Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/E9YE3yoSRY9cIpz4_dcoOYK1XeY.roa
File: E9YE3yoSRY9cIpz4_dcoOYK1XeY.roa (raw, json)
Hash identifier: GQG3O2RuGmmsifZrh89uFRk3Wqij2OWHyoJsKnYsDRQ=
Subject key identifier: 13:D6:04:DF:2A:12:45:8F:5C:22:9C:F8:FD:D7:28:39:82:B5:5D:E6
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 09A843F8
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/E9YE3yoSRY9cIpz4_dcoOYK1XeY.roa
Signing time: Mon 14 Feb 2022 11:05:38 +0000
ROA not before: Mon 14 Feb 2022 11:05:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.188.253.0/24 maxlen: 24
91.188.252.0/24 maxlen: 24
91.188.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162022392 (0x9a843f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Feb 14 11:05:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13d604df2a12458f5c229cf8fdd7283982b55de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:db:3c:ea:5e:2f:4f:2e:55:b1:00:e0:4e:
c2:b2:98:d8:dd:40:41:8d:5b:0d:8e:9d:25:84:f5:
46:db:f2:55:54:51:2f:93:b7:b8:ea:e0:09:f6:6d:
a5:21:15:91:b8:4c:a3:5d:cc:4c:db:6d:60:26:f4:
85:fc:38:e9:96:83:b9:e9:81:de:d7:a6:d0:16:37:
3a:e9:a0:18:64:e4:44:a9:8e:89:2f:69:76:5a:94:
8b:36:2f:41:dd:73:48:71:4d:94:bd:e9:ee:03:61:
fb:95:fb:51:16:8f:54:3d:34:b1:46:e1:18:79:c1:
dc:72:a3:fc:f2:bd:de:fa:a5:3e:be:64:ba:0a:31:
dc:1b:5e:9c:dd:f7:6c:a4:a1:98:0c:1f:4b:09:46:
5c:8c:bf:9c:00:2a:98:08:2a:69:a2:3d:57:c9:73:
14:1e:89:7b:07:18:40:a9:36:d3:b1:bf:6f:d6:b4:
98:55:66:49:90:d8:38:1a:ad:fa:c6:8c:bd:d8:9e:
b3:e8:a3:04:ec:02:55:e3:b7:c4:e5:67:fe:4c:02:
f8:ea:08:f4:72:b5:e6:e3:af:6a:e3:de:39:9f:a6:
53:62:25:72:4a:a5:c6:b0:c0:d3:0f:1f:1d:ff:61:
7b:73:f8:ec:6d:4e:f7:07:f6:07:66:0e:bf:79:93:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:04:DF:2A:12:45:8F:5C:22:9C:F8:FD:D7:28:39:82:B5:5D:E6
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/E9YE3yoSRY9cIpz4_dcoOYK1XeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0-91.188.254.255
Signature Algorithm: sha256WithRSAEncryption
05:0f:27:4e:c0:9e:c5:dd:ed:8d:54:05:80:c7:bd:2b:c9:ed:
96:12:33:ca:dc:fa:82:97:84:8c:38:76:98:be:6d:a0:00:50:
45:a3:4c:13:2a:7c:92:a8:7b:61:00:5f:e9:f6:c9:27:72:ab:
f4:4d:f0:9c:9a:02:64:35:01:63:87:87:66:65:b7:cc:8e:6d:
67:2e:e2:b9:b1:34:bf:90:e8:09:7b:0a:ee:35:b9:66:b0:dc:
82:f4:09:c8:c8:4a:f5:e0:a9:5b:e8:5f:bd:b0:22:4f:fb:7f:
ad:8e:a6:c1:f6:d8:2c:3d:1e:cd:4e:c4:af:60:4d:5c:07:49:
9f:d0:3f:7d:50:f6:e9:88:4f:fc:58:08:84:b8:f3:73:85:1c:
e9:24:37:d4:7c:a0:c3:ce:42:26:53:6d:da:18:7c:e2:a9:a9:
4a:ee:77:0e:1c:4b:31:38:9d:4f:7f:66:95:a6:30:a4:dc:4e:
0f:77:16:cb:db:f3:a6:2e:7a:d5:fe:23:9b:5c:e8:2d:2b:37:
54:de:02:65:57:8b:aa:f0:44:4f:f6:d9:83:eb:00:50:93:f7:
d9:69:b0:72:c1:80:19:05:83:e6:b2:19:81:a7:3b:ec:32:01:
04:69:ec:d6:a4:68:a0:41:4c:72:8d:9e:76:43:a4:31:19:33:
02:bd:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org