Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/qabp0Lnu7fPbDi1WnUSX9TaN7eo.roa
File: qabp0Lnu7fPbDi1WnUSX9TaN7eo.roa (raw, json)
Hash identifier: Y4ho7Br22DbvowFLEL3J2lX71XKaZ8w/zQmCprwIV+g=
Subject key identifier: A9:A6:E9:D0:B9:EE:ED:F3:DB:0E:2D:56:9D:44:97:F5:36:8D:ED:EA
Certificate issuer: /CN=01a20abc10c468cb9943bd037ecf8c3e24efa201
Certificate serial: 019306F15C9B576A33F4FC4E440ADA9BD993
Authority key identifier: 01:A2:0A:BC:10:C4:68:CB:99:43:BD:03:7E:CF:8C:3E:24:EF:A2:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/qabp0Lnu7fPbDi1WnUSX9TaN7eo.roa
Signing time: Thu 07 Nov 2024 14:05:01 +0000
ROA not before: Thu 07 Nov 2024 14:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201450
IP address blocks: 91.208.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:f1:5c:9b:57:6a:33:f4:fc:4e:44:0a:da:9b:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a20abc10c468cb9943bd037ecf8c3e24efa201
Validity
Not Before: Nov 7 14:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9a6e9d0b9eeedf3db0e2d569d4497f5368dedea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:09:c2:55:46:b6:b6:50:ac:b1:35:73:59:
52:d4:ff:26:31:94:1b:55:c3:92:a9:6a:db:be:ff:
ac:f1:b8:26:44:62:38:82:75:c2:19:8c:6c:90:46:
11:51:35:8f:80:91:cb:2e:e9:4c:23:db:9e:40:c1:
14:27:55:94:4e:03:41:ce:bb:a7:57:02:aa:89:3d:
8a:80:41:ca:3a:ae:fb:e4:68:53:c4:7e:7c:be:09:
16:99:d2:db:f7:55:1d:a7:99:b4:25:aa:cb:74:f4:
46:09:ec:b7:4f:8d:83:b1:fc:5f:37:bf:a0:98:b3:
ed:5e:53:19:41:3d:9e:5d:6e:12:2a:04:51:39:df:
e2:17:45:9a:06:6a:31:fa:ca:e1:3c:c8:c3:07:e6:
58:c6:e0:46:d6:bd:bf:0a:fe:45:2c:bc:3a:9a:69:
de:d3:23:86:59:83:d5:30:47:48:02:12:80:80:e4:
d0:27:d6:70:5f:c1:c9:ee:18:a6:de:64:1a:61:68:
6f:56:c6:ee:58:7b:63:e8:8c:71:5c:2e:fe:cf:0d:
db:b7:6e:94:cb:b1:cf:28:10:39:da:e2:8a:e4:d0:
d9:a0:c4:3a:a0:27:62:fb:a0:15:60:d8:62:8a:ab:
2c:13:41:e9:2d:96:09:a4:9a:da:51:d0:47:1d:c1:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A6:E9:D0:B9:EE:ED:F3:DB:0E:2D:56:9D:44:97:F5:36:8D:ED:EA
X509v3 Authority Key Identifier:
keyid:01:A2:0A:BC:10:C4:68:CB:99:43:BD:03:7E:CF:8C:3E:24:EF:A2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/qabp0Lnu7fPbDi1WnUSX9TaN7eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.36.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c4:b4:1e:c9:28:63:3a:c1:62:f8:88:31:49:00:de:71:c3:
3d:8c:f9:a9:9f:44:05:b5:03:a7:41:20:f3:2d:a5:76:75:91:
e0:f2:0c:08:ba:21:ea:7f:00:00:84:2b:64:82:63:1f:df:7a:
b8:7d:ab:b4:70:a7:87:c5:4e:3f:06:62:c5:87:14:05:06:c4:
3a:8d:88:82:48:68:00:ca:84:9a:6f:0d:c3:29:60:9c:27:48:
da:1b:2f:29:d5:48:96:0d:c9:9b:6f:3f:f3:c0:a7:20:cf:34:
bc:fe:34:c4:71:09:16:d7:7e:88:99:d5:37:79:ec:46:b3:98:
9c:c6:62:02:31:b0:18:59:fc:a1:95:4f:7d:39:c3:ca:7c:1a:
f6:ac:ae:d7:09:68:2f:ea:6d:a6:f7:4b:41:24:e9:1d:b9:bb:
c8:65:78:81:f3:89:f9:c6:dc:9f:ab:0a:8d:8c:cb:f4:8b:3d:
7e:f6:12:58:11:e0:a6:82:28:ef:3d:cd:99:8f:f3:b9:b4:d2:
ab:24:fe:b6:79:55:2f:a0:2f:94:8a:7a:86:83:7a:48:8f:0d:
8e:79:d7:3d:8b:ba:b5:fd:6c:c7:3f:c6:09:d8:e8:82:ff:d3:
f5:39:d8:c0:e7:1b:a7:1e:df:29:a8:4f:50:5c:fb:25:50:18:
50:37:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 16:39:59 2024 by rpki-client on console-ams.rpki-client.org