Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a9e9a8-eabe-4cb0-b7ca-839dd1e5dd1a/1/ioyMLNSY1hbmuZiFtFzAzQBt_8Q.roa
File: ioyMLNSY1hbmuZiFtFzAzQBt_8Q.roa (raw, json)
Hash identifier: BfkncbkJu8tEPRrSk4oAJPPSXYDgUdSzhSeo9XNj+tQ=
Subject key identifier: 8A:8C:8C:2C:D4:98:D6:16:E6:B9:98:85:B4:5C:C0:CD:00:6D:FF:C4
Certificate issuer: /CN=a750097953aa14e77350776b62fc37be3f38f402
Certificate serial: 018621025705B81C34D37CB19D595BF2B6EE
Authority key identifier: A7:50:09:79:53:AA:14:E7:73:50:77:6B:62:FC:37:BE:3F:38:F4:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AJeVOqFOdzUHdrYvw3vj849AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a9e9a8-eabe-4cb0-b7ca-839dd1e5dd1a/1/ioyMLNSY1hbmuZiFtFzAzQBt_8Q.roa
Signing time: Sun 05 Feb 2023 09:57:26 +0000
ROA not before: Sun 05 Feb 2023 09:57:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49778
IP address blocks: 91.219.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:02:57:05:b8:1c:34:d3:7c:b1:9d:59:5b:f2:b6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750097953aa14e77350776b62fc37be3f38f402
Validity
Not Before: Feb 5 09:57:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a8c8c2cd498d616e6b99885b45cc0cd006dffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:30:33:1d:0b:9a:f8:5e:75:7b:75:57:97:
7a:6d:3b:73:c6:ae:54:a5:6d:47:b5:07:77:4d:8f:
eb:89:8b:37:88:2b:c0:c7:7f:75:72:83:02:d7:2e:
5b:22:14:87:28:b5:c5:73:c2:ea:d0:57:a4:7f:f2:
73:38:ad:a5:65:74:7c:15:2f:32:31:ab:f1:fe:3b:
b4:e8:61:8e:a2:df:3a:16:ef:7b:d3:4e:d1:cd:29:
ad:15:07:79:5e:0b:d8:41:15:9f:52:06:73:a7:94:
56:0c:17:69:f1:fb:ff:5b:2b:36:f9:1d:99:85:73:
96:a6:48:7c:f8:7c:cd:9f:d8:b2:fc:55:87:4f:bf:
6c:04:ec:7e:52:37:ad:e5:d7:4c:a9:bd:37:11:4e:
fc:ce:c4:f7:d6:0d:d4:f7:24:f5:b6:a2:57:87:3c:
cd:e0:78:3a:36:ed:67:6e:dc:d3:b7:5e:17:48:a1:
16:45:f5:e8:c0:6d:ed:4a:84:4f:d3:db:9b:4a:21:
c3:32:1e:65:0e:71:1d:15:59:9b:5a:15:de:e5:44:
96:aa:45:66:cf:32:7c:ae:99:d2:25:22:a2:bf:e4:
0e:96:84:4f:c6:f1:83:93:07:7c:c2:2a:b5:14:15:
b3:7c:f5:4d:d9:c0:b2:f0:2a:f2:11:14:37:22:63:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8C:8C:2C:D4:98:D6:16:E6:B9:98:85:B4:5C:C0:CD:00:6D:FF:C4
X509v3 Authority Key Identifier:
keyid:A7:50:09:79:53:AA:14:E7:73:50:77:6B:62:FC:37:BE:3F:38:F4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AJeVOqFOdzUHdrYvw3vj849AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a9e9a8-eabe-4cb0-b7ca-839dd1e5dd1a/1/ioyMLNSY1hbmuZiFtFzAzQBt_8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a9e9a8-eabe-4cb0-b7ca-839dd1e5dd1a/1/p1AJeVOqFOdzUHdrYvw3vj849AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.23.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:30:cd:b0:ac:ed:72:3f:5e:27:64:6a:4b:cd:81:4d:95:74:
69:ce:7a:21:6a:a0:7c:24:a3:ed:37:12:0a:4b:50:ef:d7:3e:
5a:22:bc:c7:13:cc:44:e8:40:b2:be:48:8a:61:6d:bb:21:b4:
fb:da:f9:ca:53:5f:4d:aa:e9:f7:75:18:6a:ae:59:7b:8c:e7:
5e:90:68:bb:d8:05:47:81:81:61:1d:40:9c:9d:5a:13:e6:a0:
87:50:63:cd:b3:fb:61:e5:28:4c:13:f1:bf:59:d4:1a:75:3e:
24:74:2c:d8:d0:be:09:0b:65:64:39:ab:cf:3c:a9:71:b4:5c:
d8:3b:93:ca:6f:45:ad:a5:90:ec:e2:dc:8e:75:42:42:1f:42:
34:9e:48:00:6c:c2:76:24:50:18:8c:73:c5:e1:35:30:0f:a9:
71:66:08:b2:0c:c8:8a:7f:c5:21:f9:af:0d:58:d6:b7:f9:aa:
e8:35:6b:9f:0e:d0:64:0c:b1:a4:06:63:99:69:a0:ff:03:4a:
d2:5e:2e:fe:d7:d1:fb:88:ce:25:bb:ec:3c:65:c6:c4:0f:50:
f8:41:0e:43:f9:15:2d:a1:0b:f2:63:ea:57:77:65:04:71:eb:
5d:d9:7f:b0:51:ce:ad:35:28:4d:d7:7a:89:41:1d:ae:ab:97:
02:a0:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org