Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbbe76-6b6f-43dc-a71a-591b7281d01a/1/IMjWOdSy7Aml9mlhKv4xPtXsQl4.roa
File: IMjWOdSy7Aml9mlhKv4xPtXsQl4.roa (raw, json)
Hash identifier: otP1UEfvh/og0oFJV7zVP/7XO21TDEdMph2I0MXDODg=
Subject key identifier: 20:C8:D6:39:D4:B2:EC:09:A5:F6:69:61:2A:FE:31:3E:D5:EC:42:5E
Certificate issuer: /CN=d83e2be6a99276e70d340c6580d75f613cd9b9ab
Certificate serial: 018572D5CC73B2336256C4DB3D7CE18E9FD4
Authority key identifier: D8:3E:2B:E6:A9:92:76:E7:0D:34:0C:65:80:D7:5F:61:3C:D9:B9:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D4r5qmSducNNAxlgNdfYTzZuas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbbe76-6b6f-43dc-a71a-591b7281d01a/1/IMjWOdSy7Aml9mlhKv4xPtXsQl4.roa
Signing time: Mon 02 Jan 2023 14:14:52 +0000
ROA not before: Mon 02 Jan 2023 14:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:cc:73:b2:33:62:56:c4:db:3d:7c:e1:8e:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83e2be6a99276e70d340c6580d75f613cd9b9ab
Validity
Not Before: Jan 2 14:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20c8d639d4b2ec09a5f669612afe313ed5ec425e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:0d:88:59:6e:9b:9e:ab:38:21:ba:4e:ac:
53:c5:6a:63:11:e4:74:9d:4e:b2:12:95:a9:fb:dc:
7f:95:b5:7a:2d:73:c6:a3:26:71:ba:46:62:0d:e1:
92:fb:56:bb:f9:1d:fb:34:75:6a:a0:6c:8c:13:3d:
af:16:fe:69:d7:ca:e2:67:ee:b4:20:bf:21:6a:30:
1b:d4:b5:bf:57:2c:34:17:03:e2:99:8b:3a:01:3d:
bf:58:c7:47:1f:1a:2f:48:b3:85:fc:92:28:e7:cb:
a7:34:13:d9:64:1e:6d:d2:45:50:30:7d:8d:ae:c5:
ca:ca:a6:fc:ec:87:62:ec:40:ee:83:e3:36:81:56:
dc:d5:3b:ca:41:69:6c:f0:7f:e2:41:b9:f0:c8:92:
43:25:4a:d9:5f:27:89:de:4f:4a:b3:97:90:23:c9:
54:61:b6:df:54:39:50:2a:02:42:1c:32:e5:00:f7:
84:af:14:75:a4:b0:46:ca:d9:6f:bb:1f:fb:05:b6:
10:a3:eb:16:f9:0f:d6:eb:00:d8:cc:fe:d9:a0:3a:
a3:89:45:35:b6:88:40:9d:35:36:48:49:e0:0f:4e:
36:ee:b7:81:56:56:58:1a:bc:22:54:cc:e1:b3:17:
3c:82:42:d7:bd:23:97:b2:af:0a:2f:42:9d:dd:4e:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:D6:39:D4:B2:EC:09:A5:F6:69:61:2A:FE:31:3E:D5:EC:42:5E
X509v3 Authority Key Identifier:
keyid:D8:3E:2B:E6:A9:92:76:E7:0D:34:0C:65:80:D7:5F:61:3C:D9:B9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D4r5qmSducNNAxlgNdfYTzZuas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbbe76-6b6f-43dc-a71a-591b7281d01a/1/IMjWOdSy7Aml9mlhKv4xPtXsQl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbbe76-6b6f-43dc-a71a-591b7281d01a/1/2D4r5qmSducNNAxlgNdfYTzZuas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:38:f0:b2:c3:6a:1a:7a:3a:92:cd:f3:ec:28:35:c6:85:6d:
26:16:f3:06:f8:98:5e:ae:a3:25:5b:6d:4b:14:dd:5f:60:60:
6e:b8:13:89:34:1f:45:41:9f:df:c3:d5:7a:2f:15:5f:96:df:
b8:f8:11:d4:6c:b4:53:26:1e:95:5f:45:d6:50:bd:ee:b0:46:
55:b9:a0:4c:3d:f5:fc:e1:c3:94:81:9c:e8:d2:ba:c1:de:48:
da:3b:5f:1f:f7:9d:95:a0:84:90:08:cd:79:9a:1b:43:84:6c:
9e:fd:a2:7a:00:e5:0e:c3:80:f3:e7:3a:45:c5:66:8b:16:70:
5a:31:5d:4e:6f:f8:e0:bf:b9:ce:74:ae:92:1e:04:4e:58:6b:
64:a1:5a:5d:71:25:cd:90:27:f5:39:18:82:84:87:bf:d6:7d:
8e:04:0a:0c:ce:e5:be:74:7c:50:23:a8:38:f2:08:8a:d9:31:
f7:b8:a9:af:65:d2:b4:df:29:ad:80:e6:86:c5:72:06:dc:74:
55:e0:ec:99:56:de:16:a4:1c:7b:20:e8:f2:9a:45:0b:b0:c5:
fb:ba:ba:08:05:da:2f:15:48:e3:36:eb:c7:49:de:4b:8b:7b:
51:c5:67:2a:eb:28:ba:5b:bb:1c:86:9c:13:38:2a:cf:3a:6b:
e5:9d:b9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 16:32:49 2023 by rpki-client on console-ams.rpki-client.org