Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/381f70-3fa4-4b76-af3b-0882c97ef0f2/1/me-hSyo21C0MHx7zEQYrXHXcKl4.roa
File: me-hSyo21C0MHx7zEQYrXHXcKl4.roa (raw, json)
Hash identifier: inoumW7xLGQwgQPIATiEAVy6BNisCb0eqDx9MO9Hdmw=
Subject key identifier: 99:EF:A1:4B:2A:36:D4:2D:0C:1F:1E:F3:11:06:2B:5C:75:DC:2A:5E
Certificate issuer: /CN=3f7ec5e906163c7726193f0d5198daddcfea088d
Certificate serial: 018570704225660A03A4DBBCBFE24FB5AB30
Authority key identifier: 3F:7E:C5:E9:06:16:3C:77:26:19:3F:0D:51:98:DA:DD:CF:EA:08:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P37F6QYWPHcmGT8NUZja3c_qCI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/381f70-3fa4-4b76-af3b-0882c97ef0f2/1/me-hSyo21C0MHx7zEQYrXHXcKl4.roa
Signing time: Mon 02 Jan 2023 03:04:43 +0000
ROA not before: Mon 02 Jan 2023 03:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35196
IP address blocks: 91.132.100.12/32 maxlen: 32
91.132.100.72/32 maxlen: 32
91.132.101.0/24 maxlen: 24
91.132.102.0/24 maxlen: 24
91.132.100.0/24 maxlen: 24
91.132.103.0/24 maxlen: 24
91.132.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:42:25:66:0a:03:a4:db:bc:bf:e2:4f:b5:ab:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7ec5e906163c7726193f0d5198daddcfea088d
Validity
Not Before: Jan 2 03:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99efa14b2a36d42d0c1f1ef311062b5c75dc2a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:d1:81:7c:56:70:94:05:f7:d2:1f:de:d3:
a9:9e:36:e5:2f:8a:b5:61:1a:fd:bf:68:79:ce:bc:
25:5e:bd:10:be:e7:a5:89:93:15:b5:d6:2e:cb:21:
fd:1b:92:9f:a7:53:5c:7b:fb:f1:cb:bb:81:e9:7a:
f1:fa:9d:f9:a7:54:7c:64:20:2c:cb:ed:e3:fd:c8:
e5:39:b7:6f:7b:35:fa:e4:a4:69:c4:50:cd:d4:59:
03:8d:8f:3d:94:f1:53:42:d2:19:03:b7:4e:1a:54:
03:20:3e:40:b6:b9:ec:61:2f:64:e7:5f:2c:bb:9d:
7b:72:cf:08:0d:25:69:04:6a:1a:dd:37:f1:eb:c9:
68:2a:bd:8b:2d:e6:da:a4:3a:e0:61:a7:ed:c3:18:
27:29:e4:a2:cb:ec:0f:0c:d4:73:08:b8:66:84:5e:
f3:ee:20:81:d7:7e:fa:96:59:7a:88:c6:ce:65:a1:
6a:11:6b:d6:ab:38:56:92:27:58:7c:7d:d2:60:6b:
40:a8:05:4a:42:d6:f0:7e:d1:8b:f9:8e:5d:2d:a6:
19:0b:14:37:c9:b3:a5:91:47:c7:16:45:09:35:7d:
34:5a:67:3e:8c:4a:f0:7b:29:c6:7a:31:19:46:87:
f4:ef:b0:e8:53:91:6b:9f:cb:c3:5f:bc:70:f2:5a:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:A1:4B:2A:36:D4:2D:0C:1F:1E:F3:11:06:2B:5C:75:DC:2A:5E
X509v3 Authority Key Identifier:
keyid:3F:7E:C5:E9:06:16:3C:77:26:19:3F:0D:51:98:DA:DD:CF:EA:08:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P37F6QYWPHcmGT8NUZja3c_qCI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/381f70-3fa4-4b76-af3b-0882c97ef0f2/1/me-hSyo21C0MHx7zEQYrXHXcKl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/381f70-3fa4-4b76-af3b-0882c97ef0f2/1/P37F6QYWPHcmGT8NUZja3c_qCI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.100.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ac:6c:de:7a:06:77:4c:a8:f8:ab:78:99:a5:8d:d1:34:8b:
29:5a:0a:5c:b6:48:4b:09:fa:48:4e:00:bf:d5:ff:f4:53:35:
c6:62:f0:e7:8d:6f:c7:03:1f:b9:a3:73:f7:71:38:0a:bf:0f:
e6:16:a0:17:4f:0b:ee:d4:8c:f1:8a:42:64:9c:87:69:73:b4:
5b:b3:3e:63:50:52:23:f8:36:30:18:6a:32:e2:7e:19:a9:eb:
5d:2e:1c:d7:38:98:40:41:b6:b0:ee:08:31:48:95:1a:bb:2a:
d5:cc:89:88:ed:f8:4c:52:35:b5:bb:63:1d:73:b7:b8:86:8f:
3f:82:de:e6:49:f1:41:11:b6:c7:e5:17:49:9d:33:fe:df:42:
dd:f5:21:7a:43:83:fd:8f:44:a2:d4:bb:0d:e9:6a:58:53:32:
47:f4:81:90:b2:af:10:45:c7:b3:d7:a0:0e:36:74:5c:4c:8c:
ac:ec:13:56:fc:00:f3:53:e2:0e:4e:3e:52:5b:42:0c:f3:93:
3e:d6:27:c0:f4:9f:c0:e3:c1:7c:f3:8b:35:3c:1f:53:57:65:
78:7d:f4:fb:f2:87:de:1e:8a:fd:a0:f7:3e:0c:77:c3:28:27:
38:7e:f0:f5:6f:23:21:3e:62:76:2a:81:4c:63:36:59:27:51:
43:48:6e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:31 2024 by rpki-client on console-ams.rpki-client.org