Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/worz0j4xuOqzQi9apPDD04RJmqQ.roa
File: worz0j4xuOqzQi9apPDD04RJmqQ.roa (raw, json)
Hash identifier: P900qI3cAyM8D3lBwu4sSM7x1AiNc7Kas0CuDJaN7EQ=
Subject key identifier: C2:8A:F3:D2:3E:31:B8:EA:B3:42:2F:5A:A4:F0:C3:D3:84:49:9A:A4
Certificate issuer: /CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Certificate serial: 01826AE6227A36735CD66C961A4F3EB93C9C
Authority key identifier: 95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/worz0j4xuOqzQi9apPDD04RJmqQ.roa
Signing time: Thu 04 Aug 2022 22:07:23 +0000
ROA not before: Thu 04 Aug 2022 22:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.229.38.0/24 maxlen: 24
91.229.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6a:e6:22:7a:36:73:5c:d6:6c:96:1a:4f:3e:b9:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Validity
Not Before: Aug 4 22:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c28af3d23e31b8eab3422f5aa4f0c3d384499aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:49:54:37:3c:ac:2b:ee:cb:67:b2:51:6c:
e9:a1:fb:89:75:9c:39:0f:d9:e7:69:e8:11:c8:8d:
cd:de:be:c8:e9:de:c4:13:ed:2f:2b:77:57:97:92:
3e:ac:c4:e5:e0:61:66:39:e2:b3:66:5d:a0:fb:46:
71:dc:74:e9:04:5a:d4:ba:a9:ab:6f:61:ae:03:8d:
1a:18:85:fb:46:8f:ad:ef:b8:4a:57:34:5f:62:1a:
43:90:b8:38:d7:27:0a:29:6a:26:c6:2d:58:a7:e2:
9c:ef:0f:9a:7b:c0:a0:d9:74:b5:2f:7e:50:65:ce:
cd:18:3c:d1:23:6c:e7:bc:66:21:7b:f0:01:e8:e9:
e3:d9:6a:47:91:ee:d2:4d:e2:bf:55:ca:94:d8:eb:
6c:9d:23:2a:09:4b:8c:68:43:83:e5:a8:1a:10:1d:
a4:5c:44:f1:fb:50:99:49:8f:fc:9b:fc:a7:45:40:
2c:3a:3b:32:79:3a:64:98:83:0c:8c:2c:9b:b9:30:
6d:9c:fe:18:da:78:e0:33:f0:c9:a1:6e:da:d9:86:
8c:4d:6a:98:f4:13:94:6b:67:95:85:c1:9f:1a:b6:
ef:e6:f2:58:ea:5e:6c:92:d9:41:aa:f5:68:a1:48:
5c:05:b8:8f:97:3b:09:7e:66:8a:5e:56:94:a7:72:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8A:F3:D2:3E:31:B8:EA:B3:42:2F:5A:A4:F0:C3:D3:84:49:9A:A4
X509v3 Authority Key Identifier:
keyid:95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/worz0j4xuOqzQi9apPDD04RJmqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.38.0/23
Signature Algorithm: sha256WithRSAEncryption
40:49:19:8f:36:6c:8a:ba:b7:54:a1:54:3c:c8:21:b0:16:c3:
10:8a:9a:53:4d:35:7e:a3:73:6a:43:59:0e:53:f7:2c:2a:a8:
ae:92:89:c4:0d:b4:79:cd:ed:6f:ff:9d:96:66:29:47:4d:64:
7d:a4:9e:de:64:b4:74:04:2f:e5:82:4e:32:d9:08:ee:d9:35:
bc:5e:92:2f:c6:24:20:d4:74:98:b6:54:37:32:50:23:ec:66:
9b:48:90:dc:de:83:85:b3:06:3f:5a:d1:e5:40:6c:fb:05:aa:
ee:5b:51:b1:02:3a:2b:49:b5:5e:26:c5:ac:fc:e2:2c:bf:7f:
81:fe:e5:12:90:e9:e6:8a:64:a4:09:02:69:b4:16:2d:2e:ff:
4f:16:20:d2:fd:a1:fc:d2:19:ec:3d:b8:09:49:a4:5b:04:f1:
fb:12:9e:24:e2:c1:83:7f:9b:d7:2e:cd:24:45:9a:80:92:14:
79:a1:a5:e6:8c:39:ca:9c:c0:2b:21:3a:3f:31:42:dd:21:06:
4a:67:5a:5b:55:2e:5f:e4:ef:d6:21:ac:3e:12:ea:9d:64:9f:
64:ba:6d:85:16:36:4b:f5:10:a9:0b:ab:4b:2e:44:2f:89:0c:
4e:6e:1f:16:5a:45:ec:91:fc:d3:79:0f:8d:a9:61:a1:eb:f5:
bf:30:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org