Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/91gdhfv13kSMjLH1PuFy5GlGbPY.roa
File: 91gdhfv13kSMjLH1PuFy5GlGbPY.roa (raw, json)
Hash identifier: 5fQ3iVWzOIh8uD3y4X12nqU7wd6r3poio/exIwGo7aY=
Subject key identifier: F7:58:1D:85:FB:F5:DE:44:8C:8C:B1:F5:3E:E1:72:E4:69:46:6C:F6
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0A50FBA0
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/91gdhfv13kSMjLH1PuFy5GlGbPY.roa
Signing time: Sat 30 Apr 2022 18:24:39 +0000
ROA not before: Sat 30 Apr 2022 18:24:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.188.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173079456 (0xa50fba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Apr 30 18:24:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7581d85fbf5de448c8cb1f53ee172e469466cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:e5:7c:61:9c:5f:c1:a2:e2:fe:7c:13:4d:
fd:92:a6:f0:c8:95:32:2d:ec:19:43:90:f1:ff:4b:
d0:44:b4:5e:c3:e8:67:64:7e:a9:a5:99:e5:e0:15:
8e:cc:6b:3e:d5:42:8b:94:91:e3:67:18:b0:29:b2:
81:b2:9f:e5:9d:68:98:61:a6:1c:39:df:86:14:4a:
9a:66:1e:fd:60:16:cc:77:4d:0d:6c:91:f6:70:aa:
a6:fb:99:f1:0b:7f:85:2d:40:b5:dd:ef:78:33:b4:
8d:ec:9b:29:e1:b6:4b:b2:b4:70:c5:b8:2f:14:4a:
92:62:4a:40:19:34:f0:d1:a6:ec:96:29:d5:31:2d:
d9:ec:ce:77:80:43:9f:c8:95:6c:3a:a1:b4:72:d9:
6b:f2:b6:b8:14:c6:75:d6:ad:61:03:60:4d:f5:69:
34:d3:f6:00:ff:da:b7:92:23:83:1c:26:ac:16:23:
5d:6a:d4:50:1c:b0:51:b2:d4:6a:3f:ca:23:dc:98:
8b:f4:55:27:67:97:95:07:64:6d:6f:d6:52:d8:5d:
04:66:2d:95:c3:99:f0:a7:3f:2e:15:4e:25:47:74:
6c:87:43:df:dc:dc:5c:3a:d6:0d:e6:19:9e:f2:2c:
08:3c:b5:70:50:4a:67:fd:55:b3:d7:29:3c:d7:f0:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:1D:85:FB:F5:DE:44:8C:8C:B1:F5:3E:E1:72:E4:69:46:6C:F6
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/91gdhfv13kSMjLH1PuFy5GlGbPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.255.0/24
Signature Algorithm: sha256WithRSAEncryption
22:55:00:23:0f:d8:5b:f5:e3:11:6b:79:4f:53:be:a0:94:e8:
07:04:73:73:a4:bd:fe:32:cf:ff:12:cb:dd:eb:3e:db:b3:00:
f4:30:6a:8d:bd:17:fd:97:63:e3:47:87:35:f3:9a:ca:1a:34:
4c:82:0f:8c:c2:23:0d:b3:2b:70:cf:4a:58:37:5f:61:a3:cd:
bd:55:3d:6f:f8:78:31:0a:8c:7a:1c:f6:f5:06:f5:3c:13:ba:
81:75:bf:de:6f:7a:55:f4:2b:1d:36:46:94:4b:65:bb:7d:59:
bd:97:84:33:79:6c:3e:56:fe:90:91:1e:98:b9:89:13:c1:b1:
83:b6:64:49:9e:72:8f:b9:12:eb:6e:85:80:de:e7:13:32:54:
f6:cc:31:67:44:3f:ed:ca:bb:36:6b:d1:e4:b2:a0:47:5f:e0:
89:9f:31:0e:b2:1d:42:53:fb:13:b9:ed:bf:0e:72:0c:df:15:
71:1a:29:4a:3c:62:5b:83:f0:05:fe:5f:8c:f2:f1:5e:94:8d:
c8:6c:e2:3b:9d:0f:66:3e:a2:77:d6:a5:54:c4:24:9b:b8:03:
f9:78:da:a6:51:90:ca:8f:00:6d:48:06:ce:96:4c:a7:f3:62:
bb:60:dc:c1:6b:b9:20:67:74:fe:8c:0f:15:c7:7e:f4:4d:a5:
12:3a:00:33
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEClD7oDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZjM2ZWQzMzc1YTZhODk1Y2FkZDQ5ZTBlY2Q0Mjk5NDU0YjNiODljMB4XDTIyMDQz
MDE4MjQzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjc1ODFkODVmYmY1
ZGU0NDhjOGNiMWY1M2VlMTcyZTQ2OTQ2NmNmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5i5XxhnF/BouL+fBNN/ZKm8MiVMi3sGUOQ8f9L0ES0XsPo
Z2R+qaWZ5eAVjsxrPtVCi5SR42cYsCmygbKf5Z1omGGmHDnfhhRKmmYe/WAWzHdN
DWyR9nCqpvuZ8Qt/hS1Atd3veDO0jeybKeG2S7K0cMW4LxRKkmJKQBk08NGm7JYp
1TEt2ezOd4BDn8iVbDqhtHLZa/K2uBTGddatYQNgTfVpNNP2AP/at5IjgxwmrBYj
XWrUUBywUbLUaj/KI9yYi/RVJ2eXlQdkbW/WUthdBGYtlcOZ8Kc/LhVOJUd0bIdD
39zcXDrWDeYZnvIsCDy1cFBKZ/1Vs9cpPNfwapcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT3WB2F+/XeRIyMsfU+4XLkaUZs9jAfBgNVHSMEGDAWgBT/Nu0zdaaolcrd
SeDs1CmUVLO4nDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L196YnRNM1dtcUpYSzNVbmc3TlFwbEZTenVKdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvM2JjODQwLTgzMjktNDM4OS1hMzRiLWVjMTkwYjFjZWFjYS8x
LzkxZ2RoZnYxM2tTTWpMSDFQdUZ5NUdsR2JQWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
M2JjODQwLTgzMjktNDM4OS1hMzRiLWVjMTkwYjFjZWFjYS8xL196YnRNM1dtcUpY
SzNVbmc3TlFwbEZTenVKdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFu8/zANBgkqhkiG9w0BAQsFAAOC
AQEAIlUAIw/YW/XjEWt5T1O+oJToBwRzc6S9/jLP/xLL3es+27MA9DBqjb0X/Zdj
40eHNfOayho0TIIPjMIjDbMrcM9KWDdfYaPNvVU9b/h4MQqMehz29Qb1PBO6gXW/
3m96VfQrHTZGlEtlu31ZvZeEM3lsPlb+kJEemLmJE8Gxg7ZkSZ5yj7kS626FgN7n
EzJU9swxZ0Q/7cq7NmvR5LKgR1/giZ8xDrIdQlP7E7ntvw5yDN8VcRopSjxiW4Pw
Bf5fjPLxXpSNyGziO50PZj6id9alVMQkm7gD+XjaplGQyo8AbUgGzpZMp/Niu2Dc
wWu5IGd0/owPFcd+9E2lEjoAMw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-fra.rpki-client.org