Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/ZoIQAqoNffBdcbBsiYExLv3XFoo.roa
File: ZoIQAqoNffBdcbBsiYExLv3XFoo.roa (raw, json)
Hash identifier: IWowM9/paxcQe1Vuqt4bIil1tW8OX17ucIBeL7hgb08=
Subject key identifier: 66:82:10:02:AA:0D:7D:F0:5D:71:B0:6C:89:81:31:2E:FD:D7:16:8A
Certificate issuer: /CN=5d906117cad7c8114ea6485b682b92072549ca2d
Certificate serial: 01856EC21F63A09C1836D6CF3391D12B1EAD
Authority key identifier: 5D:90:61:17:CA:D7:C8:11:4E:A6:48:5B:68:2B:92:07:25:49:CA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZBhF8rXyBFOpkhbaCuSByVJyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/ZoIQAqoNffBdcbBsiYExLv3XFoo.roa
Signing time: Sun 01 Jan 2023 19:14:53 +0000
ROA not before: Sun 01 Jan 2023 19:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57866
IP address blocks: 91.246.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:1f:63:a0:9c:18:36:d6:cf:33:91:d1:2b:1e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d906117cad7c8114ea6485b682b92072549ca2d
Validity
Not Before: Jan 1 19:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66821002aa0d7df05d71b06c8981312efdd7168a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:35:2b:77:0a:20:c4:ff:f1:26:a8:3e:03:
3e:8f:d3:30:80:02:5d:f6:fc:78:36:e3:66:35:15:
31:32:be:0b:2e:07:6e:f2:9c:30:89:48:6b:a8:ea:
38:39:69:0a:9b:b4:fb:a8:b8:51:09:27:57:f2:24:
84:09:41:cf:a0:17:c9:7c:96:fc:7e:50:bc:84:66:
54:83:4d:16:af:3c:c8:21:43:ff:3c:2d:63:e1:85:
b4:e0:1b:5e:11:23:87:a6:81:75:26:27:2e:2c:64:
86:06:15:77:81:fd:77:d7:6d:b8:78:05:41:46:5d:
0a:cc:f6:1f:d4:1d:ef:b5:cd:0d:56:7a:9c:aa:5e:
30:83:6a:47:ff:f4:85:7e:62:0c:e8:c0:02:6c:33:
2a:e5:3a:ad:ca:e6:b6:80:91:ed:1b:c4:86:26:43:
29:67:60:f9:db:a1:63:e8:95:4b:b4:55:2b:33:a5:
a5:c7:5a:82:02:36:0e:3d:87:0f:ed:b5:9e:80:6a:
ec:19:91:ec:38:e5:d2:31:e9:5b:bd:55:c7:bb:ee:
61:1c:14:4a:a2:4b:0e:9a:46:7e:31:8b:c6:9e:ad:
78:68:c7:ed:ad:ca:ea:0c:df:c9:aa:c1:9e:95:54:
dd:58:4b:d8:33:cd:e9:78:a1:e3:02:91:24:a6:0e:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:10:02:AA:0D:7D:F0:5D:71:B0:6C:89:81:31:2E:FD:D7:16:8A
X509v3 Authority Key Identifier:
keyid:5D:90:61:17:CA:D7:C8:11:4E:A6:48:5B:68:2B:92:07:25:49:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZBhF8rXyBFOpkhbaCuSByVJyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/ZoIQAqoNffBdcbBsiYExLv3XFoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/XZBhF8rXyBFOpkhbaCuSByVJyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.40.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b0:dd:9c:b7:09:74:cc:26:4b:06:b1:ff:38:06:e1:98:35:
20:cb:73:77:27:4c:f5:24:92:00:01:06:4d:69:d9:bd:5a:ec:
d4:d2:2a:e8:87:a7:ed:28:cd:12:46:7b:fa:1b:6f:c1:04:86:
3b:70:6a:a9:b5:28:30:c9:5b:77:2d:49:5e:00:7e:83:8f:04:
be:2e:33:00:f6:72:b9:81:3c:d4:8e:95:54:4e:ba:a3:7c:1c:
25:4d:8a:39:5e:f7:db:bf:7d:b9:8a:3c:5f:13:83:b0:ae:fc:
02:c6:13:0a:4b:ee:78:ba:93:5b:8c:56:53:ee:7c:28:b2:55:
9a:de:0d:a4:7c:f5:89:fe:97:f8:8c:37:06:f5:de:86:a5:a6:
1f:4f:0c:ed:b8:f0:92:65:a5:d0:47:23:fe:f7:37:cf:46:25:
de:5a:d5:94:22:73:ff:b4:df:15:03:00:21:18:3f:25:dc:f0:
63:a9:2c:e1:59:df:7b:7d:0f:3b:5d:53:6d:d2:87:c7:a8:57:
5b:69:a0:25:fc:fc:4e:2f:6e:43:55:a8:87:05:de:e7:49:ef:
e9:ac:f5:ab:bb:c0:97:ff:41:02:fb:20:b4:61:b0:68:63:ac:
66:99:41:f3:83:52:b1:a4:13:c2:36:9c:c0:10:63:29:bf:88:
1f:f3:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:01 2024 by rpki-client on console-fra.rpki-client.org