Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/682496-1d5e-402b-b6ed-8a946e9884ab/1/n89WROw4TK3d2Tf-IAggrYt4y4o.roa
File: n89WROw4TK3d2Tf-IAggrYt4y4o.roa (raw, json)
Hash identifier: uJ86ZIPtkb69/L+tAkymjehY8zzfnuqrxFn0TX+FgzA=
Subject key identifier: 9F:CF:56:44:EC:38:4C:AD:DD:D9:37:FE:20:08:20:AD:8B:78:CB:8A
Certificate issuer: /CN=d2e563ca014ee40b98d1e5ed7d9cc289156d443f
Certificate serial: 0185BBE7FEB1B8F99CABE8F1D78D65C4C41C
Authority key identifier: D2:E5:63:CA:01:4E:E4:0B:98:D1:E5:ED:7D:9C:C2:89:15:6D:44:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uVjygFO5AuY0eXtfZzCiRVtRD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/682496-1d5e-402b-b6ed-8a946e9884ab/1/n89WROw4TK3d2Tf-IAggrYt4y4o.roa
Signing time: Mon 16 Jan 2023 18:47:01 +0000
ROA not before: Mon 16 Jan 2023 18:47:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49600
IP address blocks: 91.199.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:e7:fe:b1:b8:f9:9c:ab:e8:f1:d7:8d:65:c4:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e563ca014ee40b98d1e5ed7d9cc289156d443f
Validity
Not Before: Jan 16 18:47:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fcf5644ec384cadddd937fe200820ad8b78cb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:95:37:68:7f:63:a8:30:20:16:dd:c8:6c:
18:13:ee:dc:3a:ff:23:18:af:f1:cb:63:d2:e6:ff:
5c:e1:2c:4e:14:2e:45:e5:3b:ed:3f:3f:ec:55:ae:
4d:bb:0f:10:58:94:11:f9:99:f3:d8:4f:d5:f6:64:
a5:ac:86:80:82:ac:8d:f4:4a:02:18:a6:8c:d8:02:
d1:b3:08:b0:ab:35:9e:26:ca:0e:dd:7a:ed:6d:c0:
c3:76:f4:b1:17:c5:a7:d6:89:00:11:fe:99:97:e2:
fd:6c:5d:64:38:bd:04:7a:ea:57:0d:8a:d7:50:ae:
f2:4e:ab:14:dc:9c:85:2e:c1:64:90:84:d1:a9:ce:
db:7c:bd:c6:fe:e7:2d:e3:0e:eb:ac:21:1b:bf:e5:
d1:eb:28:a9:53:60:8d:2a:d1:e7:4a:a9:37:f0:0e:
51:7e:fa:61:8f:bd:a9:9f:b3:b0:4f:68:be:34:af:
1e:b5:fd:c1:7f:6c:9a:0a:15:22:92:c1:25:bc:26:
8d:f0:56:16:10:15:54:83:2a:d4:7b:b4:8f:2e:80:
eb:ee:7f:3a:b2:d9:6c:56:93:65:96:fd:a0:60:97:
0b:0c:41:95:dc:f4:0e:8e:19:83:8e:a7:2a:72:78:
31:30:02:90:c0:04:db:81:bc:6e:da:e5:cf:56:b3:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:56:44:EC:38:4C:AD:DD:D9:37:FE:20:08:20:AD:8B:78:CB:8A
X509v3 Authority Key Identifier:
keyid:D2:E5:63:CA:01:4E:E4:0B:98:D1:E5:ED:7D:9C:C2:89:15:6D:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uVjygFO5AuY0eXtfZzCiRVtRD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/682496-1d5e-402b-b6ed-8a946e9884ab/1/n89WROw4TK3d2Tf-IAggrYt4y4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/682496-1d5e-402b-b6ed-8a946e9884ab/1/0uVjygFO5AuY0eXtfZzCiRVtRD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.48.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:fe:9b:4c:8f:aa:db:80:7c:7e:12:f4:e3:07:ff:27:f0:dd:
76:92:b5:5f:93:61:91:51:9d:2e:85:4c:50:cb:c0:92:ba:42:
a5:81:c8:cb:5b:2a:e7:c3:8b:f4:e9:84:00:f4:f3:92:c5:88:
54:a7:94:1a:4b:87:10:62:3d:66:9f:1e:b3:a0:bf:97:ac:88:
97:8a:f9:ad:5f:f3:35:3e:cb:66:c1:ab:2d:ac:a5:f4:0c:27:
32:7e:64:f2:0b:11:da:22:d5:86:6f:de:2e:d6:fd:aa:97:84:
f3:98:54:65:3a:0a:a0:1b:ef:ba:a5:84:37:fb:a5:f4:fc:91:
9a:ac:e5:98:ff:9c:2d:a9:d3:a8:5b:b1:72:8e:6f:c4:e0:77:
b3:f6:59:62:29:69:82:a6:88:b8:3b:8b:67:a2:5a:4c:ab:f8:
79:5f:01:ff:e1:9e:74:93:32:db:9e:1a:a3:00:23:e7:ea:4b:
f0:62:ce:60:7d:9a:0d:70:17:59:b7:07:87:e7:0d:6f:5b:45:
90:08:49:47:dd:60:68:03:0f:62:75:cb:48:99:0d:74:fb:b6:
ac:88:c6:3a:68:7d:ca:fd:1b:c7:08:43:ba:27:76:1f:20:10:
a2:f8:1c:96:17:e6:4e:0e:07:39:88:d0:86:ad:52:86:79:51:
40:82:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 07:59:22 2023 by rpki-client on console-fra.rpki-client.org