Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/MTfeIE98o3cBcLx23Ra6MXpsNtg.roa
File: MTfeIE98o3cBcLx23Ra6MXpsNtg.roa (raw, json)
Hash identifier: 3RYX4T4rtJocm1+yfR4y3mt6etnAZ434FyS+tN7KIbY=
Subject key identifier: 31:37:DE:20:4F:7C:A3:77:01:70:BC:76:DD:16:BA:31:7A:6C:36:D8
Certificate issuer: /CN=b0c8fd93c47275a1f14a87e5aea8600549a91180
Certificate serial: 0181D7EE9F2B286199E695B51883646040F5
Authority key identifier: B0:C8:FD:93:C4:72:75:A1:F1:4A:87:E5:AE:A8:60:05:49:A9:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMj9k8RydaHxSoflrqhgBUmpEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/MTfeIE98o3cBcLx23Ra6MXpsNtg.roa
Signing time: Thu 07 Jul 2022 09:12:28 +0000
ROA not before: Thu 07 Jul 2022 09:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209982
IP address blocks: 91.239.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:ee:9f:2b:28:61:99:e6:95:b5:18:83:64:60:40:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c8fd93c47275a1f14a87e5aea8600549a91180
Validity
Not Before: Jul 7 09:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3137de204f7ca3770170bc76dd16ba317a6c36d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:d3:6f:f4:68:5a:77:62:e7:c5:07:32:b8:
1a:f6:f4:cc:f0:d6:1a:64:24:1e:c7:c6:af:be:d0:
95:33:90:8d:7b:21:0d:97:eb:73:ae:b4:55:d7:6e:
e8:03:a4:1a:8f:7b:07:82:d1:6e:b4:bb:2d:fc:61:
55:dd:68:66:44:47:05:d6:49:40:41:08:f9:fe:56:
55:0d:7e:0b:33:39:0d:4c:66:94:16:e2:0c:98:57:
b4:76:c0:64:e8:55:ac:3d:1c:b1:c2:e5:b7:a1:f3:
9a:b1:66:dd:aa:86:ca:c2:dc:eb:90:37:46:7e:fe:
a9:8f:ff:d8:fe:1f:a4:67:ae:92:c8:fb:1a:ff:75:
a5:10:6f:3c:4d:b4:c8:c9:ba:4e:f1:5b:a7:69:04:
4d:b3:d5:9d:a5:2f:de:0f:7e:12:22:4a:68:80:22:
1f:e4:f8:73:7f:85:28:11:02:88:70:69:dc:59:68:
90:b0:b9:96:54:85:85:d6:16:5d:33:10:fb:8f:45:
5a:a7:fe:cc:bf:04:cf:7b:8d:7b:a0:8d:c8:52:45:
9a:88:96:be:a2:b2:03:a3:90:cc:fc:cd:da:af:75:
3a:e4:22:84:a0:1b:b9:6e:35:92:9a:a5:a0:6f:f1:
14:25:15:5b:ce:09:ff:dd:20:f5:99:83:35:1b:63:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:DE:20:4F:7C:A3:77:01:70:BC:76:DD:16:BA:31:7A:6C:36:D8
X509v3 Authority Key Identifier:
keyid:B0:C8:FD:93:C4:72:75:A1:F1:4A:87:E5:AE:A8:60:05:49:A9:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMj9k8RydaHxSoflrqhgBUmpEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/MTfeIE98o3cBcLx23Ra6MXpsNtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/sMj9k8RydaHxSoflrqhgBUmpEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:89:24:5c:7b:47:35:b3:fa:3d:20:38:17:59:4b:cc:0c:8c:
08:91:07:45:bf:a6:1e:45:e3:7a:7c:ce:bd:0f:2f:48:64:e9:
fb:a2:18:37:f0:b4:08:5a:56:a3:4a:b0:54:81:c3:a6:ca:1a:
04:43:ba:bc:cd:19:ed:9a:22:85:9c:09:e0:5a:30:60:64:b6:
6a:b7:65:77:bd:d5:8a:88:f8:c7:1f:96:d8:8c:e8:63:cf:6f:
db:54:bc:20:8f:ef:fc:27:f2:2c:74:2c:7b:d4:7e:df:75:46:
63:d5:fa:ea:09:56:1e:2d:6b:13:d0:27:e6:92:ef:57:27:8a:
c6:61:13:36:9c:78:b9:19:a3:dc:fa:f9:cc:e3:14:dd:9e:f7:
ce:dd:e7:bd:e1:75:69:8a:4e:ad:41:4d:04:b9:57:5a:11:ae:
bc:45:24:cc:b2:72:e2:4b:7a:d9:56:a6:30:6f:44:3a:5b:c9:
99:e8:af:73:a7:dd:28:2a:fe:88:39:76:c5:1f:71:c0:c8:e8:
4f:1e:cd:60:85:db:10:15:18:cb:e5:f2:47:8f:d9:69:b6:7c:
8c:e2:64:ea:2c:70:86:ff:86:eb:8d:ee:b6:0f:1e:39:45:0b:
90:7a:95:5b:a2:b2:7c:fb:25:f2:f6:93:b9:71:1e:0e:39:4d:
7b:af:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:09 2024 by rpki-client on console-fra.rpki-client.org