Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/K0MsSMIr80a8836h61RuGjqH3EE.roa
File: K0MsSMIr80a8836h61RuGjqH3EE.roa (raw, json)
Hash identifier: DpgCgz75X3PD3ULirqE790YUc+CJxRtjNdKAq8UA+Mg=
Subject key identifier: 2B:43:2C:48:C2:2B:F3:46:BC:F3:7E:A1:EB:54:6E:1A:3A:87:DC:41
Certificate issuer: /CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
Certificate serial: 018964C05F497349EFB734DE51B7B6F0E656
Authority key identifier: DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/K0MsSMIr80a8836h61RuGjqH3EE.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.242.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5f:49:73:49:ef:b7:34:de:51:b7:b6:f0:e6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b432c48c22bf346bcf37ea1eb546e1a3a87dc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:cc:80:6e:b5:5f:29:c4:cf:14:fd:c3:a8:
dd:0d:61:4b:32:63:e6:1c:8b:da:95:2d:b7:90:34:
79:75:cd:eb:a5:d9:0a:0c:e6:db:ce:64:ff:75:35:
4f:97:33:fc:6c:4c:ec:33:f5:25:40:26:a5:90:8d:
d9:d2:e6:68:31:f8:d6:0a:59:f4:75:d9:51:5b:a1:
ec:a3:09:98:17:45:50:7c:b3:d8:a4:6b:1c:59:1e:
c9:f5:10:7d:8d:65:52:ea:67:41:74:6f:00:a0:fb:
15:d1:a6:7d:68:5b:3e:91:44:44:c8:92:aa:0b:52:
13:a8:50:4e:36:7f:e7:03:7a:05:f7:29:24:cb:ea:
92:92:dd:51:a9:e5:34:24:48:45:53:f6:75:9f:c4:
ce:4c:67:89:18:c6:4c:69:b8:2b:2b:36:5e:85:12:
28:41:6a:81:70:47:a4:ea:bf:40:5f:d8:5d:07:b3:
23:34:76:47:08:ee:a9:19:75:67:be:f1:4c:fc:79:
27:aa:fe:24:bb:74:e4:ce:c9:0d:c9:b3:f0:af:38:
66:4c:49:e1:41:06:6a:4a:d0:89:9f:5a:f2:93:0c:
e7:1a:1c:c9:dd:8f:9f:93:ca:3d:ca:9a:4b:bb:02:
bc:7c:ce:84:fe:d5:e8:ef:e5:b9:6a:34:7e:b0:07:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:43:2C:48:C2:2B:F3:46:BC:F3:7E:A1:EB:54:6E:1A:3A:87:DC:41
X509v3 Authority Key Identifier:
keyid:DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/K0MsSMIr80a8836h61RuGjqH3EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.237.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ea:7c:03:c0:fa:73:fa:bb:31:16:a1:da:c9:f7:e0:66:e9:
1e:60:e5:51:c5:1d:ad:e4:fd:3f:08:06:fc:7b:88:9c:4c:e2:
10:cb:e3:26:99:0a:e2:cc:35:76:7c:e5:c4:06:27:cd:29:ff:
2f:03:b2:c2:4f:e9:2d:f6:b3:c7:1a:51:89:57:c6:a5:2d:d5:
ef:24:11:c3:0d:ce:99:dd:88:97:be:8d:82:68:d7:2c:8f:23:
33:30:a2:94:26:02:d5:e0:f0:00:af:85:4e:f5:ae:f4:d0:6a:
76:f8:1a:7d:3c:68:3d:fc:de:84:bf:ea:23:eb:fb:48:56:db:
c8:8c:d6:90:b7:c4:f0:03:f6:fc:6c:a6:aa:87:ba:82:00:9e:
95:a1:2a:d4:df:33:5a:03:90:2f:e5:84:cf:20:6f:77:60:e2:
8e:cb:d3:e0:3e:2f:a2:04:eb:2e:64:0a:f3:a3:e4:f8:36:c0:
7d:25:3c:28:83:47:5c:c2:01:52:bd:e3:d1:53:8c:bf:c1:e2:
25:f9:25:60:44:b4:2a:5a:2d:80:78:ee:6c:4e:c1:db:df:b9:
be:28:bf:dd:ce:db:4f:a1:54:30:d8:7b:c5:b6:b0:4f:15:56:
1b:c4:86:b8:a6:23:52:63:2c:6a:ab:33:fd:02:70:fe:af:ad:
c8:81:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 07:43:30 2023 by rpki-client on console-fra.rpki-client.org