Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/uivUIVeIR8l8pp3BWoHRQ1C3oSU.roa
File: uivUIVeIR8l8pp3BWoHRQ1C3oSU.roa (raw, json)
Hash identifier: 1Hjx1nFsykK44KFQqll95TKUu6KMQ7ogt+CYPE68KcM=
Subject key identifier: BA:2B:D4:21:57:88:47:C9:7C:A6:9D:C1:5A:81:D1:43:50:B7:A1:25
Certificate issuer: /CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Certificate serial: 1B061827
Authority key identifier: FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/uivUIVeIR8l8pp3BWoHRQ1C3oSU.roa
Signing time: Sat 01 Jan 2022 07:59:21 +0000
ROA not before: Sat 01 Jan 2022 07:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48361
IP address blocks: 91.209.127.0/24 maxlen: 24
185.16.116.0/23 maxlen: 23
185.16.118.0/23 maxlen: 23
2001:67c:1484::/48 maxlen: 48
2a04:280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453384231 (0x1b061827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Validity
Not Before: Jan 1 07:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba2bd421578847c97ca69dc15a81d14350b7a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:4d:f7:d3:5d:f9:92:f1:d8:80:a9:5e:83:
48:87:a7:76:5c:9a:b7:69:a1:d6:c1:87:ab:13:e1:
b1:55:f1:42:67:5c:42:e6:c6:49:4b:fd:38:47:e0:
20:57:e8:46:2f:c6:81:e6:f8:9c:ee:8d:62:6f:94:
e0:4f:6d:85:eb:d3:0a:d6:6d:1e:66:23:55:fb:27:
5f:2d:ed:09:87:e1:63:53:5b:b3:41:8c:b4:3b:70:
9b:64:16:c9:f6:0b:ca:3e:f4:75:51:88:30:f6:a6:
81:14:21:0e:39:be:f3:ca:4f:2c:69:07:b1:3c:b3:
fd:f7:f4:d7:a9:95:b6:b9:dc:67:09:bf:49:c3:fe:
a0:b0:82:c9:b9:b0:6a:8c:5e:40:24:19:cb:24:79:
2c:0d:7a:9f:c9:e1:01:46:a4:37:80:5d:5c:04:ca:
c4:8e:4a:17:1a:d5:6a:3f:74:72:3b:d9:a2:cf:d1:
71:60:50:f9:ea:2f:fe:fb:4e:35:98:08:86:a8:d7:
97:cc:b1:16:d1:80:a1:bc:d0:b7:62:e0:a9:86:b7:
37:41:90:1f:8a:29:a2:c0:de:de:dd:7d:81:6c:ef:
31:11:7c:1e:93:11:f6:a6:d8:21:d1:5a:8b:4e:ab:
91:6d:13:50:27:72:dd:30:58:33:49:59:9b:10:40:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:D4:21:57:88:47:C9:7C:A6:9D:C1:5A:81:D1:43:50:B7:A1:25
X509v3 Authority Key Identifier:
keyid:FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/uivUIVeIR8l8pp3BWoHRQ1C3oSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.127.0/24
185.16.116.0/22
IPv6:
2001:67c:1484::/48
2a04:280::/29
Signature Algorithm: sha256WithRSAEncryption
05:aa:3d:19:ee:73:bd:dc:3a:a4:d6:52:93:64:05:b7:e0:2a:
c6:67:31:be:45:cc:18:b8:6a:09:91:aa:fd:e1:90:69:30:18:
19:50:ad:79:14:34:3d:99:ea:9b:92:af:ce:9a:d9:2c:93:42:
f2:3f:04:ec:6c:23:2f:b0:df:23:96:9f:64:2e:73:ec:c0:f3:
87:6d:87:03:00:47:e5:16:f1:bd:ac:fb:84:eb:ba:b0:9a:d1:
82:61:df:6c:ed:97:dd:25:e7:35:ea:71:13:af:aa:e7:27:06:
ec:b0:61:ad:fe:ac:32:fb:21:4b:f8:b1:fb:7c:c7:f9:0a:b0:
8a:9a:4e:13:b5:f6:5d:fd:ac:4f:70:5e:75:57:0c:04:67:96:
57:41:f1:68:10:bd:0b:92:c9:e4:4c:99:39:ee:be:22:71:d6:
aa:fd:ba:87:c2:d6:35:ab:c8:e6:ed:61:37:69:30:b2:d7:e2:
58:53:00:58:5a:e7:1c:2a:cc:9f:6a:f5:7a:81:be:c0:50:95:
2c:42:7b:99:b1:d7:d5:8c:60:60:3a:d9:a4:c9:4a:39:ff:1c:
e6:59:13:06:8e:2a:7d:17:3c:db:3d:8e:b0:53:b9:29:8d:cf:
d6:df:2f:ee:a8:6f:c9:69:bd:c6:81:ee:9c:75:55:46:78:24:
c3:26:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:21 2024 by rpki-client on console-fra.rpki-client.org