Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/B7HzfssWfBcU6jA7fH3C2L6m79E.roa
File: B7HzfssWfBcU6jA7fH3C2L6m79E.roa (raw, json)
Hash identifier: mpLsIYMpjXUe9VqagVNtFqd5sOLADkr/iRWPf9Ukq5A=
Subject key identifier: 07:B1:F3:7E:CB:16:7C:17:14:EA:30:3B:7C:7D:C2:D8:BE:A6:EF:D1
Certificate issuer: /CN=537b37656cd14d488a70512921875717a0d910b6
Certificate serial: 05F91654
Authority key identifier: 53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/B7HzfssWfBcU6jA7fH3C2L6m79E.roa
Signing time: Sat 01 Jan 2022 11:00:58 +0000
ROA not before: Sat 01 Jan 2022 11:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398704
IP address blocks: 91.240.163.0/24 maxlen: 24
91.240.89.0/24 maxlen: 24
91.240.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100210260 (0x5f91654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537b37656cd14d488a70512921875717a0d910b6
Validity
Not Before: Jan 1 11:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07b1f37ecb167c1714ea303b7c7dc2d8bea6efd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:ac:61:79:42:8c:14:bd:d8:12:26:af:38:
9f:52:51:7e:bb:55:8b:46:da:7b:ef:d4:9a:82:2f:
15:94:50:a3:c3:4f:04:a0:2b:8a:96:12:a9:77:22:
fc:be:90:30:66:2c:33:84:69:c9:b1:e0:a9:0a:4c:
f3:38:0e:9f:1c:38:87:cc:2e:1b:26:a2:62:87:92:
99:df:b9:57:6e:23:5f:2a:1e:ba:cf:d8:05:a2:d6:
cc:db:e2:6b:c6:63:2d:cc:50:7a:b4:3e:3c:0e:31:
d7:7f:21:1f:21:43:ab:f0:fe:06:00:ee:47:73:f6:
71:a8:93:8d:21:8b:06:59:f6:ea:ec:30:0d:16:52:
a9:df:20:ba:24:81:48:cf:e5:3f:80:35:7b:85:45:
f1:b9:f0:17:f0:18:98:7a:a0:6d:7a:a8:cd:1a:d0:
46:fb:d6:a7:c1:4e:9a:54:78:98:29:ea:54:e0:e1:
07:22:65:6c:12:21:c5:5a:0f:02:85:35:a6:38:49:
eb:6f:1c:e0:c8:81:13:f4:3d:d9:8b:07:56:a2:8f:
90:4d:0b:dd:8d:c5:3b:b8:6b:0d:d3:fc:93:d3:7b:
08:6f:17:f0:43:0e:91:2e:c8:a4:4c:b9:71:88:73:
dc:67:4b:11:df:68:1d:a1:22:e1:7e:1c:7d:00:e6:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:F3:7E:CB:16:7C:17:14:EA:30:3B:7C:7D:C2:D8:BE:A6:EF:D1
X509v3 Authority Key Identifier:
keyid:53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/B7HzfssWfBcU6jA7fH3C2L6m79E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.89.0/24
91.240.128.0/24
91.240.163.0/24
Signature Algorithm: sha256WithRSAEncryption
03:04:d7:42:4f:00:44:d6:5b:cb:18:2d:26:07:6e:6f:af:75:
18:c6:63:48:6f:65:ad:45:56:60:ce:ce:58:b9:3d:db:37:ba:
a2:24:f8:0d:92:fb:9f:57:25:a0:0c:85:73:04:1a:ea:79:9b:
d2:93:9e:d8:a7:ce:cb:f1:86:40:e1:0e:3a:dc:a6:30:fb:b5:
d8:34:84:ec:17:32:04:32:b7:9d:5d:cd:b2:7a:34:39:86:a2:
2e:47:33:ce:7a:52:66:3d:ad:71:f6:02:d3:15:12:e8:c4:57:
c5:e2:5e:e1:78:5d:28:f0:6b:00:6a:19:d4:5e:de:75:e7:a5:
57:b1:84:f6:7c:25:85:d7:e3:80:6a:f9:61:57:eb:03:a0:80:
72:36:e7:45:d3:62:57:62:05:24:7e:ba:5b:ec:0a:77:c1:20:
e9:64:cb:d7:2d:d5:32:ad:57:b1:80:55:e4:17:93:8a:3c:1e:
ff:d5:7a:7f:7c:7b:2f:e3:d7:62:78:5f:3c:97:1b:e4:fb:d8:
fd:ed:1c:40:ce:a2:6f:ce:33:fc:a2:13:c1:f7:af:1c:05:92:
2b:99:87:e7:aa:84:63:df:0f:8a:18:20:ab:48:4d:d4:05:69:
6e:e7:a5:ee:79:69:32:d3:58:a6:17:5f:9e:6f:a3:32:6e:eb:
fc:ca:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org