Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c61698-91a0-4c32-abb2-091c57346ce3/1/sOk1lVjSjNAMIdpn2RpozoMgKos.roa
File: sOk1lVjSjNAMIdpn2RpozoMgKos.roa (raw, json)
Hash identifier: ZbEiToaY9cmNgJcz5YS7mVqMLOLDVCUG6YkxKjBkW7E=
Subject key identifier: B0:E9:35:95:58:D2:8C:D0:0C:21:DA:67:D9:1A:68:CE:83:20:2A:8B
Certificate issuer: /CN=cc16f57d7534b8d125db8805b3389bffb58516b7
Certificate serial: 01839DB6864B2642089810B46D9D4E38B3BF
Authority key identifier: CC:16:F5:7D:75:34:B8:D1:25:DB:88:05:B3:38:9B:FF:B5:85:16:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBb1fXU0uNEl24gFszib_7WFFrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c61698-91a0-4c32-abb2-091c57346ce3/1/sOk1lVjSjNAMIdpn2RpozoMgKos.roa
Signing time: Mon 03 Oct 2022 11:58:48 +0000
ROA not before: Mon 03 Oct 2022 11:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203056
IP address blocks: 91.146.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:b6:86:4b:26:42:08:98:10:b4:6d:9d:4e:38:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc16f57d7534b8d125db8805b3389bffb58516b7
Validity
Not Before: Oct 3 11:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0e9359558d28cd00c21da67d91a68ce83202a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:44:0d:d5:75:c0:4d:1d:70:a3:0a:b8:31:
bd:46:da:af:ac:81:fa:96:f9:75:b9:e5:ef:1e:aa:
ed:a0:8e:56:d0:8a:d4:33:35:f8:d2:50:4f:8c:72:
33:0c:6a:21:4f:3f:01:8e:4f:83:f4:4b:06:f7:7c:
89:81:82:1d:3c:5e:00:f7:c9:1d:7c:f5:8c:fc:cd:
7a:59:46:6a:d3:8a:99:ab:2d:85:b1:9a:3b:9e:be:
e4:82:2b:da:a9:f9:ef:c6:62:11:d4:a4:d3:72:74:
60:58:65:d5:3f:49:c1:48:9b:c4:34:2c:79:27:ef:
f2:d6:f1:29:4a:28:bf:8a:e8:e9:14:80:77:32:36:
55:df:ba:32:a4:c4:4b:35:11:57:ad:d5:1b:71:70:
d9:f7:2e:d1:5a:a9:fd:98:80:de:10:7e:1a:cf:6d:
ab:cc:58:49:32:ae:b6:c8:e6:37:da:30:8d:7a:59:
6d:96:3a:67:35:ad:bd:b6:2e:dd:8d:d4:fb:ea:53:
47:60:e1:74:22:82:00:22:cc:c0:68:9e:5b:2b:d3:
45:71:15:df:a5:ed:2c:ca:0c:e9:f0:23:a2:4d:09:
99:2e:3b:cc:ae:e3:c9:de:c2:dc:f1:1f:4b:e3:19:
4f:5a:a2:ea:a3:5f:bb:9a:9f:27:71:9c:ad:08:e2:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:35:95:58:D2:8C:D0:0C:21:DA:67:D9:1A:68:CE:83:20:2A:8B
X509v3 Authority Key Identifier:
keyid:CC:16:F5:7D:75:34:B8:D1:25:DB:88:05:B3:38:9B:FF:B5:85:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBb1fXU0uNEl24gFszib_7WFFrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c61698-91a0-4c32-abb2-091c57346ce3/1/sOk1lVjSjNAMIdpn2RpozoMgKos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c61698-91a0-4c32-abb2-091c57346ce3/1/zBb1fXU0uNEl24gFszib_7WFFrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1a:00:14:ab:be:a6:74:2e:a9:01:74:3d:40:8d:da:f9:a4:
fa:81:bc:22:ff:c0:f9:af:15:cc:7d:83:da:5b:d0:24:39:89:
13:ea:64:97:8e:ee:31:9b:e4:9a:aa:81:da:82:49:8c:87:cb:
bc:28:a3:62:f8:25:7f:ee:a9:24:f1:bf:73:af:7e:06:ca:5a:
2b:ec:74:54:6e:90:ec:06:81:96:3a:d0:b2:c6:7a:62:45:c8:
c1:a4:45:e2:ec:03:ac:51:36:67:62:13:10:6f:c6:f1:20:aa:
6b:00:19:e4:03:c4:ff:ea:00:0c:71:c6:a1:88:5d:11:3b:7c:
94:1c:ce:2e:84:38:c3:3e:43:7e:e1:41:03:02:43:2c:d0:1c:
95:98:e2:bf:a2:74:5e:96:6c:f5:5e:d4:60:d5:79:3d:24:72:
d9:17:5e:5c:d5:c3:1f:a7:a8:62:bb:e4:20:74:7a:e4:88:cb:
1d:f7:f3:af:c1:6d:1e:c9:36:b1:df:0c:64:05:77:b6:04:2e:
6d:12:9e:88:0e:0a:28:df:65:1d:a3:a8:36:12:a4:1a:cf:29:
33:ac:3d:47:64:b1:5d:40:d2:53:fe:b0:8e:b5:8a:44:45:7e:
88:bb:df:17:2a:fc:73:ad:32:8a:7c:1f:97:c3:c0:f9:87:86:
bc:75:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org