Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/b8zzZdywkHuu1oXMzkRdKQv5WwQ.roa
File: b8zzZdywkHuu1oXMzkRdKQv5WwQ.roa (raw, json)
Hash identifier: Zkbvv7E8SIwxQ6PvZ9f0TP6EHcRWL5owUYJBFAOKEKQ=
Subject key identifier: 6F:CC:F3:65:DC:B0:90:7B:AE:D6:85:CC:CE:44:5D:29:0B:F9:5B:04
Certificate issuer: /CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Certificate serial: 018326FD40FFAFAC8A7B6FA98A1AF348917A
Authority key identifier: 95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/b8zzZdywkHuu1oXMzkRdKQv5WwQ.roa
Signing time: Sat 10 Sep 2022 10:41:14 +0000
ROA not before: Sat 10 Sep 2022 10:41:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44001
IP address blocks: 91.229.38.0/24 maxlen: 24
91.229.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:fd:40:ff:af:ac:8a:7b:6f:a9:8a:1a:f3:48:91:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Validity
Not Before: Sep 10 10:41:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fccf365dcb0907baed685ccce445d290bf95b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:9e:1a:b4:f3:8b:5b:c8:b2:28:dd:f0:01:
c1:38:33:2b:0f:6e:d1:c4:dc:49:cc:12:e0:f2:08:
f6:56:34:88:bb:bf:39:33:16:80:a7:c4:eb:83:17:
7c:94:3a:f3:0f:f4:7c:39:ea:f4:8a:d9:84:09:fc:
3a:81:09:81:cf:3e:32:82:d2:6f:43:ac:a9:fd:04:
7b:99:dd:82:0c:85:67:5a:f0:a9:e7:87:c0:74:7d:
8c:26:90:fb:27:61:e2:36:b3:ea:d5:6d:c0:f4:5d:
fb:17:31:04:e4:b0:68:04:b4:46:cd:aa:37:1e:d6:
aa:dd:6d:34:71:11:a7:7e:a9:35:f5:2f:3c:48:5a:
9d:ff:82:ef:ae:15:2c:ca:3f:ff:bb:86:c1:30:79:
0f:a3:f9:7b:93:97:eb:47:7d:54:c8:a9:e9:ee:38:
95:0b:4a:df:21:46:f9:f5:c9:61:c9:7b:27:bc:35:
0d:6b:0e:8e:4d:17:22:67:a9:4e:2d:60:69:8e:e5:
20:f5:68:c0:ff:4a:f1:6a:f4:23:0c:27:56:b9:98:
f5:7a:9f:96:a4:42:9b:22:f3:32:e8:54:58:01:42:
04:a2:06:76:88:37:04:6a:80:23:41:07:14:0d:07:
df:b3:83:f4:ca:a8:5e:56:fc:32:14:da:6e:56:be:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:F3:65:DC:B0:90:7B:AE:D6:85:CC:CE:44:5D:29:0B:F9:5B:04
X509v3 Authority Key Identifier:
keyid:95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/b8zzZdywkHuu1oXMzkRdKQv5WwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.36.0/24
91.229.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0c:53:f3:f0:c3:24:70:c9:d6:a0:75:58:64:1c:b0:a7:d0:
1b:f4:f0:58:92:82:0e:fe:3f:3b:a8:dc:d5:3b:5a:89:62:dc:
d4:c5:17:86:30:44:f3:3c:e9:88:97:e5:06:f7:6b:e4:94:fc:
f7:62:8a:11:f7:19:3d:10:f4:27:70:b5:47:96:eb:80:52:8e:
4c:47:51:1f:f9:03:41:2b:03:ee:90:1a:79:e0:34:bb:a0:9d:
2a:55:68:11:43:98:74:96:c5:99:64:d5:c8:91:2e:68:42:a0:
16:70:7e:e3:56:bb:df:1d:14:23:8d:af:38:53:79:b2:ff:8b:
6d:5f:62:11:b4:f6:0f:e2:1a:f6:47:00:63:42:9d:74:47:62:
4f:62:11:ad:bb:91:f9:b1:fc:ad:a5:7a:dc:bb:39:ea:d6:b5:
6c:f9:3b:e6:6e:f4:b6:9c:77:a8:80:eb:3d:11:cc:a7:e9:ec:
3a:18:20:f9:6f:f0:7a:11:ca:c5:00:a2:fa:41:61:91:f2:1c:
73:3a:3d:28:58:bc:78:47:e5:2b:f8:ad:d4:f4:d1:90:4e:83:
77:aa:16:86:2a:11:3c:b4:36:58:a0:20:dd:eb:f9:79:03:73:
2a:22:6a:92:85:de:dc:1c:4c:83:f5:54:ad:b2:41:e9:fc:95:
23:3c:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org