Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/C9x9-J-lEWfC-kZaXB3aiUuaYS4.roa
File: C9x9-J-lEWfC-kZaXB3aiUuaYS4.roa (raw, json)
Hash identifier: uNPx/SXJr3XwaMx0PmSM+Q2uykhUADrp4YhQZRQf3FQ=
Subject key identifier: 0B:DC:7D:F8:9F:A5:11:67:C2:FA:46:5A:5C:1D:DA:89:4B:9A:61:2E
Certificate issuer: /CN=5be23e3934f0b49a0bb965105c21420865a9222b
Certificate serial: 01856D8ACCD6D953B3DBFF870DFF7C68D592
Authority key identifier: 5B:E2:3E:39:34:F0:B4:9A:0B:B9:65:10:5C:21:42:08:65:A9:22:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-I-OTTwtJoLuWUQXCFCCGWpIis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/C9x9-J-lEWfC-kZaXB3aiUuaYS4.roa
Signing time: Sun 01 Jan 2023 13:34:50 +0000
ROA not before: Sun 01 Jan 2023 13:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 91.234.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:cc:d6:d9:53:b3:db:ff:87:0d:ff:7c:68:d5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be23e3934f0b49a0bb965105c21420865a9222b
Validity
Not Before: Jan 1 13:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bdc7df89fa51167c2fa465a5c1dda894b9a612e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:c4:0e:d5:6e:e7:48:71:ff:f9:39:22:77:
5d:23:03:a9:fb:1a:94:6c:33:3b:95:c6:aa:99:48:
2e:51:69:af:49:1e:1a:46:b8:28:65:7b:9b:85:2f:
6d:10:ff:28:7f:35:3a:81:14:df:93:65:7c:93:fc:
94:9a:d4:cb:27:7a:c9:64:38:7e:9b:a2:24:16:9e:
bf:c9:fb:a9:15:44:8b:7c:54:5e:69:85:85:f2:e7:
bf:b5:e3:01:67:51:cd:4a:40:c1:a1:f0:92:f1:21:
2c:71:29:cd:84:ba:7a:25:ca:14:cc:cb:e3:a6:0f:
b0:25:01:69:c3:c2:33:21:31:02:e5:e6:18:ea:2e:
b1:4e:4c:ec:fa:9e:98:1a:1e:21:3f:3f:b6:97:0c:
26:d6:f1:15:86:1c:49:b9:4f:18:dd:58:81:b8:59:
9a:68:ce:05:98:0a:3b:1c:96:47:95:f8:10:93:53:
22:83:d3:ab:14:6b:1a:6a:16:5c:72:4a:46:68:75:
88:96:80:16:6d:34:d9:2a:fe:34:6f:c1:53:69:52:
b3:00:48:f7:73:d6:6a:86:d4:32:71:df:2b:91:e7:
3c:8f:66:a6:04:fe:aa:f5:e1:6e:ab:c5:64:fb:b4:
28:82:1f:7e:48:d7:6b:1d:32:8c:df:4e:99:ff:5e:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:7D:F8:9F:A5:11:67:C2:FA:46:5A:5C:1D:DA:89:4B:9A:61:2E
X509v3 Authority Key Identifier:
keyid:5B:E2:3E:39:34:F0:B4:9A:0B:B9:65:10:5C:21:42:08:65:A9:22:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-I-OTTwtJoLuWUQXCFCCGWpIis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/C9x9-J-lEWfC-kZaXB3aiUuaYS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/W-I-OTTwtJoLuWUQXCFCCGWpIis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ce:84:1d:85:0e:d9:ea:82:7c:da:96:3f:b0:07:a1:8d:bc:
51:b2:90:22:a4:48:57:d1:45:37:3c:01:75:57:6b:a4:2d:de:
3d:5d:dc:fd:d8:9e:4e:2b:a2:df:c6:51:40:44:78:30:cb:f9:
00:5d:75:73:93:7b:1a:e7:a8:1e:9f:f2:fe:92:a0:0c:67:2a:
6b:af:d4:9f:e4:fb:99:28:83:36:32:af:bd:af:3a:b7:3c:13:
5d:70:26:64:25:30:c2:09:77:04:d9:73:79:b6:64:b1:14:94:
39:57:f7:be:bb:0b:39:0c:ef:d9:b8:25:31:6b:37:6e:5c:70:
38:41:5f:12:4e:78:33:f4:43:ec:43:00:11:c7:99:e7:97:9f:
b3:58:90:7d:88:30:82:40:e0:50:c3:b0:b6:1c:25:fd:8c:48:
95:a6:b4:a5:c5:3a:78:97:78:ae:83:9d:6f:df:4a:bc:e0:00:
f5:40:c1:16:17:b1:52:dd:40:5d:20:b9:3a:93:76:2d:0a:c2:
f9:89:7c:98:4d:13:28:a6:f0:6f:67:3c:fd:13:b9:b0:23:26:
b9:9c:2f:15:bf:82:59:3e:61:fc:8d:fd:8e:9d:8f:61:41:8e:
50:4a:24:b5:21:9f:fc:5e:08:b3:3c:02:fc:c7:1a:f3:c1:3a:
dd:fd:28:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org