Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/w5tFHiXC9EFwtWPQeHUamGSZSus.roa
File: w5tFHiXC9EFwtWPQeHUamGSZSus.roa (raw, json)
Hash identifier: QnLMJ+H+WCoS6FVBHAQLaMOu4UzwBGVVW1vgPTDCkbs=
Subject key identifier: C3:9B:45:1E:25:C2:F4:41:70:B5:63:D0:78:75:1A:98:64:99:4A:EB
Certificate issuer: /CN=4b3152f0d77e057fb2c9bf80d803329879440776
Certificate serial: B4CCA0
Authority key identifier: 4B:31:52:F0:D7:7E:05:7F:B2:C9:BF:80:D8:03:32:98:79:44:07:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/w5tFHiXC9EFwtWPQeHUamGSZSus.roa
Signing time: Sat 01 Jan 2022 02:50:58 +0000
ROA not before: Sat 01 Jan 2022 02:50:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 91.247.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11848864 (0xb4cca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3152f0d77e057fb2c9bf80d803329879440776
Validity
Not Before: Jan 1 02:50:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c39b451e25c2f44170b563d078751a9864994aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:39:e4:aa:f7:b5:f4:0c:05:cd:d4:49:e3:
99:04:4d:c1:85:c8:67:fe:37:70:03:1f:f9:59:a4:
33:5c:b5:e9:20:ca:0e:92:96:67:36:97:e6:8e:78:
9a:5c:8f:3d:04:72:dd:ef:43:38:af:38:36:4a:38:
17:c3:3b:52:11:7c:86:49:ec:de:e9:cc:1b:0d:8f:
7e:04:7e:d4:2c:af:5d:ca:af:38:4b:fd:f4:a5:c3:
bb:8b:01:c2:4d:70:51:19:fa:05:e3:3b:8b:55:39:
e3:12:9c:1f:eb:31:75:70:71:ea:32:77:e1:c2:52:
ab:89:16:5b:5d:0d:31:f8:58:f2:35:d9:21:d6:d2:
95:7b:10:6a:0e:36:f3:50:88:20:ee:ca:51:46:65:
ef:3b:d9:4b:bd:ec:1e:4d:2b:9f:7c:41:fc:7f:92:
eb:0e:71:a9:b3:44:85:2a:a5:ba:25:40:75:c5:ad:
c4:74:3c:d3:21:8d:9c:3c:1d:0c:ed:db:b7:f2:61:
20:0a:65:dc:87:60:46:2a:a8:c7:62:92:87:a6:89:
49:fc:b0:35:0a:12:da:f9:1e:75:36:3c:6d:6c:48:
f5:82:cc:c1:90:a2:0e:6a:16:cf:c8:93:43:c3:a6:
f3:ee:12:f7:f0:d3:9b:cf:78:06:81:95:74:41:46:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:45:1E:25:C2:F4:41:70:B5:63:D0:78:75:1A:98:64:99:4A:EB
X509v3 Authority Key Identifier:
keyid:4B:31:52:F0:D7:7E:05:7F:B2:C9:BF:80:D8:03:32:98:79:44:07:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/w5tFHiXC9EFwtWPQeHUamGSZSus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e9:99:ed:b6:74:5a:5d:5c:67:2a:0b:96:2a:97:bd:08:0a:
bb:5f:fe:09:d5:b8:4e:a9:18:26:bd:23:08:7d:47:e5:57:ca:
6f:a8:34:e9:80:57:08:e0:db:62:07:cf:1a:4c:4e:f8:29:d4:
45:a4:f1:30:0a:5c:95:b8:2f:94:52:fd:0e:2d:11:56:70:4f:
21:bc:35:38:49:c6:13:e1:93:40:3f:4d:43:39:e7:22:45:f6:
fa:45:2b:71:08:d8:b6:94:cd:aa:1f:0d:92:4f:45:5e:b9:9d:
94:be:a2:41:ef:74:f5:7d:fd:80:b8:ba:1d:2a:46:57:de:d9:
f4:07:84:04:ed:7f:ba:c2:83:ef:bd:6e:5b:f4:4e:11:42:f4:
d8:70:4b:62:ba:ef:d0:58:1e:b7:6f:8e:02:ae:d3:11:66:04:
e4:95:1d:63:8d:c9:7a:2b:75:68:f2:45:ed:a4:ed:da:c0:6c:
b0:a4:d8:bb:df:11:6a:d4:a0:78:ab:e4:b8:7d:32:51:92:70:
a6:d2:71:da:fe:64:8e:6c:21:ac:bc:64:61:74:66:ad:60:43:
07:6b:32:06:eb:45:69:31:e5:27:2a:d3:58:04:69:c7:c2:23:
25:86:16:ab:08:a8:73:d1:f6:80:14:cc:05:43:18:b1:35:18:
d8:56:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org