Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/6da278-bcd7-4268-ac6e-79e50867d421/1/4XwVkQ-KauiiFldFzkwjTmafMp0.roa
File: 4XwVkQ-KauiiFldFzkwjTmafMp0.roa (raw, json)
Hash identifier: lRDqskg5jRy519UYQ5zkQ9e/ueGH6s+XlBbOJWKYD9g=
Subject key identifier: E1:7C:15:91:0F:8A:6A:E8:A2:16:57:45:CE:4C:23:4E:66:9F:32:9D
Certificate issuer: /CN=27f9c0346ab76050a6b865d8d8a90079d1dcef75
Certificate serial: B573DB
Authority key identifier: 27:F9:C0:34:6A:B7:60:50:A6:B8:65:D8:D8:A9:00:79:D1:DC:EF:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_nANGq3YFCmuGXY2KkAedHc73U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/6da278-bcd7-4268-ac6e-79e50867d421/1/4XwVkQ-KauiiFldFzkwjTmafMp0.roa
Signing time: Sat 01 Jan 2022 03:55:38 +0000
ROA not before: Sat 01 Jan 2022 03:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 91.242.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11891675 (0xb573db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f9c0346ab76050a6b865d8d8a90079d1dcef75
Validity
Not Before: Jan 1 03:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e17c15910f8a6ae8a2165745ce4c234e669f329d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:a2:f6:d3:4d:35:e2:04:93:5c:a6:0d:aa:
29:8b:fb:69:fe:47:ec:2f:a4:0a:63:ec:a2:d4:70:
4b:d2:6e:ae:fd:72:ad:ea:ee:b2:ae:78:70:ab:f9:
30:7a:05:db:3d:9f:30:c5:a0:e0:2c:c0:0f:77:d6:
ae:35:c5:f6:0b:5e:4b:8a:da:a4:f1:7e:71:fc:bf:
2f:2c:04:4e:00:f4:97:fe:b1:c9:d6:e5:5d:e6:61:
0a:b7:c1:b2:02:31:46:20:ee:56:3c:96:9d:97:54:
ab:03:8a:92:68:33:22:89:db:88:ab:f6:6a:4c:a8:
28:29:e2:47:1c:27:72:c0:4d:46:5e:ec:2b:2b:a7:
53:a7:64:83:54:5f:ef:91:62:40:31:25:ee:ef:f5:
a8:26:3b:af:5b:87:d0:f2:3e:1d:1c:3e:47:be:fc:
a9:62:49:f3:f7:c8:e7:36:4a:ec:66:b9:31:e1:39:
17:47:b3:55:61:23:7a:96:39:22:7f:6b:2b:2a:e0:
35:b8:a1:54:6e:2b:58:3f:fd:9e:3b:86:21:8e:b5:
90:df:6c:af:66:a0:b5:05:1d:9d:92:09:4b:49:e4:
b1:c4:37:3c:97:30:8e:a8:64:05:0d:09:81:92:32:
4e:1a:30:c5:99:dc:c0:86:be:b6:ed:fa:ee:da:0d:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:15:91:0F:8A:6A:E8:A2:16:57:45:CE:4C:23:4E:66:9F:32:9D
X509v3 Authority Key Identifier:
keyid:27:F9:C0:34:6A:B7:60:50:A6:B8:65:D8:D8:A9:00:79:D1:DC:EF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_nANGq3YFCmuGXY2KkAedHc73U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6da278-bcd7-4268-ac6e-79e50867d421/1/4XwVkQ-KauiiFldFzkwjTmafMp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6da278-bcd7-4268-ac6e-79e50867d421/1/J_nANGq3YFCmuGXY2KkAedHc73U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.241.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f2:2a:c8:e8:68:02:77:0f:cd:3c:7a:15:6c:d7:a1:e0:64:
e2:c0:9d:1d:11:ef:71:37:95:bc:a1:c0:96:4c:dc:f2:5f:eb:
f4:d5:55:c3:c2:4d:61:a3:a4:5c:86:bd:f5:34:3d:60:ce:de:
ad:54:ec:3a:07:b0:53:4a:8d:37:bc:bb:64:cc:f4:6e:ac:6d:
96:b7:5d:94:4b:18:a0:bf:87:a6:4d:86:b1:4d:88:91:17:3c:
43:f2:9e:3d:71:1c:1a:24:2b:a6:03:f9:40:f3:32:c8:4e:54:
17:a1:2d:09:6a:b0:89:5c:f0:f9:47:9e:21:4e:1b:00:f3:0a:
80:51:71:66:5b:8b:5b:bf:4f:18:ec:f5:b8:07:7e:5f:c5:d4:
bb:db:7e:3c:26:44:2e:42:ea:1a:28:78:57:89:9b:9a:1f:02:
8f:d2:59:0f:a6:d7:3a:12:eb:0f:6e:5c:77:a4:26:cd:96:6e:
e7:60:81:8e:a0:22:9d:f7:ea:4c:92:7e:07:2f:64:ac:b3:fb:
19:56:fd:c4:56:5d:36:55:03:21:c4:53:3a:56:f2:1a:25:44:
79:a0:48:1e:dc:9b:2d:45:9d:33:4e:3e:08:93:c0:66:fb:88:
46:59:98:c6:b1:14:6e:1c:8c:6c:c5:c0:34:50:e2:d1:59:79:
dd:92:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org