Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/ItRkpmuZUPFvfxo39sIaGTdNoyo.roa
File: ItRkpmuZUPFvfxo39sIaGTdNoyo.roa (raw, json)
Hash identifier: V8L3+pwuejTOoYwuOhLjS6474xhIXw3lp8Itj0RIgdo=
Subject key identifier: 22:D4:64:A6:6B:99:50:F1:6F:7F:1A:37:F6:C2:1A:19:37:4D:A3:2A
Certificate issuer: /CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
Certificate serial: 0C6FCB44
Authority key identifier: E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/ItRkpmuZUPFvfxo39sIaGTdNoyo.roa
Signing time: Sat 01 Jan 2022 09:54:36 +0000
ROA not before: Sat 01 Jan 2022 09:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51067
IP address blocks: 91.216.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208653124 (0xc6fcb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
Validity
Not Before: Jan 1 09:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22d464a66b9950f16f7f1a37f6c21a19374da32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:41:49:1c:b3:75:a0:27:0b:74:33:24:2a:
24:bc:e2:48:63:88:4c:58:6b:26:0a:93:27:95:09:
ef:7b:b1:a4:e5:f5:82:3e:ee:d0:68:bb:1e:2e:45:
f7:52:1b:4f:9a:b1:e9:d6:1c:45:a7:7b:07:75:58:
1e:27:e1:d8:ed:f8:63:2b:3f:3b:9b:bf:59:7a:cf:
c5:f2:cc:11:af:88:b6:35:e2:6f:53:74:83:df:d4:
50:c3:87:14:d8:d3:fe:2a:eb:89:b5:25:73:b2:0e:
d6:e3:35:38:63:0d:eb:50:b5:92:0c:51:78:5e:f8:
8e:8c:30:94:47:0e:16:1f:2d:21:14:84:b6:99:29:
24:ba:ef:62:39:78:0a:cd:9d:25:6b:7b:86:a3:f8:
c6:bc:dd:a7:44:d3:72:c3:3e:55:f3:8c:cd:bb:c3:
b2:0d:13:65:f7:c3:6b:2d:18:e7:4b:9c:1c:d8:96:
ce:fe:90:29:c5:a1:d8:82:22:4d:71:9b:cd:5c:36:
b1:62:a4:4f:42:f9:c6:5a:86:c8:14:30:c6:f6:36:
0a:ab:95:4d:76:c0:1d:2f:9f:69:b3:e5:31:fb:a9:
7b:f7:05:83:f9:e0:35:16:08:26:04:a1:dd:d4:4d:
fc:98:12:49:b0:f1:a9:5f:fe:ce:33:a0:30:ba:7c:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:64:A6:6B:99:50:F1:6F:7F:1A:37:F6:C2:1A:19:37:4D:A3:2A
X509v3 Authority Key Identifier:
keyid:E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/ItRkpmuZUPFvfxo39sIaGTdNoyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a7:94:3f:91:55:3c:79:ba:34:46:07:e4:89:d5:8f:65:e6:
81:b4:84:a0:ce:5a:71:a1:d9:bd:19:71:41:7b:3f:20:93:2a:
2b:92:9f:3e:f1:cf:00:41:91:ca:39:ab:79:cb:c1:76:fd:cb:
f0:03:90:83:44:d1:aa:58:9f:34:8a:24:97:c5:0f:2e:37:3e:
51:7a:01:85:9f:94:10:2c:c9:26:a7:6c:b5:01:d7:c5:83:e1:
90:3d:e2:b1:5d:e5:b6:4d:2e:00:cb:89:22:ad:4f:06:83:73:
33:6e:a9:e3:44:a0:6d:93:26:12:fe:ff:e9:fd:94:9c:8f:1e:
ee:3e:a3:00:47:c8:c0:ca:29:46:fa:38:57:d7:0d:09:60:fd:
dd:d2:6f:37:fd:10:2a:21:3e:bc:90:ad:15:39:97:70:f3:ab:
f6:cc:f3:45:09:cd:2c:ed:83:c9:6e:e7:77:ca:8a:3c:3c:c8:
8a:e9:f6:df:d5:cb:46:8b:39:f7:c3:2d:f7:cb:43:09:07:8d:
ae:c6:5b:32:a1:6e:62:16:eb:95:51:94:ab:e9:d8:d9:9d:0c:
e4:49:eb:dd:df:65:ff:b5:7c:5b:97:7b:00:46:69:46:a3:ab:
4b:1a:dc:04:b6:6f:42:a9:19:c9:4e:df:ce:df:c4:92:cd:12:
af:5f:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-fra.rpki-client.org