Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/pzVP8_DYejrlZdrPp5kH1ufGT_4.roa
File: pzVP8_DYejrlZdrPp5kH1ufGT_4.roa (raw, json)
Hash identifier: kky57G9STcYkTkJiLQKl6YTJqCps/1jk95inY8Ag4wU=
Subject key identifier: A7:35:4F:F3:F0:D8:7A:3A:E5:65:DA:CF:A7:99:07:D6:E7:C6:4F:FE
Certificate issuer: /CN=05b94bb7cf5c923df189246a5d4d99d63b197ecf
Certificate serial: 01856C13857C45FFEBA86B06F01C41F5652A
Authority key identifier: 05:B9:4B:B7:CF:5C:92:3D:F1:89:24:6A:5D:4D:99:D6:3B:19:7E:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BblLt89ckj3xiSRqXU2Z1jsZfs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/pzVP8_DYejrlZdrPp5kH1ufGT_4.roa
Signing time: Sun 01 Jan 2023 06:44:56 +0000
ROA not before: Sun 01 Jan 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31027
IP address blocks: 91.231.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:85:7c:45:ff:eb:a8:6b:06:f0:1c:41:f5:65:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b94bb7cf5c923df189246a5d4d99d63b197ecf
Validity
Not Before: Jan 1 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7354ff3f0d87a3ae565dacfa79907d6e7c64ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:94:ce:a8:e2:aa:34:57:e1:e0:be:86:60:
db:a2:45:4c:d2:7b:b1:4f:06:2d:60:54:15:9b:85:
4d:9b:86:57:ec:d6:c9:c2:e2:42:4a:62:49:94:f2:
90:54:99:fd:04:cd:37:e6:1f:92:42:fb:be:d0:4c:
ab:9c:f8:3d:a1:da:ff:34:17:25:76:53:4d:5e:60:
2f:71:72:05:d7:6b:36:80:32:d9:21:79:41:aa:35:
31:20:28:80:38:3c:66:3f:cf:01:69:25:6e:00:07:
d0:f4:10:1f:b6:6f:8a:00:3c:fc:2b:ed:7b:05:5d:
be:d7:82:6f:86:89:86:cc:86:fb:bb:4c:5e:2b:34:
6b:ce:e3:37:85:23:94:87:64:9b:0f:96:45:70:20:
15:82:a1:18:df:08:fd:52:3e:0e:30:67:13:3f:cb:
40:19:62:e5:90:a9:4b:c7:3c:56:a6:a3:96:5b:7e:
00:64:7b:eb:e3:2c:32:04:f7:43:ed:5b:b8:03:87:
57:00:17:32:45:bf:a5:26:1c:97:c0:ea:ec:20:22:
27:9e:1f:f0:30:19:7f:61:cd:ec:c8:59:da:79:7f:
3d:e9:f0:4e:b2:b8:93:c8:b9:b6:2b:cb:b1:e1:f8:
c1:d6:ce:92:fc:de:ba:1e:6e:90:62:fe:37:00:8d:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:4F:F3:F0:D8:7A:3A:E5:65:DA:CF:A7:99:07:D6:E7:C6:4F:FE
X509v3 Authority Key Identifier:
keyid:05:B9:4B:B7:CF:5C:92:3D:F1:89:24:6A:5D:4D:99:D6:3B:19:7E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BblLt89ckj3xiSRqXU2Z1jsZfs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/pzVP8_DYejrlZdrPp5kH1ufGT_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/BblLt89ckj3xiSRqXU2Z1jsZfs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.147.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:9a:6e:5e:80:77:34:e1:4f:ca:a4:79:a8:6a:42:26:53:dd:
fc:4b:81:cd:55:63:19:28:3d:58:4f:5e:bc:dc:3a:1d:bc:93:
82:4e:db:58:df:e6:9f:91:02:4e:5b:31:0c:71:48:e8:d2:ad:
12:a0:e7:a7:f5:8c:96:6c:ef:e2:50:49:6e:bd:4d:17:0d:e1:
2a:f8:1e:03:a7:01:22:9e:31:3e:d2:34:ae:b2:1c:2f:54:f0:
d8:8c:41:49:38:97:b1:94:7c:ac:ad:9f:31:a7:eb:7d:e7:4b:
96:23:f2:31:b2:9a:6f:f0:8d:61:96:58:79:59:5a:05:35:a9:
21:8f:89:49:e1:85:9f:8e:08:f9:bd:f6:0f:bc:50:f0:e8:c6:
e4:9a:69:fb:c0:ec:ce:b5:52:46:82:b1:26:ab:e4:c6:9f:12:
cb:c4:dd:b6:c9:db:c1:7f:39:bc:fe:8e:d2:ac:32:2b:31:aa:
3b:de:f6:13:63:6e:68:6b:3b:de:2a:59:04:7c:03:a6:f6:67:
36:e9:53:08:ed:93:7a:b2:49:7b:20:0c:8d:08:26:9f:8d:00:
bc:b7:0f:49:34:a3:02:32:84:16:12:3f:16:dc:b3:a0:97:d8:
b7:f2:09:bf:4d:76:85:e6:37:31:1e:16:5e:d8:ac:e7:14:44:
d8:ae:41:1d
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 12 08:08:59 2023 by rpki-client on console-ams.rpki-client.org