Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/PDutEaojZAAdT3RAB-v09RGSDEw.roa
File: PDutEaojZAAdT3RAB-v09RGSDEw.roa (raw, json)
Hash identifier: sFStH1pVV+nMb9JmpUJeS+s00hUaTvT2Ot8moEeBY8M=
Subject key identifier: 3C:3B:AD:11:AA:23:64:00:1D:4F:74:40:07:EB:F4:F5:11:92:0C:4C
Certificate issuer: /CN=a5f621eeb2bfde993fb6c0e78aced1ec06fb56c2
Certificate serial: 01856F0B4670336A4AE48422CFF6261D202D
Authority key identifier: A5:F6:21:EE:B2:BF:DE:99:3F:B6:C0:E7:8A:CE:D1:EC:06:FB:56:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfYh7rK_3pk_tsDnis7R7Ab7VsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/PDutEaojZAAdT3RAB-v09RGSDEw.roa
Signing time: Sun 01 Jan 2023 20:34:47 +0000
ROA not before: Sun 01 Jan 2023 20:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 91.231.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:46:70:33:6a:4a:e4:84:22:cf:f6:26:1d:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f621eeb2bfde993fb6c0e78aced1ec06fb56c2
Validity
Not Before: Jan 1 20:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3bad11aa2364001d4f744007ebf4f511920c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:ba:7b:f6:e1:52:81:2c:4d:83:99:a8:ef:
bf:40:95:9b:79:93:1e:2c:f9:8d:b5:81:94:dd:be:
1b:3b:b0:53:e8:65:b8:7f:9b:6d:e6:71:ff:02:6e:
a7:66:08:ce:08:6b:29:a1:8e:10:16:0e:3a:07:3e:
85:6d:8c:64:c4:c1:37:80:dc:e1:8f:07:2e:36:3d:
48:82:f5:01:ef:f3:bc:f1:25:74:79:de:9d:6f:29:
5e:3a:90:c3:39:d3:7e:63:ea:f2:7a:71:29:d3:a1:
0d:6e:74:03:53:c4:5a:92:cd:bf:1d:0c:76:47:f4:
eb:be:04:c3:83:bc:0e:56:43:73:19:14:53:b4:56:
f0:b3:eb:10:b3:5d:13:76:43:5d:6e:32:4b:1e:cb:
f1:2e:b9:2e:eb:8a:34:16:3c:2c:dd:de:5b:97:d2:
0e:04:d0:44:81:3f:50:19:0d:f1:e6:1f:98:28:93:
15:ae:c4:6c:4d:ce:e7:3d:b7:80:95:da:78:7e:57:
40:7c:ae:79:eb:49:1c:cb:c3:b0:30:62:0a:b9:d6:
86:19:84:96:5d:66:73:cb:48:e2:d2:d2:91:0d:10:
47:89:b7:7d:8e:a7:b4:69:02:e1:c8:32:38:46:4b:
90:ee:a1:20:ad:f9:b7:2f:9b:b0:75:43:2c:f5:61:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:AD:11:AA:23:64:00:1D:4F:74:40:07:EB:F4:F5:11:92:0C:4C
X509v3 Authority Key Identifier:
keyid:A5:F6:21:EE:B2:BF:DE:99:3F:B6:C0:E7:8A:CE:D1:EC:06:FB:56:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfYh7rK_3pk_tsDnis7R7Ab7VsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/PDutEaojZAAdT3RAB-v09RGSDEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/pfYh7rK_3pk_tsDnis7R7Ab7VsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.180.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b6:62:2c:b9:ad:31:de:09:4b:63:77:c1:f0:fc:f4:55:58:
60:e3:fd:7c:74:30:3c:90:d7:ec:bf:29:4d:f8:00:26:7a:20:
b4:dc:df:bf:84:be:d1:09:82:2e:49:c4:84:e9:6b:17:b0:68:
84:11:53:97:3d:0b:19:2b:0a:d5:db:81:b1:0b:3c:6a:c7:0b:
6f:e6:7c:72:c0:12:19:c1:84:51:0f:d3:63:11:e6:98:19:dc:
8b:43:3f:38:e7:61:76:14:3c:c5:a2:43:ff:65:05:02:00:95:
7d:06:83:60:30:b5:97:81:3f:ae:91:2e:47:45:87:69:7f:51:
65:5d:87:fc:a8:e3:82:00:26:fe:72:2d:0c:a0:28:63:78:44:
65:e4:11:7c:c7:d8:11:3e:ba:0c:e3:ab:4c:a4:07:1a:0b:74:
a5:f6:c8:0d:18:9d:27:ac:c4:4d:63:6f:c1:2e:2f:b9:b0:f9:
47:45:6f:ac:18:b1:22:eb:5c:82:64:03:b5:01:88:9a:78:ba:
d3:c8:c7:ea:03:73:fe:ac:af:da:92:16:12:1d:51:f8:5e:ac:
ea:9e:9c:a5:6d:7e:d2:10:57:fd:67:11:74:a7:f4:20:30:f4:
50:01:6a:1b:ee:df:58:ab:2b:31:99:b9:1d:6a:e7:85:91:c7:
46:e8:99:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:25 2024 by rpki-client on console-ams.rpki-client.org