Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/1-RX4HyonA7Ivqy-KVjjrE98c560.roa
File: 1-RX4HyonA7Ivqy-KVjjrE98c560.roa (raw, json)
Hash identifier: RAP7+npvczsYhscC6ThJ2t0AbK2ED+CxGmurVZot3WQ=
Subject key identifier: F9:15:F8:1F:2A:27:03:B2:2F:AB:2F:8A:56:38:EB:13:DF:1C:E7:AD
Certificate issuer: /CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Certificate serial: 01856F5DD94926F043FAB49FAF092A63253F
Authority key identifier: 95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/1-RX4HyonA7Ivqy-KVjjrE98c560.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44001
IP address blocks: 91.229.38.0/24 maxlen: 24
91.229.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d9:49:26:f0:43:fa:b4:9f:af:09:2a:63:25:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f915f81f2a2703b22fab2f8a5638eb13df1ce7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:45:3f:92:dc:b7:b9:2d:04:2b:bb:00:99:
2d:b1:13:67:d5:5a:2b:52:fe:e1:2f:82:b1:02:67:
73:3c:6c:9d:48:2d:30:fc:8a:05:20:ba:74:cd:65:
f8:fd:94:53:9b:f5:8e:17:00:90:6a:47:ae:af:ff:
b4:84:1a:4a:01:82:c5:6a:3c:c2:7a:48:5d:b3:03:
86:71:39:02:e2:d3:7b:ea:aa:96:a1:b6:d7:ac:71:
e1:45:39:16:f2:ae:d0:00:4b:ee:b2:98:a9:16:b9:
6d:43:24:41:db:4a:dd:cb:29:17:ee:d6:c9:e2:b7:
2d:18:04:ba:94:b9:f3:ed:9e:60:30:18:5c:49:fb:
fa:6c:a8:cd:01:ae:ce:09:82:b0:a0:cf:73:c7:de:
2e:a1:a6:ae:d2:2d:3c:9b:9f:ba:25:91:54:83:7d:
55:ba:df:98:60:c2:c3:51:b4:11:ef:12:1d:97:da:
f4:62:9c:61:b3:89:b7:ce:b8:43:c3:d8:f6:99:a1:
56:19:77:0d:53:ca:21:8a:2c:98:d2:a5:34:eb:5d:
55:ff:03:93:26:86:fc:c7:df:0c:11:0b:69:6a:e0:
e8:6e:49:83:71:94:a6:41:77:05:67:06:83:9c:a4:
19:14:db:ee:4f:64:8b:b4:3a:22:d7:42:39:38:1f:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:F8:1F:2A:27:03:B2:2F:AB:2F:8A:56:38:EB:13:DF:1C:E7:AD
X509v3 Authority Key Identifier:
keyid:95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/1-RX4HyonA7Ivqy-KVjjrE98c560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.36.0/24
91.229.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:60:d5:67:ea:ab:c0:fa:2e:3f:32:dc:f0:54:90:56:59:19:
86:a9:67:92:8d:82:2f:00:a6:68:83:d0:9d:1d:09:53:34:39:
a2:17:69:2c:48:42:f8:cc:a5:73:2f:8e:a7:4c:90:57:06:31:
94:91:78:b0:6f:5f:22:21:25:d9:db:31:62:6f:e3:e5:d5:16:
18:c8:97:08:16:a3:47:13:4e:73:ce:56:f0:89:81:79:09:f0:
65:c1:13:06:68:77:fb:67:95:c1:d6:be:b0:7c:28:b4:5c:55:
e1:39:3d:51:98:8a:0e:de:69:ec:af:cf:48:35:fe:64:1f:24:
56:ca:83:7c:8f:d3:2b:db:50:e3:aa:2f:83:54:08:23:be:ef:
dc:d8:e3:c4:43:56:b4:b0:5a:48:9f:03:81:fa:22:c1:8d:b4:
a3:b3:48:43:0f:93:21:59:54:06:19:39:ab:82:ce:d7:29:aa:
a2:c6:b4:8a:34:b2:da:f1:48:20:e3:05:14:b2:dd:3c:e5:17:
5b:32:5d:9a:77:04:f2:ae:5b:a6:75:ef:ad:15:4f:8b:f8:eb:
58:ff:97:ca:dd:5d:ee:c4:9f:5b:26:16:59:dc:ab:a1:77:dc:
96:04:a2:82:f2:d4:10:fb:9c:7c:0d:94:14:d8:fd:21:2a:0d:
c3:24:a7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:12 2024 by rpki-client on console-ams.rpki-client.org