Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/JVVxwLgtbv3qqgTUbet96j6T-a4.roa
File: JVVxwLgtbv3qqgTUbet96j6T-a4.roa (raw, json)
Hash identifier: fzOpLKOJ12+MH8YR0XEehRDIg53NtLkqinYSWFRut0E=
Subject key identifier: 25:55:71:C0:B8:2D:6E:FD:EA:AA:04:D4:6D:EB:7D:EA:3E:93:F9:AE
Certificate issuer: /CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Certificate serial: 018268EBD92CA3E15961A3F5D4E141531321
Authority key identifier: 95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/JVVxwLgtbv3qqgTUbet96j6T-a4.roa
Signing time: Thu 04 Aug 2022 12:54:23 +0000
ROA not before: Thu 04 Aug 2022 12:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.229.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:eb:d9:2c:a3:e1:59:61:a3:f5:d4:e1:41:53:13:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Validity
Not Before: Aug 4 12:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=255571c0b82d6efdeaaa04d46deb7dea3e93f9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:d1:d3:d0:2c:d7:cc:f5:03:e6:a0:a6:75:
88:3f:47:be:2c:3e:90:a4:c7:7a:01:b0:2f:00:4b:
b6:00:7b:b3:13:6d:d2:8b:e4:d7:6d:44:b9:d4:ab:
8b:4a:63:cf:77:bc:73:6c:92:76:53:8e:e2:a7:18:
dd:2b:5b:cf:8d:15:15:9a:4e:d3:a4:02:18:6f:d7:
0f:94:27:9e:30:78:e3:8d:56:d3:39:59:f9:dd:d7:
67:44:e1:f8:2b:c0:e4:d1:ac:c1:53:23:56:76:72:
e1:ec:28:fc:e3:c7:06:26:08:6c:3a:99:24:4d:f5:
4e:e4:f1:41:ef:1f:de:96:cd:74:52:48:26:66:68:
4d:97:87:4f:33:2a:e6:68:9d:2e:65:5e:67:7a:78:
bc:7d:28:3f:50:ae:73:6e:25:95:61:13:9d:38:ef:
48:34:9b:6c:09:6a:3c:67:24:64:ee:b5:98:e4:e5:
de:20:4e:2a:7c:d3:ca:3c:c7:ed:e8:e5:12:05:cb:
49:74:70:5d:e3:d5:f5:6e:64:61:b0:8c:1e:8c:bc:
44:5d:6b:ad:b7:c8:18:5a:34:f1:ed:d2:22:79:5c:
68:68:39:f6:c9:68:04:20:29:ef:d7:c3:a5:2c:44:
cd:4b:2e:c2:b0:4d:a0:c7:62:3d:bb:fc:74:b1:15:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:71:C0:B8:2D:6E:FD:EA:AA:04:D4:6D:EB:7D:EA:3E:93:F9:AE
X509v3 Authority Key Identifier:
keyid:95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/JVVxwLgtbv3qqgTUbet96j6T-a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.38.0/23
Signature Algorithm: sha256WithRSAEncryption
87:e1:93:6c:51:c0:bb:6b:dc:eb:f5:1b:c6:cb:91:6d:ea:f2:
09:59:75:7a:8d:cd:f5:f7:f8:31:e9:6b:c8:87:ac:be:79:ab:
db:97:33:4b:d6:c7:76:0c:ec:0c:95:78:b7:ea:c6:99:4d:f0:
8c:30:95:15:4d:84:2e:b0:93:53:5b:24:46:ad:5c:a7:08:d1:
b7:ab:54:3c:3e:c0:c6:a5:14:63:59:ed:aa:51:5b:03:c9:be:
0a:52:76:71:ae:63:8e:31:0f:5d:fb:5a:34:2f:ac:93:f9:24:
7c:a8:07:ff:92:80:06:60:22:34:d3:3f:6a:d8:cf:ed:d3:d4:
84:5d:97:6d:33:d9:58:db:be:4a:2b:66:07:26:1a:3f:b1:d1:
fb:ef:39:60:0b:44:74:b8:c5:20:9b:8c:e3:5e:b9:a0:6b:9e:
42:c9:92:da:38:8e:88:de:88:80:29:eb:a4:a3:f9:e0:0c:52:
a5:c3:88:79:b1:27:c6:9a:6e:01:e2:1b:9a:f2:e0:ef:46:b5:
cd:44:e4:39:42:75:30:a5:c2:6a:b2:5c:95:c3:79:cf:08:0d:
e3:43:67:eb:c2:9c:6f:83:ac:6e:51:7e:50:a4:5c:d7:7a:72:
8f:9a:f7:5a:07:55:7d:be:87:00:03:a8:9a:9e:b3:88:59:e3:
b6:22:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:12 2024 by rpki-client on console-ams.rpki-client.org