Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/1-ZxSHu3M1Lae1wunU9PqvYt4Oqw.roa
File: 1-ZxSHu3M1Lae1wunU9PqvYt4Oqw.roa (raw, json)
Hash identifier: bdLHpn6cypaTKmYVXl9CBXfnNdKPM79QKgmawFcHZ8g=
Subject key identifier: F9:9C:52:1E:ED:CC:D4:B6:9E:D7:0B:A7:53:D3:EA:BD:8B:78:3A:AC
Certificate issuer: /CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Certificate serial: 018277783620B6815738E736AA9899A4A46F
Authority key identifier: 95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/1-ZxSHu3M1Lae1wunU9PqvYt4Oqw.roa
Signing time: Sun 07 Aug 2022 08:42:23 +0000
ROA not before: Sun 07 Aug 2022 08:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44001
IP address blocks: 91.229.38.0/24 maxlen: 24
91.229.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:77:78:36:20:b6:81:57:38:e7:36:aa:98:99:a4:a4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Validity
Not Before: Aug 7 08:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f99c521eedccd4b69ed70ba753d3eabd8b783aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:60:89:a1:3a:d1:4a:eb:82:0d:67:47:75:
d3:85:c1:c6:0a:89:52:c1:46:ef:20:cd:45:f7:f7:
c4:11:73:b8:19:c1:11:04:4e:12:64:77:b9:ed:88:
54:9c:62:75:77:75:78:a9:31:55:51:73:4d:9f:d2:
46:82:dc:89:92:1c:0d:78:30:c6:8c:d8:ee:c2:77:
7e:aa:3c:77:82:0c:d5:25:f0:3b:30:a9:f0:fc:46:
10:a5:d1:fd:09:09:7b:e1:22:ce:aa:b5:dd:0e:84:
ad:b5:29:f0:43:b7:f2:9d:20:38:2e:1b:20:7d:03:
18:dc:26:15:8d:fd:15:84:b8:15:8e:eb:e5:c5:1f:
ad:b5:6f:e3:75:e0:a5:21:85:a2:eb:28:45:a4:c2:
2d:09:b0:ab:1d:69:09:71:44:4e:30:8c:8a:01:80:
7c:42:78:4f:c2:a2:b5:de:e2:36:24:27:0f:72:4e:
d4:ab:77:97:77:ef:45:d6:64:1f:b8:56:af:77:1a:
0f:51:f6:47:04:52:68:18:6c:fb:41:56:47:84:ef:
0d:59:96:03:a5:73:bb:e1:18:45:b2:50:55:dd:08:
c2:9c:c2:61:d9:92:e8:72:ab:fc:05:d3:15:ee:b7:
08:91:a5:b0:50:92:18:ba:e8:26:e4:2f:4d:21:c6:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:52:1E:ED:CC:D4:B6:9E:D7:0B:A7:53:D3:EA:BD:8B:78:3A:AC
X509v3 Authority Key Identifier:
keyid:95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/1-ZxSHu3M1Lae1wunU9PqvYt4Oqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.36.0-91.229.38.255
Signature Algorithm: sha256WithRSAEncryption
27:33:22:b5:dd:21:c6:a9:1b:dd:d0:ac:89:c6:f5:cd:f2:58:
72:94:54:dd:f1:c7:a9:e5:cc:fa:f3:56:28:e1:fb:94:14:75:
3f:65:78:13:c6:fb:4e:7e:fe:0d:93:c3:b4:95:07:b5:f3:85:
3c:27:3a:29:3a:da:ba:9a:e8:17:cc:8d:36:fe:96:f8:4f:5e:
13:74:20:cc:68:9b:46:c8:9a:3e:52:3f:37:d2:5b:62:c9:2a:
26:44:6a:cb:4f:33:e3:31:06:38:ce:a0:87:a5:5b:4e:d1:ff:
42:fb:de:92:03:9f:e5:e4:93:d2:1c:45:cc:3c:88:8f:1e:12:
13:90:06:9c:e5:0a:17:04:77:cf:a6:af:b3:1d:ce:37:42:c9:
5d:cd:d1:1f:53:ca:9e:df:38:10:42:db:e2:41:ff:37:a6:3c:
ea:85:6c:d2:2d:05:6d:ab:9f:83:a4:82:5b:7a:00:a2:78:28:
76:28:f8:d6:63:6b:27:21:40:6c:cb:e2:d2:6e:7f:58:ea:67:
71:84:a0:18:40:bf:43:08:fe:4b:94:95:6e:e3:6b:0f:c5:b1:
43:d0:cd:27:fe:0f:bc:3f:3d:89:2e:90:0f:76:c7:98:5e:ef:
71:86:cd:44:7c:bf:6c:7e:e3:ea:fb:97:9f:af:b2:26:08:f9:
84:50:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org