Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/5kh7Y-BXtcpQVIt0z05WRCK2JH0.roa
File: 5kh7Y-BXtcpQVIt0z05WRCK2JH0.roa (raw, json)
Hash identifier: wMsIFfYFzKgwxjrZMwPDkwP4P6qf+1l7hrPUFeTi7cs=
Subject key identifier: E6:48:7B:63:E0:57:B5:CA:50:54:8B:74:CF:4E:56:44:22:B6:24:7D
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0185710C2664BF205D1B6E8C4A939637E46E
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/5kh7Y-BXtcpQVIt0z05WRCK2JH0.roa
Signing time: Mon 02 Jan 2023 05:54:59 +0000
ROA not before: Mon 02 Jan 2023 05:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 91.188.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:26:64:bf:20:5d:1b:6e:8c:4a:93:96:37:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Jan 2 05:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6487b63e057b5ca50548b74cf4e564422b6247d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:31:e9:18:7b:c0:b0:9f:0d:86:e0:13:46:
86:29:ef:02:e3:bf:a0:be:00:3a:86:35:f4:82:51:
d4:f7:1e:c4:2c:39:ca:cc:d1:6b:12:99:f8:ae:30:
d2:76:55:b2:fe:d1:9d:ee:95:bf:5e:8d:da:f6:74:
cc:33:b9:48:7b:61:9c:36:3c:aa:26:a3:94:fd:0b:
ba:bc:0c:48:e0:6a:d7:63:b5:66:ad:3e:fb:14:bb:
4c:2d:6b:6d:3b:3c:d4:5f:24:fe:56:d0:4c:22:f3:
79:de:23:dc:84:cb:1a:3a:04:cf:a2:fb:0d:23:e8:
9a:ef:b7:9d:ee:ba:4c:49:0c:17:6f:b8:50:eb:63:
3a:6a:f6:b1:02:fd:6d:bf:cd:69:91:24:6f:4a:67:
9d:ca:e3:26:14:08:26:0a:88:cd:0f:44:e1:b2:47:
ae:16:52:56:c9:bb:89:b3:ab:e9:db:0c:c1:fc:2a:
bf:c2:05:6a:ef:3a:af:9d:58:a1:16:8b:74:14:21:
70:16:9f:15:64:70:db:33:01:f3:f0:fa:0b:6c:66:
f5:98:bf:5a:96:cb:58:16:3d:ea:ee:66:41:42:c3:
a2:ea:9b:04:52:2f:2d:9d:28:00:4f:6a:a7:79:6b:
c8:42:cd:25:59:fc:22:b7:75:ff:1b:bd:e6:ee:6a:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:7B:63:E0:57:B5:CA:50:54:8B:74:CF:4E:56:44:22:B6:24:7D
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/5kh7Y-BXtcpQVIt0z05WRCK2JH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.255.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ea:4d:74:7f:39:b3:47:e0:1d:a0:d1:c5:1c:b5:6a:33:0e:
9a:91:eb:15:bf:d6:37:87:38:e8:24:2c:d6:8f:ed:91:0c:c2:
d8:f3:37:31:25:73:cf:ce:c5:c0:ea:9c:f8:ed:d0:ed:a9:39:
de:19:82:a6:79:0a:2e:3c:c9:92:56:2a:f5:3d:61:d2:5e:53:
43:4f:55:a3:42:a3:fb:17:ab:a7:ec:06:ac:bf:92:dc:68:1c:
dc:9c:09:c5:21:87:4a:2f:9d:da:04:ee:d0:d4:7b:52:c8:36:
cb:f3:c0:db:f9:5f:00:03:d8:16:71:10:d4:78:8c:ce:05:b8:
b0:9a:30:a4:18:af:1e:44:fd:f3:89:9b:14:af:43:b3:fa:8f:
30:5a:34:c4:a7:3b:2b:0a:a2:54:40:d5:a6:e8:67:aa:1f:00:
6c:07:8e:94:ab:ab:a9:75:3d:b5:1a:e0:ef:3e:b4:13:50:d9:
56:85:1f:25:0e:2d:63:6e:63:45:b3:44:f7:16:72:80:2e:a8:
d4:a3:25:68:f5:9b:1a:3e:d1:af:1c:75:6a:33:2a:71:e4:55:
41:c2:12:6c:58:73:99:21:a5:49:c1:fe:f9:83:ba:c4:6e:f7:
b5:20:c5:5f:ba:1c:bc:f1:82:35:71:7d:b3:b0:be:14:a0:fb:
58:fb:01:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org