Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/52mX13UG0WL25IcKlgGXYxHscfY.roa
File: 52mX13UG0WL25IcKlgGXYxHscfY.roa (raw, json)
Hash identifier: Ugj3tA/eO1kB0eOY8KbfPx4B89yTRc8g7ALVY94vHoA=
Subject key identifier: E7:69:97:D7:75:06:D1:62:F6:E4:87:0A:96:01:97:63:11:EC:71:F6
Certificate issuer: /CN=5d906117cad7c8114ea6485b682b92072549ca2d
Certificate serial: 9E654D
Authority key identifier: 5D:90:61:17:CA:D7:C8:11:4E:A6:48:5B:68:2B:92:07:25:49:CA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZBhF8rXyBFOpkhbaCuSByVJyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/52mX13UG0WL25IcKlgGXYxHscfY.roa
Signing time: Sat 01 Jan 2022 11:57:21 +0000
ROA not before: Sat 01 Jan 2022 11:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57866
IP address blocks: 91.246.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10380621 (0x9e654d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d906117cad7c8114ea6485b682b92072549ca2d
Validity
Not Before: Jan 1 11:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e76997d77506d162f6e4870a9601976311ec71f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:bd:f6:e9:c2:7c:7d:55:5b:c7:06:86:a4:
2a:62:55:e0:2c:72:94:9d:39:1f:d3:e1:c9:3e:dc:
fa:0c:d0:1f:27:c0:b2:7c:46:63:23:6c:7a:4c:92:
00:34:8f:49:ce:e8:db:7e:9e:26:94:87:67:d7:82:
3f:5d:f5:a5:4a:bb:66:73:2b:a4:e0:5b:49:a4:17:
2f:14:2f:82:98:2a:eb:d8:22:91:46:61:ec:70:7f:
4a:5b:e7:78:41:51:7b:98:81:fd:bd:bb:7b:96:d1:
7c:22:b4:ca:c7:de:34:97:5c:11:91:2e:41:ca:9c:
cc:79:00:f4:42:b3:78:cd:3f:b1:b6:b9:32:1b:53:
b4:22:07:bf:4a:b1:ab:e7:24:b8:db:9d:12:30:d2:
85:33:6e:15:af:63:7a:2d:42:b7:0d:4d:c6:79:d1:
9c:e5:66:20:b9:b3:b0:3b:53:99:50:14:c0:3d:cb:
1d:fd:63:bc:60:a8:4a:fa:91:30:a5:39:c6:c1:07:
92:35:15:09:3c:61:35:61:0f:e2:89:d2:9b:b8:27:
f4:29:80:07:2a:61:a7:6e:72:50:c2:a5:b5:98:b6:
cc:25:49:d7:8a:6b:5b:b4:54:42:2c:4c:4b:8b:6d:
3e:23:f0:92:c6:72:44:09:cf:f7:aa:03:23:04:92:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:69:97:D7:75:06:D1:62:F6:E4:87:0A:96:01:97:63:11:EC:71:F6
X509v3 Authority Key Identifier:
keyid:5D:90:61:17:CA:D7:C8:11:4E:A6:48:5B:68:2B:92:07:25:49:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZBhF8rXyBFOpkhbaCuSByVJyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/52mX13UG0WL25IcKlgGXYxHscfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/XZBhF8rXyBFOpkhbaCuSByVJyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:79:8b:a4:44:83:d9:27:0d:81:b1:4f:0b:0b:34:f6:7c:0c:
fe:34:02:2e:ba:0a:77:3f:d2:1a:3d:d6:d9:00:ea:79:89:79:
2f:70:82:c5:c5:d8:b4:84:bd:c0:a1:76:36:55:a0:57:d0:63:
5e:f4:76:21:e7:b9:d0:ae:8f:31:e3:97:82:9b:f7:d7:3b:8d:
22:44:fb:88:db:72:38:c9:6e:dc:35:29:84:31:2d:35:ee:42:
de:95:1b:24:a9:73:3a:5e:c0:91:85:ba:0d:c8:80:cc:5b:db:
94:85:80:90:14:20:28:c9:2c:c2:6a:c5:b0:8c:66:a6:99:46:
46:0d:c4:ca:bd:04:b8:81:3c:24:eb:7a:0d:8b:33:5f:c3:5d:
dd:c7:08:d3:9d:2c:e3:8d:0e:4c:a3:68:91:e5:fc:8a:98:58:
9d:29:a9:f2:a2:49:de:7a:c9:f0:7e:84:c9:4b:7c:46:40:fe:
89:f2:f7:70:2b:0d:bd:e9:4b:2e:fa:5f:5d:a2:fa:3c:9b:7e:
87:36:6d:8e:d9:00:cf:f6:59:2d:91:d8:c5:a7:91:c7:57:7c:
cf:28:91:b0:99:f3:60:30:9f:ff:17:de:10:70:4e:f3:c6:f6:
af:a6:62:54:27:a4:fb:87:43:27:7e:5f:0e:c9:02:5f:2e:3f:
3b:17:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:32 2024 by rpki-client on console-ams.rpki-client.org