Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/TT8zO6Zb_3MEEV0GnyBKjFbPlEk.roa
File: TT8zO6Zb_3MEEV0GnyBKjFbPlEk.roa (raw, json)
Hash identifier: 0gi/xUUGEuqm8u5rQHr2Gwvbwrbl0J03trFp0N/HCc8=
Subject key identifier: 4D:3F:33:3B:A6:5B:FF:73:04:11:5D:06:9F:20:4A:8C:56:CF:94:49
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 09EF3445
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/TT8zO6Zb_3MEEV0GnyBKjFbPlEk.roa
Signing time: Thu 17 Mar 2022 08:43:59 +0000
ROA not before: Thu 17 Mar 2022 08:43:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.188.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166671429 (0x9ef3445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Mar 17 08:43:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d3f333ba65bff7304115d069f204a8c56cf9449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:01:d3:40:37:01:d9:dc:5e:20:b7:b2:1e:
aa:11:73:5b:b3:2a:a8:b4:5e:73:8f:a3:7b:f3:39:
75:d3:1b:cf:3f:aa:c0:40:f8:df:41:2e:ef:9c:54:
70:b4:75:ac:d1:b3:53:5b:55:51:71:35:84:8b:53:
aa:88:e6:ee:92:41:7a:56:9b:47:f8:64:19:be:40:
c6:11:23:16:70:f1:a2:73:23:2e:48:a2:a6:bc:1c:
26:85:91:3b:8d:c4:77:16:6d:92:ac:cf:7f:2d:00:
f3:70:dc:e1:fb:10:42:88:01:42:cd:dc:a7:f8:03:
8c:37:54:d6:c3:31:67:d5:21:85:1f:34:ef:c6:90:
00:34:35:f8:01:4b:41:75:b5:f5:ea:d1:10:9c:58:
12:a3:d2:e3:69:a4:af:d1:15:5f:1a:f3:3e:fc:fe:
de:9e:7e:19:d1:d8:ba:f2:85:7c:6b:6c:73:6b:5e:
b1:56:27:ec:ea:8d:6f:cb:80:8b:af:ad:c0:94:2f:
7c:f6:a4:92:ef:0b:31:a9:2e:95:06:bd:2d:09:3c:
42:93:a2:1c:6c:48:6a:12:61:c3:8b:78:30:c6:be:
5a:01:40:08:0b:3e:cd:9e:bd:4d:44:fd:6a:0a:8d:
af:1e:1f:db:81:df:d1:19:c1:75:b5:50:f9:ee:bf:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:33:3B:A6:5B:FF:73:04:11:5D:06:9F:20:4A:8C:56:CF:94:49
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/TT8zO6Zb_3MEEV0GnyBKjFbPlEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.255.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:1f:90:de:2a:c6:75:85:74:da:1b:1b:33:f4:7e:7a:13:4f:
8b:31:d0:0b:29:56:71:8b:c3:ba:37:3c:37:b2:3f:68:23:d6:
89:e4:2d:91:b8:6e:ae:4e:a6:d5:7a:fa:b9:30:8f:1f:6b:c0:
c5:39:c3:64:48:69:b8:65:9e:79:34:a8:51:d0:55:1d:93:82:
99:ec:9c:50:26:52:e3:e3:65:3e:b4:a2:a0:1a:b3:66:50:28:
52:cd:88:76:a9:4c:e2:9b:57:28:27:a2:67:ad:4e:76:31:14:
83:fe:99:a7:bb:f7:b8:39:18:07:64:1f:7e:30:35:72:d7:fd:
7e:a4:34:2f:e3:50:4e:4c:8a:8f:cc:e5:20:18:b1:17:11:9d:
81:1d:23:5d:66:bd:e0:2d:9e:8b:74:9a:11:80:0d:fb:fe:10:
5e:e5:98:8d:46:3d:f0:0a:44:5a:43:13:bc:5c:02:d4:0b:79:
01:2d:b3:e2:e7:76:df:36:21:45:a5:a8:77:eb:80:72:9b:0a:
70:22:da:10:58:ae:33:ca:98:9c:da:ad:2f:4b:84:15:0d:8e:
34:26:82:e5:77:b4:c1:28:c3:7e:5a:10:a2:cb:24:ca:7b:8c:
e4:82:30:14:7e:78:f5:93:b4:48:1c:30:26:ca:2a:37:31:eb:
57:9a:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-fra.rpki-client.org