Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/daIT0Q8tOIZ_GDMJlPRg1IUb17o.roa
File: daIT0Q8tOIZ_GDMJlPRg1IUb17o.roa (raw, json)
Hash identifier: t9t40f0xh0wDxtoPPx07WXzgFXMsRtPopw6bZweAp2o=
Subject key identifier: 75:A2:13:D1:0F:2D:38:86:7F:18:33:09:94:F4:60:D4:85:1B:D7:BA
Certificate issuer: /CN=93c7dc5f72745dc11891ab06ee4bb6ea04dbf44d
Certificate serial: 018B011DFC3CF252B49FB38E13890E921748
Authority key identifier: 93:C7:DC:5F:72:74:5D:C1:18:91:AB:06:EE:4B:B6:EA:04:DB:F4:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8fcX3J0XcEYkasG7ku26gTb9E0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/daIT0Q8tOIZ_GDMJlPRg1IUb17o.roa
Signing time: Thu 05 Oct 2023 18:33:44 +0000
ROA not before: Thu 05 Oct 2023 18:33:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 91.247.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:1d:fc:3c:f2:52:b4:9f:b3:8e:13:89:0e:92:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c7dc5f72745dc11891ab06ee4bb6ea04dbf44d
Validity
Not Before: Oct 5 18:33:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75a213d10f2d38867f18330994f460d4851bd7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:84:ae:c6:4f:32:2e:a3:62:0d:e8:9e:47:
b6:0e:c6:4c:8c:9c:b7:cc:2e:37:06:5e:de:ce:e3:
69:a1:c6:17:8a:87:b3:70:59:a4:da:4d:0f:1c:33:
83:11:f4:96:99:90:f1:66:20:31:0c:48:25:c2:0f:
57:5a:41:20:16:df:bf:71:ee:fd:8b:4d:e1:32:0c:
41:c3:65:8b:ce:95:03:14:69:53:2b:f9:b8:9d:50:
e9:b4:c3:52:f9:d3:ec:e8:0f:96:00:66:51:05:c9:
27:11:b9:14:46:ab:f1:96:c3:6e:71:fc:55:cc:75:
0f:72:d6:31:3b:5e:a0:74:d3:7a:e9:f1:6f:74:27:
6b:a2:24:ab:fe:3c:b2:ab:6c:e7:65:4b:fc:71:e0:
21:c4:73:fe:5f:d2:6e:f6:0a:07:82:c8:12:d5:66:
a7:a8:15:c8:6a:1d:33:bd:46:a6:45:02:9f:d3:d6:
d0:d9:7f:42:6a:d2:06:e2:10:d0:ff:fe:76:40:8c:
c2:28:86:b8:4e:07:a7:ca:01:1b:4b:cc:d9:2f:07:
1d:01:b4:91:b1:15:26:b2:8b:44:b1:47:e8:e2:ee:
71:ac:e2:e7:95:e6:6e:58:19:1c:41:d3:a4:bb:1d:
d8:f0:b0:28:9f:8b:ae:f7:32:82:90:b1:a6:c4:93:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A2:13:D1:0F:2D:38:86:7F:18:33:09:94:F4:60:D4:85:1B:D7:BA
X509v3 Authority Key Identifier:
keyid:93:C7:DC:5F:72:74:5D:C1:18:91:AB:06:EE:4B:B6:EA:04:DB:F4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8fcX3J0XcEYkasG7ku26gTb9E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/daIT0Q8tOIZ_GDMJlPRg1IUb17o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/k8fcX3J0XcEYkasG7ku26gTb9E0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:76:1d:44:5a:19:04:76:00:8d:db:7f:81:29:7a:24:44:7e:
10:11:87:80:81:73:33:71:ab:2c:60:57:2a:e0:80:66:23:af:
ea:52:e0:ae:0a:c3:21:7c:19:47:8b:6a:23:dd:47:33:5f:5c:
f4:c1:2a:83:d2:bf:ff:ca:05:52:3e:93:59:27:62:aa:33:26:
d5:ce:48:ae:57:e7:28:b6:30:ea:6b:27:8e:1c:2c:15:4b:47:
d2:b9:8e:09:96:73:dc:ff:13:33:0c:07:92:10:8b:72:15:2e:
d5:8b:ae:e8:8d:ed:de:eb:a9:69:f7:58:64:f1:1a:95:b4:f4:
91:d7:5b:7d:22:dc:3f:bf:48:1d:c2:a2:e8:77:2a:aa:f3:e2:
b7:bc:0f:08:96:a9:2c:b2:3e:ca:b4:1a:03:48:dc:ad:72:b7:
9c:1e:57:11:93:52:65:43:f3:e5:a5:ce:81:a3:56:43:dd:3c:
44:2a:e8:af:a2:db:dc:0e:9d:6a:41:9e:4a:c9:e2:cf:9c:a8:
a7:45:01:1f:a8:b0:a0:ab:0d:08:bd:74:70:d6:19:6b:82:51:
49:5f:a5:72:29:10:e6:e6:7b:35:35:61:c1:b6:5e:f9:eb:a6:
20:40:14:c9:36:8a:c4:99:9f:14:3b:9a:8d:65:87:82:6a:eb:
09:da:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 10:34:44 2023 by rpki-client on console-ams.rpki-client.org