Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/Mo_isPk4wCi13JLjF927NSb4sTI.roa
File: Mo_isPk4wCi13JLjF927NSb4sTI.roa (raw, json)
Hash identifier: 4cXXy7swHrv4F6JCZxvb7VPSt2Di3zGmg+Y/xgI1ozM=
Subject key identifier: 32:8F:E2:B0:F9:38:C0:28:B5:DC:92:E3:17:DD:BB:35:26:F8:B1:32
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0185710C22C56907340877E1FB4579BAB5D1
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/Mo_isPk4wCi13JLjF927NSb4sTI.roa
Signing time: Mon 02 Jan 2023 05:54:58 +0000
ROA not before: Mon 02 Jan 2023 05:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.188.252.0/24 maxlen: 24
91.188.253.0/24 maxlen: 24
91.188.254.0/24 maxlen: 24
91.188.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:22:c5:69:07:34:08:77:e1:fb:45:79:ba:b5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Jan 2 05:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=328fe2b0f938c028b5dc92e317ddbb3526f8b132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:3c:ee:29:fb:54:8c:94:13:72:e1:52:f8:
81:d3:ec:e8:b7:c4:aa:6b:29:d5:75:75:ec:6a:a8:
e9:9e:99:9b:58:a9:00:ac:93:7c:08:ec:a3:0c:87:
3f:48:83:68:3d:6a:8d:2d:86:dd:e0:30:90:65:6d:
38:2b:99:01:2b:ee:16:5c:ee:be:d4:98:5b:4c:d6:
e5:06:48:af:78:b3:fe:b1:4a:a5:f4:9c:18:8e:2b:
86:d3:2e:b5:12:26:b2:c7:10:a3:fa:af:88:d9:d7:
02:a5:2b:18:66:d1:3a:85:dd:83:d7:0e:41:91:18:
61:9a:a7:15:67:7c:6a:52:4a:0a:18:8d:68:28:58:
4a:40:ad:ff:9e:2b:ef:20:e8:ae:96:e2:42:0a:d8:
dc:b2:96:05:47:cd:8b:37:21:f2:53:59:7d:58:8b:
9e:fc:73:3e:d1:55:c5:98:2e:15:82:2b:9b:54:32:
59:66:74:d8:85:2d:08:5e:05:b6:0a:82:6d:17:52:
f9:0f:a6:26:c5:5a:79:36:b0:16:d5:2e:fa:b0:05:
49:04:1a:27:29:c8:34:7e:03:24:ff:b2:aa:f7:8b:
0b:7a:a3:be:c5:19:bb:14:f2:bb:c6:9e:af:ae:b3:
0d:6f:3b:ca:7a:2d:af:74:c7:c1:17:0c:f4:6c:b5:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:E2:B0:F9:38:C0:28:B5:DC:92:E3:17:DD:BB:35:26:F8:B1:32
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/Mo_isPk4wCi13JLjF927NSb4sTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:b2:d9:67:02:d9:51:6e:ad:7c:dc:bf:c2:40:7d:69:ea:6a:
94:b4:21:b9:a2:9c:8d:d2:ea:e6:7e:0a:38:d3:d0:63:00:53:
f0:a8:eb:e3:d0:02:84:a2:3a:a0:fd:9f:ad:e5:4c:4b:92:df:
2f:5c:dd:0d:30:e0:31:5c:85:95:99:20:b3:e8:ed:54:02:c1:
27:e9:b9:7f:f9:a6:fe:7f:59:69:51:5c:b9:1e:88:20:aa:63:
41:2b:de:3d:7d:fe:f4:b7:9a:9f:3a:d7:4a:6b:ff:b9:df:32:
da:f1:f5:64:b9:48:4d:4b:67:c7:35:ab:ba:8f:c5:e1:df:90:
64:fc:cc:86:1b:f1:e0:a8:5b:4c:62:df:87:a8:0e:27:76:85:
b3:e4:a3:61:ce:82:a9:ab:f4:59:48:46:7c:17:12:23:6a:7a:
2f:59:e4:f6:d1:3d:7e:b8:0a:85:e6:b6:9b:7d:f2:7f:94:18:
4a:80:2f:eb:4a:37:71:40:bd:9e:74:2d:3b:d7:58:29:c6:c5:
18:46:5f:41:b9:49:9e:34:05:96:b4:33:f5:e9:ba:28:dd:57:
7f:82:a8:e0:4e:44:f7:84:75:6b:02:27:94:b0:40:1b:f6:e0:
94:b7:e4:a1:fe:c8:e1:3e:ba:6d:d9:ba:01:08:2e:a3:f1:2f:
1f:69:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-fra.rpki-client.org