Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/vTUCGdmxNNgfpf8Gc0FWfoZbQtc.roa
File: vTUCGdmxNNgfpf8Gc0FWfoZbQtc.roa (raw, json)
Hash identifier: 0X5iugUCcIzDyQ2auSjBkbhChIu2V9cz22eXWCXS60g=
Subject key identifier: BD:35:02:19:D9:B1:34:D8:1F:A5:FF:06:73:41:56:7E:86:5B:42:D7
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27EBA564
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/vTUCGdmxNNgfpf8Gc0FWfoZbQtc.roa
Signing time: Sat 01 Jan 2022 13:00:24 +0000
ROA not before: Sat 01 Jan 2022 13:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41334
IP address blocks: 91.88.0.0/16 maxlen: 16
2a00:d780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669754724 (0x27eba564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd350219d9b134d81fa5ff067341567e865b42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:06:9d:dd:99:2e:92:d6:d3:f1:fa:7b:ff:
12:3b:85:7c:f7:73:af:db:63:c8:41:ae:68:1b:8f:
cd:72:51:be:ec:a1:de:90:16:c4:ad:f3:aa:0f:43:
f6:41:84:3f:8d:09:d9:8e:5e:60:8e:39:a4:fa:34:
0e:9c:29:7e:b1:3b:5e:98:5f:f8:83:a8:1e:26:ba:
06:d3:b0:48:ad:68:2b:4c:60:61:d0:11:d1:e4:d5:
68:da:a5:90:33:d9:2d:03:e6:05:e3:62:a7:6c:db:
d0:ed:37:00:8a:6b:18:af:46:4a:73:3b:57:79:cd:
83:1f:6c:e5:0c:fd:b2:c6:13:6c:40:a0:f3:61:dc:
bf:83:7d:f6:bb:3b:db:70:e3:05:9c:51:fc:bc:b1:
a3:24:bd:61:64:2d:67:02:93:eb:f0:77:df:54:bc:
e1:3c:4e:c7:71:4a:50:83:d0:5e:35:77:50:9f:f3:
ea:b8:5d:09:ba:66:d2:65:ad:cc:29:ee:2d:d0:cf:
a4:1a:85:e9:a9:dd:99:64:02:0f:63:9e:d3:b6:8e:
5e:02:72:e3:26:d2:f4:b8:2f:44:ec:12:4a:54:a0:
62:c0:2d:d8:30:df:27:85:cd:85:35:85:e8:2a:c4:
18:16:a5:55:08:50:62:3e:ee:33:dc:c1:1f:aa:b0:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:02:19:D9:B1:34:D8:1F:A5:FF:06:73:41:56:7E:86:5B:42:D7
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/vTUCGdmxNNgfpf8Gc0FWfoZbQtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.88.0.0/16
IPv6:
2a00:d780::/32
Signature Algorithm: sha256WithRSAEncryption
15:59:78:96:00:c7:2a:d8:37:cd:ad:fc:c7:cc:1d:f1:d1:d1:
25:da:b4:d2:6f:1f:c8:d5:08:46:1c:57:cd:b2:b8:b0:a3:1a:
d2:64:0e:a5:96:e9:ca:43:c0:af:7c:17:c0:55:27:bb:0c:7b:
94:37:9d:fd:b3:45:9d:b3:ed:64:47:98:e9:ae:65:8a:f1:06:
bb:64:ef:67:a4:08:34:04:e1:4b:c8:8b:67:23:06:60:a6:c5:
73:cd:ed:6b:15:fd:a8:a8:60:a2:16:af:5d:26:ed:f3:f4:d4:
9b:b7:8a:95:9e:a8:a2:2c:ab:99:e1:65:6c:a7:b8:e6:64:79:
a7:c1:f1:90:59:43:37:30:4e:26:bf:10:a9:82:b5:eb:6b:88:
37:71:54:e7:17:97:b2:af:06:d0:4d:df:28:b7:e1:2a:ae:c4:
a8:f2:2d:94:ee:10:d5:e6:50:84:0e:73:aa:11:f3:bf:36:dd:
ef:71:cb:5c:21:78:e2:e9:1b:e6:1b:e6:01:40:a1:7c:0b:5d:
b0:3b:60:2d:d9:9d:73:9f:12:2f:4d:e2:e6:59:a1:69:1c:71:
96:51:5e:ea:b4:be:4f:50:df:32:c3:bd:ce:1e:15:ab:5f:01:
a6:ef:4f:51:84:18:e9:5b:e7:26:de:13:b4:a5:86:7d:a8:6b:
50:53:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:33 2024 by rpki-client on console-fra.rpki-client.org