90:17:c0:d6:b4:9a:68:1f:9c:
0f:9c:d2:c3:ae:e3:47:c2:64:24:18:c0:1d:b9:61:ac:a0:2e:
ab:48:1d:40:ab:8d:83:28:75:f6:90:7a:94:0c:db:a9:d9:f3:
50:ed:4e:28:00:fb:45:f0:ae:db:ec:94:65:47:ac:2c:46:35:
12:a7:9b:c8:d8:93:db:d5:26:53:5c:5a:93:0a:99:87:08:49:
60:91:1b:c5:1b:51:a0:42:a7:e8:14:8f:b2:41:ce:6a:00:cb:
17:e6:f4:9d:9d:a1:9e:7b:42:f8:57:1e:70:35:de:68:7b:ba:
d3:0c:94:d6:f9:61:0e:e0:75:4f:73:ec:60:bf:0e:46:33:14:
63:fa:d1:f7:2b:ce:d6:9a:49:c6:a1:89:75:a2:ce:44:6a:ae:
5a:08:6c:4f:11:fd:7a:a3:85:f7:bd:a0:27:b0:e9:1e:82:8a:
ad:7a:d9:e4:7f:65:2a:69:ea:29:aa:7a:a0:c1:ae:e8:34:7e:
6b:f2:21:80:02:73:0f:66:d1:62:f3:ef:c0:cb:69:29:1e:d5:
98:b3:2a:a1:c9:c0:5a:a4:fc:e7:82:09:bf:89:2f:f2:2d:0d:
c4:33:7b:a8:dc:c9:10:0f:b1:3d:87:4c:a5:a3:e2:bd:f6:13:
67:ab:62:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbgSTAfTI+QApnHfW6mxpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWVlNjdkNGExMmQ1M2M0NGU3MDFjYmQ4OTZhNDg1NzVl
YjI1MDMwHhcNMjQwMTAxMTQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTg0NzVhNWVkMjc4NTNhZDRiYWM3MzAzZWZkNWU3YzZlOGE0NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxht7OIyxpLtJGzkhaB2kuN0UYLs
BYrIxE+bxuJVMSte4N8xqlyYSz2lmmgUk2XolB9w5E0QM6y2MLC7TqFRaZCX0U32
TESzxM3D7EkKNaFIbFBG8Z7aiOdY4Dpg/FlKm+o+hVQrxMezBrqpwxqWbOf/GSjk
d1Tc2FEz+Ndf9zGURLne7CbX1oQpc991oDTeC8S0yQw24RXGHsf0m3Gxs9E5jhVw
v6QP4lwyMobRTkrMg+kiI+PczNZJyyJGDzEOfDIJFfm1yPPy0dcizCsGN8RqEWGy
z/Nt9y6c6z0kJf3LiI4kJbpG1p6A5Q0P3O/RPRz1WfWCid5sp3G31xo9xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmEdaXtJ4U61LrHMD79XnxuikRSMB8GA1UdIwQY
MBaAFHBe5n1KEtU8ROcBy9iWpIV16yUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Y3bWZVb1MxVHhFNXdITDJKYWtoWFhySlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kNjc1MjItNmUyMS00MzdiLWJkMjQt
Njg5YTRkOTc2Zjk1LzEvbVlSMXBlMG5oVHJVdXNjd1B2MWVmRzZLUkZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kNjc1MjItNmUyMS00MzdiLWJkMjQtNjg5YTRkOTc2Zjk1
LzEvY0Y3bWZVb1MxVHhFNXdITDJKYWtoWFhySlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/D+MA0G
CSqGSIb3DQEBCwUAA4IBAQBP0exsIOszaBGQF8DWtJpoH5wPnNLDruNHwmQkGMAd
uWGsoC6rSB1Aq42DKHX2kHqUDNup2fNQ7U4oAPtF8K7b7JRlR6wsRjUSp5vI2JPb
1SZTXFqTCpmHCElgkRvFG1GgQqfoFI+yQc5qAMsX5vSdnaGee0L4Vx5wNd5oe7rT
DJTW+WEO4HVPc+xgvw5GMxRj+tH3K87WmknGoYl1os5Eaq5aCGxPEf16o4X3vaAn
sOkegoqtetnkf2Uqaeopqnqgwa7oNH5r8iGAAnMPZtFi8+/Ay2kpHtWYsyqhycBa
pPznggm/iS/yLQ3EM3uo3MkQD7E9h0ylo+K99hNnq2IW
-----END CERTIFICATE-----
Generated at Mon Jun 24 15:20:47 2024 by rpki-client on console-fra.rpki-client.org