Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b619d6-a63e-41cd-8e16-b3268078d31d/1/TCRXrPhMEuOtgkkJnCDBNLWXBzI.roa
File: TCRXrPhMEuOtgkkJnCDBNLWXBzI.roa (raw, json)
Hash identifier: EY48HUWcgexLsc6kB3sJS8uY7ciJ+RieiwTKLArWf/E=
Subject key identifier: 4C:24:57:AC:F8:4C:12:E3:AD:82:49:09:9C:20:C1:34:B5:97:07:32
Certificate issuer: /CN=0b2e05c0fa6bed734be8ef05c51401be840a22cc
Certificate serial: 0186B4
Authority key identifier: 0B:2E:05:C0:FA:6B:ED:73:4B:E8:EF:05:C5:14:01:BE:84:0A:22:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy4FwPpr7XNL6O8FxRQBvoQKIsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b619d6-a63e-41cd-8e16-b3268078d31d/1/TCRXrPhMEuOtgkkJnCDBNLWXBzI.roa
Signing time: Mon 28 Feb 2022 14:48:25 +0000
ROA not before: Mon 28 Feb 2022 14:48:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212833
IP address blocks: 91.223.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100020 (0x186b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2e05c0fa6bed734be8ef05c51401be840a22cc
Validity
Not Before: Feb 28 14:48:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c2457acf84c12e3ad8249099c20c134b5970732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:e2:a8:7e:13:70:a9:9c:e5:98:3a:00:73:
87:56:10:0d:6c:e8:4e:5c:a5:d2:46:20:ed:43:98:
26:9a:d4:9b:1b:3c:b3:c5:f6:8e:dd:60:5a:7d:bc:
53:1a:67:de:db:1b:07:13:77:70:0b:bf:b5:c4:a7:
7a:cf:f9:fa:fe:4c:ef:1f:3b:1e:cb:29:6a:b2:2a:
54:29:4b:f6:1d:b3:2f:b7:39:3b:03:a7:b3:78:bc:
12:e9:76:3e:79:8d:fb:12:a5:47:50:ef:63:78:d5:
09:25:fa:52:82:e2:6e:1f:1f:24:c3:c8:86:7f:79:
88:12:e9:a1:72:59:5a:9a:09:83:1e:74:27:b2:58:
cf:48:0f:5a:98:ac:28:1e:c1:ed:ea:e5:50:5a:77:
c4:1d:f4:28:99:97:9d:9f:7b:e2:52:b2:fd:37:ac:
ed:ab:86:f7:2b:79:0f:3c:20:d1:c8:d0:02:af:c4:
b1:44:23:a9:2c:43:e4:9e:ce:d0:a3:cf:85:31:59:
ad:e5:d8:7e:ba:17:c5:d7:f9:fc:de:00:15:79:86:
47:a5:88:a8:cd:6d:24:d9:63:19:ec:61:3a:99:68:
32:ca:4a:99:c3:d9:1b:69:58:0c:44:0f:7e:ec:7b:
28:64:8e:f6:43:90:dd:4d:79:af:e4:61:b6:b7:2b:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:24:57:AC:F8:4C:12:E3:AD:82:49:09:9C:20:C1:34:B5:97:07:32
X509v3 Authority Key Identifier:
keyid:0B:2E:05:C0:FA:6B:ED:73:4B:E8:EF:05:C5:14:01:BE:84:0A:22:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy4FwPpr7XNL6O8FxRQBvoQKIsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b619d6-a63e-41cd-8e16-b3268078d31d/1/TCRXrPhMEuOtgkkJnCDBNLWXBzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b619d6-a63e-41cd-8e16-b3268078d31d/1/Cy4FwPpr7XNL6O8FxRQBvoQKIsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:cc:36:ab:92:eb:57:25:a2:4f:85:0b:53:20:f3:0f:56:98:
6a:cf:1b:df:66:13:a3:e9:b8:b5:2e:79:04:d8:4d:92:5b:e9:
1f:2e:0d:ec:52:90:da:2a:85:87:30:37:69:9f:12:98:19:56:
65:03:97:19:95:b1:64:d0:f2:24:61:ea:54:6d:fe:e7:fa:54:
02:14:c2:8d:dc:81:22:96:7e:c2:1e:60:85:86:e5:fa:5e:6f:
de:92:40:73:1d:3a:ea:02:98:09:84:ae:0f:0b:34:26:14:2a:
3d:6e:aa:00:69:09:8e:31:e1:00:87:bb:e5:3f:ed:da:70:54:
45:a0:64:97:d0:45:7b:c1:c8:e5:f8:aa:59:88:13:41:48:93:
52:fd:24:82:62:34:85:98:5e:d1:d8:cf:23:f9:5b:b6:51:f6:
4e:b4:64:0b:20:55:a5:b7:c9:31:42:5a:5b:38:12:57:38:94:
33:21:f3:35:5a:96:fb:d5:28:9f:db:2a:26:ae:3f:b6:63:e6:
60:90:1c:9e:c6:f5:40:92:6c:4d:03:67:88:10:a4:4e:64:23:
b1:e9:33:e9:42:b7:92:d8:25:a8:d4:9f:74:29:8e:15:b1:85:
70:5a:18:ee:3e:c5:02:12:da:48:c2:1f:eb:70:70:ba:94:a6:
4d:e0:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org