Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/1-FtzV2NYek2rAdH4Sge6cBrb2xU.roa
File: 1-FtzV2NYek2rAdH4Sge6cBrb2xU.roa (raw, json)
Hash identifier: j+R7JNJFsuR+R+g624KzceHmlsEDDydQCR+qLU5+vV8=
Subject key identifier: F8:5B:73:57:63:58:7A:4D:AB:01:D1:F8:4A:07:BA:70:1A:DB:DB:15
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 099CDD4A
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/1-FtzV2NYek2rAdH4Sge6cBrb2xU.roa
Signing time: Wed 09 Feb 2022 16:20:31 +0000
ROA not before: Wed 09 Feb 2022 16:20:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 91.188.252.0/24 maxlen: 24
91.188.253.0/24 maxlen: 24
91.188.254.0/24 maxlen: 24
91.188.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161275210 (0x99cdd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Feb 9 16:20:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f85b735763587a4dab01d1f84a07ba701adbdb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:1a:0f:79:37:58:18:03:4e:f4:43:e8:74:
fd:b8:94:3c:c6:c5:fd:d2:ae:d6:98:4b:28:fe:ca:
95:6e:6b:7b:4f:41:b6:c5:dd:f7:dd:1f:6e:95:34:
c0:8c:7c:80:87:25:34:ee:f7:9a:d7:87:b0:32:7e:
9c:4f:cc:ae:9f:6d:35:43:8d:9b:0e:51:3b:12:f8:
92:42:9e:56:60:20:f8:75:61:15:15:65:ad:4e:23:
91:4f:43:9c:c5:5f:7a:62:2d:63:12:40:af:01:4a:
a9:03:68:7e:19:68:2d:b8:69:c3:c5:d8:ee:7f:67:
75:bd:a2:f7:2a:22:10:55:48:e1:42:57:1b:1d:49:
4e:73:b6:6f:bb:94:12:b5:6c:df:bb:8f:55:f7:8c:
cc:f0:fb:1f:cf:0a:c1:68:8d:be:3c:28:b6:66:ac:
bf:34:02:98:c9:05:a7:97:ec:90:c3:bc:33:7a:47:
81:ba:1b:4c:a1:55:36:13:c0:f5:3d:2c:c3:f3:14:
4a:e6:3b:99:07:6a:b7:ce:37:d5:c9:a1:0b:94:4d:
3a:83:7a:47:7d:e2:d4:72:7c:83:4b:28:fa:f6:16:
e3:2e:33:3e:25:d2:5d:d3:c3:79:17:56:90:33:2c:
c5:bb:52:6d:f5:56:96:82:0c:8a:58:cb:0a:28:ee:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5B:73:57:63:58:7A:4D:AB:01:D1:F8:4A:07:BA:70:1A:DB:DB:15
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/1-FtzV2NYek2rAdH4Sge6cBrb2xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0/22
Signature Algorithm: sha256WithRSAEncryption
17:b1:21:43:81:e2:62:cb:3c:cd:87:d9:ed:ec:41:ad:b8:73:
5c:b5:39:bd:81:0c:87:4d:7e:06:22:ca:34:2a:85:08:af:2e:
dd:01:6e:06:4a:b9:79:5f:6d:44:a4:ac:57:e6:e0:c4:40:d6:
bb:62:5b:fa:2f:74:bf:dd:94:ba:01:7b:42:b7:35:a3:51:42:
50:fa:00:59:c3:0e:64:eb:1c:c7:36:35:e5:d1:40:6a:a4:cc:
f8:64:40:10:7d:13:10:9b:69:19:1b:e1:03:17:18:ec:11:de:
b4:85:27:69:08:58:4e:72:7c:cd:c4:72:bb:86:ab:60:52:f8:
cd:8a:13:46:e2:bc:09:5d:30:57:33:6b:2e:90:b8:b6:70:61:
ce:78:ad:8b:5f:b7:95:62:43:2f:b6:7e:8a:20:24:1d:28:29:
0e:38:0d:04:f5:b7:93:9a:93:7a:99:3b:35:85:05:c6:4e:57:
95:62:88:fc:63:d9:3c:1d:f8:8a:85:f5:42:80:c5:bb:99:86:
78:c5:59:49:a6:e1:07:9c:3b:e5:22:aa:73:52:b8:df:4a:77:
69:ae:e3:be:dc:d8:15:64:7b:39:4d:fd:61:e6:bb:7c:2d:da:
03:df:63:0d:2a:ae:89:6c:05:82:88:1b:b1:f2:b1:c2:ba:32:
4a:c2:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:24 2023 by rpki-client on console-ams.rpki-client.org