Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc81d0-3baa-4f73-98eb-1b09c726f56c/1/Apd7oCBNN1F0Ei70O1XShM6O12I.roa
File: Apd7oCBNN1F0Ei70O1XShM6O12I.roa (raw, json)
Hash identifier: TXwzIcuX6nE00TTfore9o9D+Y4tjpDX/+DeJmSY/Tn0=
Subject key identifier: 02:97:7B:A0:20:4D:37:51:74:12:2E:F4:3B:55:D2:84:CE:8E:D7:62
Certificate issuer: /CN=44d670cef701722b7b7daa1b30c9e749fef70470
Certificate serial: 017B354E
Authority key identifier: 44:D6:70:CE:F7:01:72:2B:7B:7D:AA:1B:30:C9:E7:49:FE:F7:04:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZwzvcBcit7faobMMnnSf73BHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc81d0-3baa-4f73-98eb-1b09c726f56c/1/Apd7oCBNN1F0Ei70O1XShM6O12I.roa
Signing time: Sat 01 Jan 2022 16:06:11 +0000
ROA not before: Sat 01 Jan 2022 16:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197839
IP address blocks: 91.226.100.0/22 maxlen: 22
194.246.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24851790 (0x17b354e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d670cef701722b7b7daa1b30c9e749fef70470
Validity
Not Before: Jan 1 16:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02977ba0204d375174122ef43b55d284ce8ed762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:5c:23:d6:55:f4:00:96:db:9f:c0:54:72:
5f:1f:9a:32:be:ae:29:ec:f6:f5:7e:f0:6b:e3:bb:
e2:32:b0:fe:33:d7:62:7c:53:bd:dd:f7:e4:ec:b2:
f6:ea:fb:18:25:4a:6f:0c:1f:d9:c6:80:1b:3f:ed:
9c:ba:4e:63:77:56:95:fb:ec:e0:08:07:87:e0:98:
2e:d4:67:cc:5e:ff:46:45:42:f7:2d:b3:2c:73:1f:
7f:20:6a:79:8c:1b:e2:ea:dd:d0:02:b0:07:e7:da:
56:3a:95:5c:6d:1d:fc:46:21:e2:4f:db:88:3f:b8:
ab:8a:e7:c6:62:9a:58:52:ae:bb:80:f8:01:01:dc:
38:c2:03:0d:75:4e:05:2d:e2:91:49:20:cb:ca:eb:
06:68:39:50:c9:05:bd:69:be:d6:fe:7e:5f:ea:34:
fc:99:bf:1e:cb:c5:d5:9c:4b:87:9e:5d:09:4c:0d:
46:7b:da:57:8a:ae:55:c4:19:34:ad:60:ec:db:9a:
f2:43:15:66:e1:17:0b:f6:2d:0c:a4:07:3c:ea:ac:
5e:59:c7:26:38:c0:3d:7f:71:1d:ea:e9:e3:d1:72:
00:0d:3f:dd:db:f3:2c:df:33:b5:70:25:d5:87:cf:
6f:5a:d2:c4:7a:99:25:32:7d:f9:11:64:3e:6a:c9:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:97:7B:A0:20:4D:37:51:74:12:2E:F4:3B:55:D2:84:CE:8E:D7:62
X509v3 Authority Key Identifier:
keyid:44:D6:70:CE:F7:01:72:2B:7B:7D:AA:1B:30:C9:E7:49:FE:F7:04:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZwzvcBcit7faobMMnnSf73BHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc81d0-3baa-4f73-98eb-1b09c726f56c/1/Apd7oCBNN1F0Ei70O1XShM6O12I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc81d0-3baa-4f73-98eb-1b09c726f56c/1/RNZwzvcBcit7faobMMnnSf73BHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.100.0/22
194.246.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:23:9f:63:17:a4:a3:d0:5f:58:02:6e:b0:8f:a4:a3:35:35:
2e:e9:09:7d:a0:10:b6:47:70:01:35:2b:2e:a2:4f:0c:d7:4e:
cd:b1:a5:67:5e:14:9a:05:c9:aa:7b:4e:91:d8:3d:06:d9:86:
f6:7c:5f:de:de:1c:1c:b1:ef:bc:1c:18:00:ee:a8:6a:f5:d9:
93:a9:31:10:f2:39:f6:d9:ef:6a:ee:28:0f:d3:2c:bd:40:0c:
08:c0:38:69:1e:7e:12:c4:44:8e:27:a3:04:a5:f8:2f:9e:7a:
e0:28:9f:bd:32:46:3b:88:5f:ea:c3:72:11:ec:1e:77:30:fd:
4c:f5:f2:43:22:48:2d:dd:5e:4c:3d:f8:53:14:9b:57:5d:d5:
ba:41:ed:c5:79:1b:a6:21:f2:1e:3f:99:fe:5e:44:88:db:f9:
63:1e:19:de:37:07:89:f6:89:bd:0e:1d:21:82:b4:1a:80:8c:
24:2e:c7:35:97:02:01:79:9a:b0:d2:38:c8:27:29:b9:c7:8d:
88:36:11:d1:a4:6b:9d:e4:39:5a:c9:53:3d:7c:d8:bd:6a:9e:
9b:b9:85:32:93:65:fb:f8:c2:1e:4a:6e:88:0e:df:66:f9:42:
c6:a1:6b:3d:d1:c5:d2:af:7a:1e:96:09:28:61:c5:c1:51:40:
c5:0a:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:13 2024 by rpki-client on console-ams.rpki-client.org