Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/7B4ndgAV0nsVlU1OPySR0K_p_yU.roa
File: 7B4ndgAV0nsVlU1OPySR0K_p_yU.roa (raw, json)
Hash identifier: Wu8Cu8RW4fMOGPW8+/09+GK9FkXbfgINvOWiNTFdy+w=
Subject key identifier: EC:1E:27:76:00:15:D2:7B:15:95:4D:4E:3F:24:91:D0:AF:E9:FF:25
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0185710C257BA6FC8DDAEA2E8ADEAE6329D3
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/7B4ndgAV0nsVlU1OPySR0K_p_yU.roa
Signing time: Mon 02 Jan 2023 05:54:59 +0000
ROA not before: Mon 02 Jan 2023 05:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204729
IP address blocks: 91.188.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:25:7b:a6:fc:8d:da:ea:2e:8a:de:ae:63:29:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Jan 2 05:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec1e27760015d27b15954d4e3f2491d0afe9ff25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:4b:fc:17:f2:c4:db:21:4d:cc:c4:18:e8:
b3:31:56:b9:cf:ad:15:2f:c0:e6:67:88:fa:5c:a7:
44:12:38:07:8e:38:41:13:25:70:e8:5c:4b:86:81:
22:dc:1e:46:01:1f:33:d0:aa:72:2b:88:e6:a4:34:
47:a7:2f:83:47:80:61:a5:8c:a2:23:f5:7b:c2:b5:
c1:df:91:29:86:28:15:0f:29:bc:ce:24:05:05:25:
5b:a5:a0:a1:3f:4e:c1:81:13:c6:f0:f9:dc:74:00:
c0:19:61:08:c3:1e:ce:91:fc:be:46:a2:2b:0e:26:
52:9e:36:6f:79:7e:3d:23:5e:96:28:16:86:37:ae:
3d:86:c6:4d:1f:a9:9a:f3:a4:78:96:16:89:5a:f1:
a5:81:9e:2e:ee:56:b4:3f:16:02:f2:fc:5b:38:f8:
ea:bc:a9:1c:91:21:0c:3b:f6:76:f2:a9:bd:97:1c:
3a:bf:18:e1:b5:e0:ed:27:de:0e:24:f1:c3:73:44:
85:b4:09:48:1e:62:e8:0f:62:90:c2:e1:30:92:0a:
92:6c:8b:4f:cf:69:3b:98:2f:83:f4:e4:a7:96:68:
f5:45:20:05:c5:e0:02:10:7b:66:3d:52:b4:b6:68:
db:e1:68:1d:9a:b0:b5:41:8f:c7:7b:04:3b:ca:b1:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1E:27:76:00:15:D2:7B:15:95:4D:4E:3F:24:91:D0:AF:E9:FF:25
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/7B4ndgAV0nsVlU1OPySR0K_p_yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:bd:66:b0:31:73:c5:f5:d6:65:2c:d8:5a:40:ee:1d:dc:31:
07:b0:f6:6e:0b:6e:73:b8:61:61:b1:9f:c2:2d:6e:f9:2a:08:
c4:a0:38:ad:90:4a:c6:fd:0c:65:34:8c:27:d1:6b:26:b8:7f:
33:ba:9b:eb:8c:51:5c:b5:9a:7a:41:83:1c:ed:c3:d1:e8:b4:
59:e1:fd:28:b6:d2:95:b0:98:5b:ec:8d:a6:6f:41:ee:af:11:
b0:26:20:66:f2:73:5d:96:e7:b8:b8:ad:d8:42:bb:56:1c:a7:
47:38:23:e3:55:da:2f:94:49:ef:58:12:42:5a:b6:d9:39:6c:
ba:db:b3:2a:a3:e4:11:d9:d2:d3:a4:1c:53:3c:d7:e8:b3:4d:
93:5b:fc:e9:ab:9a:d1:e3:ed:5b:f5:0b:3b:fe:5b:77:c0:72:
bb:d2:b1:9e:0f:33:7a:e3:aa:4e:f8:6a:bd:50:ab:71:fd:6a:
c0:ce:a5:1e:77:ce:f7:95:63:7f:2f:fa:5d:ab:9a:b9:66:16:
11:f3:e2:f4:00:cb:11:9f:ca:28:58:c9:43:59:73:ed:25:ed:
ce:9b:4a:c1:3b:99:5a:11:d2:43:bf:6b:10:f1:9d:e2:20:10:
3e:14:61:0f:fe:8a:d1:d3:c4:18:d9:ee:da:b4:f2:ee:21:ef:
23:52:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-fra.rpki-client.org