Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b93a6f-fd3c-41b6-b6c8-60f35af7b92c/1/4rkfUoPtqfx-8t4FfQvVYHFWtJQ.roa
File: 4rkfUoPtqfx-8t4FfQvVYHFWtJQ.roa (raw, json)
Hash identifier: kZ04uGA4t9Z8Wxhh3aEnf+BVS3zfBTqwJ021ThhlB50=
Subject key identifier: E2:B9:1F:52:83:ED:A9:FC:7E:F2:DE:05:7D:0B:D5:60:71:56:B4:94
Certificate issuer: /CN=b9123c21a91f8184313f90b569bb511fa60b20e4
Certificate serial: 03E49088
Authority key identifier: B9:12:3C:21:A9:1F:81:84:31:3F:90:B5:69:BB:51:1F:A6:0B:20:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRI8IakfgYQxP5C1abtRH6YLIOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b93a6f-fd3c-41b6-b6c8-60f35af7b92c/1/4rkfUoPtqfx-8t4FfQvVYHFWtJQ.roa
Signing time: Sat 01 Jan 2022 03:53:06 +0000
ROA not before: Sat 01 Jan 2022 03:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212659
IP address blocks: 91.209.143.0/24 maxlen: 24
2a07:2f40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65310856 (0x3e49088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9123c21a91f8184313f90b569bb511fa60b20e4
Validity
Not Before: Jan 1 03:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2b91f5283eda9fc7ef2de057d0bd5607156b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:19:3e:ce:6f:fe:fd:0a:ba:c4:61:96:8c:
9a:31:33:14:66:a0:b2:ae:24:bf:4c:60:dd:21:16:
fc:67:58:b3:dc:2a:6b:d9:19:90:db:a4:b5:f4:75:
5e:17:0e:cd:4c:27:ef:d6:a7:46:f6:95:f0:c8:6d:
2b:48:80:25:a3:02:e7:72:7f:9a:4c:3f:15:c2:98:
37:3d:f9:11:cd:e9:1d:e1:e5:73:34:a2:0e:4a:e5:
66:9b:4d:78:00:34:f4:bc:03:6f:58:21:5f:1a:de:
04:2f:d0:6b:99:4c:38:86:9a:7f:cd:53:90:c1:e2:
7b:ec:69:ec:ae:96:27:15:bf:5a:c9:03:56:8c:65:
1a:58:d2:8b:58:48:6f:2b:87:f0:5f:f4:51:23:39:
a5:a4:af:07:c8:48:45:f9:65:e4:28:84:70:05:0f:
20:a6:26:0c:3f:15:7f:75:50:55:98:7c:4e:9d:6b:
ad:6d:2a:7d:1f:0a:88:da:ce:e0:6f:df:86:2d:25:
1e:7f:40:6a:80:bb:24:60:55:d8:b9:d1:f6:53:70:
d2:3a:2f:b8:64:42:a9:6e:b0:67:b1:04:2b:5a:97:
9d:a6:29:2d:a1:7c:9c:46:2f:11:e5:44:a6:9f:1f:
18:28:f4:34:23:51:ab:26:6c:e3:60:c7:79:3a:d8:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B9:1F:52:83:ED:A9:FC:7E:F2:DE:05:7D:0B:D5:60:71:56:B4:94
X509v3 Authority Key Identifier:
keyid:B9:12:3C:21:A9:1F:81:84:31:3F:90:B5:69:BB:51:1F:A6:0B:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRI8IakfgYQxP5C1abtRH6YLIOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b93a6f-fd3c-41b6-b6c8-60f35af7b92c/1/4rkfUoPtqfx-8t4FfQvVYHFWtJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b93a6f-fd3c-41b6-b6c8-60f35af7b92c/1/uRI8IakfgYQxP5C1abtRH6YLIOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.143.0/24
IPv6:
2a07:2f40::/29
Signature Algorithm: sha256WithRSAEncryption
72:5d:40:0e:fb:24:5b:26:8f:f7:e0:28:40:8c:42:5a:5e:d4:
f5:71:2d:ef:a5:37:1c:4b:ac:b6:fe:f1:96:cb:a7:d6:19:d2:
8c:85:18:e2:95:93:fb:bd:5a:72:7f:a7:19:07:9f:75:cb:35:
6a:03:3d:c4:3b:cf:96:6a:75:3a:75:aa:c1:3c:28:4d:db:01:
24:e8:31:c8:50:b4:cd:55:ad:0c:59:d7:78:d1:f4:83:05:c9:
c1:40:3b:ec:3a:d7:f5:fe:9d:bc:c8:09:59:83:91:f0:b6:75:
a8:d3:4a:95:45:b3:9d:e7:18:69:c2:c9:7f:9f:ab:42:c0:7a:
eb:56:2d:34:4d:c5:05:14:ef:9e:31:8c:08:82:42:47:ce:f2:
12:7b:9b:98:7c:15:b8:e6:55:84:1d:a7:e6:aa:27:e3:c9:70:
50:d0:d0:ce:10:a5:27:4f:31:55:27:a7:91:d2:e2:9b:65:a8:
45:b6:6c:7f:21:f2:f2:77:12:c4:d4:30:6a:82:5c:ad:d8:aa:
a3:16:74:17:5e:24:3e:8e:cd:31:11:63:fc:ed:52:f1:19:f1:
38:ec:a9:9c:f3:12:4f:a4:a9:cc:7b:23:ec:4e:1a:2f:1d:d3:
2a:92:73:4c:13:7b:cf:40:16:20:e7:8b:de:2d:ed:cd:01:e5:
5d:8f:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org