Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/82ff07-98d8-4442-9d54-e69809b950dc/1/dhzj6-FE4eenYIfyl91QcYoumPM.roa
File: dhzj6-FE4eenYIfyl91QcYoumPM.roa (raw, json)
Hash identifier: dfdcfK5DaGg7xhEZTHuHJVAhMWqnWVwcq9E+zunBORM=
Subject key identifier: 76:1C:E3:EB:E1:44:E1:E7:A7:60:87:F2:97:DD:50:71:8A:2E:98:F3
Certificate issuer: /CN=fad6cc2f121fed4c53dab681b53884b3eae50959
Certificate serial: 5ABBEB
Authority key identifier: FA:D6:CC:2F:12:1F:ED:4C:53:DA:B6:81:B5:38:84:B3:EA:E5:09:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tbMLxIf7UxT2raBtTiEs-rlCVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/82ff07-98d8-4442-9d54-e69809b950dc/1/dhzj6-FE4eenYIfyl91QcYoumPM.roa
Signing time: Sat 01 Jan 2022 03:56:35 +0000
ROA not before: Sat 01 Jan 2022 03:56:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204463
IP address blocks: 91.221.77.0/24 maxlen: 24
91.221.76.0/24 maxlen: 24
91.221.86.0/24 maxlen: 24
91.221.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5946347 (0x5abbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad6cc2f121fed4c53dab681b53884b3eae50959
Validity
Not Before: Jan 1 03:56:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=761ce3ebe144e1e7a76087f297dd50718a2e98f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:d2:e3:dc:7a:f2:3a:5b:55:20:d5:4e:74:
f5:d3:51:a5:4c:e7:4a:05:c9:e5:8b:a5:f5:59:d8:
d1:78:16:86:52:20:00:1c:74:93:eb:dc:c1:51:21:
bd:fe:bc:36:77:8e:a1:ae:90:68:ab:a5:3b:11:ef:
08:c4:88:8f:64:ca:60:b6:af:da:22:75:c3:ec:8c:
34:aa:e9:36:d0:e6:68:53:48:28:32:f0:67:81:01:
6b:76:28:98:29:a8:c9:62:84:eb:41:7c:69:66:af:
18:d7:c6:f3:d7:07:2f:ef:87:41:47:42:87:92:d1:
38:cd:b9:d4:fe:52:ce:63:23:f5:d2:14:16:77:10:
82:27:fd:38:28:93:e7:f3:a2:cb:8d:64:59:da:dc:
51:14:74:a4:87:dc:e5:c3:c8:27:85:e1:94:64:3a:
50:e3:01:7f:44:66:fa:ea:a2:12:ef:e1:fd:d9:18:
d5:5d:09:d9:b2:6d:d4:bb:7b:dc:0c:42:3d:64:f3:
12:82:ce:84:c4:c8:91:fc:41:b4:9f:bc:ac:3d:d4:
0d:3a:51:5f:62:d6:4e:c8:6c:52:25:aa:05:51:a3:
f0:a1:01:62:b4:d9:e5:e4:b8:f7:49:d7:76:ba:dc:
4e:51:f4:04:d7:22:84:ad:8c:e0:cf:4c:0b:57:04:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:E3:EB:E1:44:E1:E7:A7:60:87:F2:97:DD:50:71:8A:2E:98:F3
X509v3 Authority Key Identifier:
keyid:FA:D6:CC:2F:12:1F:ED:4C:53:DA:B6:81:B5:38:84:B3:EA:E5:09:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tbMLxIf7UxT2raBtTiEs-rlCVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/82ff07-98d8-4442-9d54-e69809b950dc/1/dhzj6-FE4eenYIfyl91QcYoumPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/82ff07-98d8-4442-9d54-e69809b950dc/1/1-tbMLxIf7UxT2raBtTiEs-rlCVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.76.0/23
91.221.86.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:fe:37:8b:9e:b6:16:4c:0e:08:70:13:a7:80:eb:cf:16:34:
1d:76:69:7c:8d:0e:dc:b0:7a:cf:85:66:1f:bb:d5:2d:b2:7f:
59:62:83:1e:ca:ca:c2:b1:2b:a8:f4:e9:a6:47:51:43:61:57:
58:24:e9:a9:74:e1:49:8c:85:20:c5:5d:71:be:46:a7:2e:18:
18:64:b6:c2:45:a6:18:d6:58:43:f6:41:c9:07:3a:45:0a:37:
31:49:b8:b6:e9:90:95:51:67:ba:2d:dd:c4:5a:99:56:6b:93:
73:08:23:6e:d7:6a:78:4f:b3:fd:ec:1b:fb:65:5d:cd:09:71:
11:7a:b2:53:f3:43:00:fa:97:c1:0d:d9:7c:fa:31:cc:28:37:
e6:4b:65:30:22:4d:ca:07:6a:94:97:d5:89:3b:2f:b1:9a:7b:
b7:4c:57:05:fe:b7:a4:00:17:26:45:89:1f:14:0d:6a:ef:50:
12:c3:6d:1a:c7:f2:c7:ab:62:60:a7:3a:d5:e1:9d:16:50:b8:
3d:70:9a:7d:a5:74:52:12:cd:8e:03:01:6e:25:8c:52:59:82:
92:cb:0a:ec:2d:81:4d:21:bd:49:66:9a:9c:25:31:e4:7e:3d:
12:fb:00:02:cc:32:50:bb:d9:4c:d1:98:a4:37:78:4c:e3:e1:
09:f9:ca:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:36 2024 by rpki-client on console-fra.rpki-client.org