Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/dw1LRp5hCJKM1n3F8BIiqPsQYjc.roa
File: dw1LRp5hCJKM1n3F8BIiqPsQYjc.roa (raw, json)
Hash identifier: OhmZpFhrWat/wTeyZ7YXBaO/ALJT8C7U4BW2XZsUJPk=
Subject key identifier: 77:0D:4B:46:9E:61:08:92:8C:D6:7D:C5:F0:12:22:A8:FB:10:62:37
Certificate issuer: /CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Certificate serial: 018B3A51B71A7839C8DB31E173DF2DAC91C1
Authority key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/dw1LRp5hCJKM1n3F8BIiqPsQYjc.roa
Signing time: Mon 16 Oct 2023 21:08:35 +0000
ROA not before: Mon 16 Oct 2023 21:08:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 91.202.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:51:b7:1a:78:39:c8:db:31:e1:73:df:2d:ac:91:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Validity
Not Before: Oct 16 21:08:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=770d4b469e6108928cd67dc5f01222a8fb106237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:5c:75:aa:9b:6d:02:2f:41:06:8d:5b:92:
d3:47:bd:bb:e8:85:c1:19:fc:2d:ea:72:f3:c3:3b:
ac:e2:3b:dc:ba:4f:46:ed:83:56:6a:45:e4:05:b2:
5f:44:f5:15:60:c3:32:4f:c7:bd:c6:eb:46:27:70:
eb:c6:f6:e5:53:be:9f:c8:5b:43:18:c7:46:0f:a2:
fb:5a:b6:d3:f2:e0:aa:65:26:ed:b0:27:37:46:b6:
0b:dd:35:e1:fa:f4:ca:56:c1:a6:dc:e9:09:46:db:
de:88:37:9f:ee:d0:13:60:98:b8:0b:02:4c:26:23:
6b:a0:bf:46:e8:23:11:7f:6c:1a:7f:72:e3:2c:2c:
d4:2c:36:a5:69:51:5c:da:8a:e2:b5:81:d8:de:6a:
cd:26:b4:29:37:a5:84:bd:11:7e:ad:69:64:46:27:
da:49:a9:7c:66:c1:78:a7:65:da:15:44:b3:a3:1e:
91:f4:0f:fc:d3:dc:fc:fd:29:9c:82:2f:37:5a:7a:
39:01:f5:74:ae:b5:1e:c8:ef:2d:ff:90:9b:76:a2:
c1:d3:af:21:2c:43:00:7b:c0:26:39:b9:25:48:1b:
b7:21:85:a1:c4:b3:1e:e0:87:60:7f:56:12:de:75:
cf:06:cf:d3:19:fd:5a:ac:cd:55:d1:e6:99:ed:50:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0D:4B:46:9E:61:08:92:8C:D6:7D:C5:F0:12:22:A8:FB:10:62:37
X509v3 Authority Key Identifier:
keyid:69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/dw1LRp5hCJKM1n3F8BIiqPsQYjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f8:da:0a:b4:4e:e8:99:be:d4:8c:20:0b:f1:3a:eb:6f:a9:
6a:b0:b9:88:68:59:88:d6:fb:b1:5f:f7:11:96:1f:c3:38:37:
f1:d6:fa:d3:4f:e5:71:49:ea:03:c9:3b:c5:19:5d:0b:81:f1:
5b:8f:b2:24:8d:e2:38:d4:4f:2f:50:54:05:22:d6:17:53:59:
12:7b:e5:89:11:b6:83:2a:34:c3:83:f0:ce:b9:29:9e:d2:ce:
8c:2e:72:e1:f3:19:28:69:e1:d7:cf:53:6c:ed:ac:31:67:f7:
5d:69:f6:90:0c:37:ad:8b:cc:d5:86:07:f5:90:18:cb:8d:2f:
b7:a2:70:db:a0:1f:9d:ec:bc:03:1c:76:5d:8c:61:03:87:bf:
0e:da:4b:5b:0f:68:f6:47:39:93:dd:0c:76:11:c5:a5:08:b6:
88:ef:ae:e6:96:9c:32:c2:61:ea:17:a8:f6:ad:39:4d:7b:0d:
b5:12:e4:4c:f8:fd:54:e2:bd:93:ae:e7:d3:f6:1d:dc:0b:88:
81:3a:bd:00:79:ac:76:51:4d:b2:2e:26:a1:ca:53:ac:d5:00:
ad:fe:45:97:9b:dc:26:e0:98:25:d0:08:f9:98:c2:6e:08:9f:
dc:87:64:15:a4:60:98:e6:55:4b:fd:5c:ae:b2:da:4c:9c:52:
c9:b5:aa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:45 2024 by rpki-client on console-ams.rpki-client.org