Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/b4ii8Z6HJ9RoXqIp_CCHQ9KzsC4.roa
File: b4ii8Z6HJ9RoXqIp_CCHQ9KzsC4.roa (raw, json)
Hash identifier: UJINeaAEM8pF0U1zD98rpHN+d/957Bxf4245m0y1C/A=
Subject key identifier: 6F:88:A2:F1:9E:87:27:D4:68:5E:A2:29:FC:20:87:43:D2:B3:B0:2E
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 018262CF35D68525345FDD36FCC4435B6640
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/b4ii8Z6HJ9RoXqIp_CCHQ9KzsC4.roa
Signing time: Wed 03 Aug 2022 08:25:23 +0000
ROA not before: Wed 03 Aug 2022 08:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 91.188.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:cf:35:d6:85:25:34:5f:dd:36:fc:c4:43:5b:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Aug 3 08:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f88a2f19e8727d4685ea229fc208743d2b3b02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:28:37:e9:41:df:3d:6a:40:fc:85:12:79:
8a:7c:0d:ae:d5:fa:be:e8:99:e6:23:69:ad:1d:9d:
47:da:05:2e:de:00:a4:75:83:02:1d:48:6f:d4:d6:
07:6b:4a:39:d6:63:0e:72:6b:53:0e:04:e1:6b:94:
1c:aa:41:3a:4d:58:9c:0d:e8:57:77:98:a1:f7:6e:
e8:91:4d:7c:34:85:f6:56:4b:bc:0b:e9:f5:cc:e5:
61:36:cb:83:84:6c:35:75:99:2a:ca:4f:38:29:99:
53:b3:72:60:4c:b0:8b:17:84:0b:43:90:22:f1:b0:
ea:fd:63:e7:0f:76:0f:9e:5a:40:64:e3:22:5c:5e:
c2:48:94:69:4e:70:e3:6b:78:1a:e0:a7:a4:4e:33:
6b:b9:31:73:2d:c1:c1:5e:75:9a:79:12:d7:96:67:
2f:7a:7a:af:70:57:4a:db:6b:c6:4f:a5:9f:a6:84:
73:c4:21:cc:c4:b5:83:3f:11:6d:40:a7:3b:a8:d9:
ce:4f:c3:e3:b0:03:8b:4a:ce:72:22:06:86:c7:a0:
21:85:31:28:cd:4b:4b:a8:c7:ae:3c:7e:58:53:48:
86:70:ad:01:cf:d3:f2:0d:68:28:24:9e:84:f5:d5:
84:bd:58:49:e6:cd:89:2a:3d:3a:c9:73:87:d3:6e:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:88:A2:F1:9E:87:27:D4:68:5E:A2:29:FC:20:87:43:D2:B3:B0:2E
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/b4ii8Z6HJ9RoXqIp_CCHQ9KzsC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f2:84:71:94:4c:14:97:9c:57:7f:f7:8f:6a:d6:76:1a:a4:
73:35:2e:00:49:2a:dc:b6:82:90:f2:98:af:b1:14:38:2e:df:
4e:68:5d:52:a7:3d:dd:95:2e:df:ca:a6:68:b3:b9:a5:8a:a8:
f1:7d:0f:9f:ea:a8:b1:c9:a9:2a:f8:30:02:f5:3c:bc:55:4f:
e8:86:f6:1c:08:5f:1d:9c:85:06:dd:09:be:22:1e:83:79:07:
43:26:42:ed:a4:48:cd:be:19:df:6f:a9:09:71:c3:6e:22:82:
3d:89:85:e4:08:dd:81:c4:4b:44:16:5d:b3:ae:3c:ea:3c:e8:
d7:9f:53:4a:29:14:2d:7c:f4:b5:d7:ff:cd:01:f6:45:d4:65:
3b:ff:42:75:84:58:99:c3:50:b4:7b:23:55:fe:1e:6a:f0:42:
b2:8b:99:c3:34:2a:87:4a:6f:5a:15:37:ab:c6:f1:d0:62:a4:
d9:e2:d8:18:19:cb:ea:3d:af:72:0d:a8:1a:46:38:cd:0e:ba:
98:e0:c4:8e:2a:1e:d6:be:c8:f3:14:3e:bf:9c:25:e0:58:19:
04:5d:61:e8:51:5e:d8:bc:f9:35:33:05:b6:8c:d2:11:d3:be:
3a:94:a8:cc:c6:ed:9a:00:4f:30:ce:40:6b:bd:92:a0:ec:4e:
03:bf:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-fra.rpki-client.org