Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc81d0-3baa-4f73-98eb-1b09c726f56c/1/PKetnAOt6iiz2K5RhZpPn79qUJs.roa
File: PKetnAOt6iiz2K5RhZpPn79qUJs.roa (raw, json)
Hash identifier: d3UjM5CQjv+7pRTCqgnCqDRib0uf4Qzy+67IlMl+vRg=
Subject key identifier: 3C:A7:AD:9C:03:AD:EA:28:B3:D8:AE:51:85:9A:4F:9F:BF:6A:50:9B
Certificate issuer: /CN=44d670cef701722b7b7daa1b30c9e749fef70470
Certificate serial: 01856D54024A36730EA75F2409E0306672C7
Authority key identifier: 44:D6:70:CE:F7:01:72:2B:7B:7D:AA:1B:30:C9:E7:49:FE:F7:04:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZwzvcBcit7faobMMnnSf73BHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc81d0-3baa-4f73-98eb-1b09c726f56c/1/PKetnAOt6iiz2K5RhZpPn79qUJs.roa
Signing time: Sun 01 Jan 2023 12:35:00 +0000
ROA not before: Sun 01 Jan 2023 12:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197839
IP address blocks: 91.226.100.0/22 maxlen: 22
194.246.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:02:4a:36:73:0e:a7:5f:24:09:e0:30:66:72:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d670cef701722b7b7daa1b30c9e749fef70470
Validity
Not Before: Jan 1 12:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ca7ad9c03adea28b3d8ae51859a4f9fbf6a509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:8e:d6:b1:ab:1c:92:9d:07:8f:ba:4b:52:
63:87:84:35:8a:d0:aa:ff:7d:7d:c4:b1:e3:9f:60:
d3:7a:02:29:55:1a:b9:1b:bc:d3:f6:06:dc:04:d2:
01:09:45:64:e9:eb:08:8f:ed:f9:02:a0:1a:77:dc:
64:8c:16:ac:b4:f7:c5:e0:7f:7e:5d:c4:83:a8:e8:
ed:4d:01:8a:82:da:08:db:f7:25:21:3f:11:96:ca:
cf:08:15:f3:76:25:3b:d6:ca:28:be:6b:8d:17:cd:
af:23:f5:a6:87:d3:84:3a:4f:31:50:99:67:b2:59:
be:05:d4:71:4b:5d:e1:bc:7a:e4:c0:14:6a:f5:13:
1f:b4:03:6f:89:32:e6:f0:eb:29:68:1e:55:d5:c3:
42:ec:e7:4f:9f:5a:c0:1b:e8:a7:75:2f:ff:3a:d7:
be:18:be:6c:09:97:e1:27:fe:4c:64:2f:59:16:d7:
68:cb:dd:63:79:e8:45:81:25:70:07:c3:f8:71:c4:
fc:41:5e:e3:3c:38:b2:c6:51:ed:3e:bb:4c:c7:8c:
5f:0d:a1:b3:de:b3:bc:5b:52:d9:7d:32:70:14:df:
72:89:90:be:a9:4d:78:0e:c3:ae:6e:9f:22:d2:91:
88:c6:da:ad:1f:8d:c9:8f:cb:5b:6a:cc:a9:cc:3d:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A7:AD:9C:03:AD:EA:28:B3:D8:AE:51:85:9A:4F:9F:BF:6A:50:9B
X509v3 Authority Key Identifier:
keyid:44:D6:70:CE:F7:01:72:2B:7B:7D:AA:1B:30:C9:E7:49:FE:F7:04:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZwzvcBcit7faobMMnnSf73BHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc81d0-3baa-4f73-98eb-1b09c726f56c/1/PKetnAOt6iiz2K5RhZpPn79qUJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc81d0-3baa-4f73-98eb-1b09c726f56c/1/RNZwzvcBcit7faobMMnnSf73BHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.100.0/22
194.246.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:58:d0:f0:f7:6a:8a:c4:cc:d3:1f:76:a9:79:d5:be:e1:7c:
5e:b6:9c:09:9a:3a:17:06:2f:31:75:6d:9a:5d:5e:32:dc:c7:
ce:f2:23:4b:9d:5c:06:da:41:a7:a2:16:6d:b7:8c:a1:d4:9c:
cc:ce:1e:59:e6:4a:6a:3e:52:c9:44:c2:12:4a:b0:ed:49:53:
02:f5:b7:fb:4b:36:0f:80:de:56:06:b6:a8:f6:ff:0a:bd:bd:
a2:62:da:f0:05:83:7c:e5:2e:17:62:2d:00:19:00:a0:2f:e2:
06:30:8d:d9:04:ed:6c:75:ae:31:17:bf:98:2c:df:e4:02:72:
42:08:1e:23:70:a2:2d:7f:af:a0:63:09:39:0e:06:13:9a:fe:
f2:be:df:b7:d8:34:9c:e6:18:f7:e9:a7:d2:71:ff:ea:40:d0:
ef:83:31:c6:54:29:4b:7c:9f:c5:d0:17:85:af:dc:55:63:39:
22:b6:d7:d7:1c:24:14:ec:f0:a6:5b:5d:2f:08:c6:91:63:64:
39:66:09:99:9c:a0:9e:d0:3e:18:a9:4e:82:1d:38:9a:2f:02:
10:b9:10:65:f5:77:ed:93:cc:4b:88:56:d5:3e:c5:e0:8a:7c:
9b:d9:42:3b:38:e9:a9:4d:d5:1d:4b:7e:e9:8f:da:16:c8:09:
0b:44:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:10 2024 by rpki-client on console-fra.rpki-client.org