Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/bLmE8vqPIG7fG5JQbt2ZCiMuGCg.roa
File: bLmE8vqPIG7fG5JQbt2ZCiMuGCg.roa (raw, json)
Hash identifier: RrYj+rQvYhP0Ss4y6zlSKvO6nL0ENOIkuxYoMbbJKq4=
Subject key identifier: 6C:B9:84:F2:FA:8F:20:6E:DF:1B:92:50:6E:DD:99:0A:23:2E:18:28
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0185710C24EF73F9EAFD3D43BD283EC3BE3B
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/bLmE8vqPIG7fG5JQbt2ZCiMuGCg.roa
Signing time: Mon 02 Jan 2023 05:54:59 +0000
ROA not before: Mon 02 Jan 2023 05:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.188.253.0/24 maxlen: 24
91.188.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:24:ef:73:f9:ea:fd:3d:43:bd:28:3e:c3:be:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Jan 2 05:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cb984f2fa8f206edf1b92506edd990a232e1828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:89:49:6b:1a:4c:60:10:31:b2:43:b0:6a:
d7:b5:50:07:55:86:9c:78:27:2c:44:bb:bd:21:b2:
b0:3a:e6:ef:9c:27:a7:a1:bc:53:6a:91:95:0a:7f:
d4:da:85:98:48:6f:30:6b:22:a4:e6:f1:de:ad:a5:
fa:48:e0:b6:2d:23:9e:ab:91:53:1e:68:7c:a6:d4:
b6:c9:e7:61:56:de:90:b1:b8:99:f1:bd:ea:8a:7b:
f0:3b:c5:50:53:99:17:4c:70:65:9a:b1:d0:59:f0:
69:55:cd:29:c7:62:7d:54:91:c3:4a:9b:53:cf:3d:
a5:ca:e1:22:c6:13:1e:59:62:16:db:52:38:db:62:
1e:ec:0b:89:cb:27:a9:dc:fd:44:47:d9:c7:3d:c6:
44:ce:5c:5b:6b:f2:c0:78:dc:0c:60:2c:ce:24:45:
d2:7a:02:44:cc:96:48:c7:19:f5:49:ed:27:64:56:
74:d0:9d:77:17:7a:44:cb:f9:b8:a8:c9:b9:5b:2d:
17:c9:56:70:01:db:33:6d:fc:85:ee:4e:95:35:58:
fb:1e:8d:be:e4:79:ee:a7:58:d9:45:6d:38:3d:65:
ca:91:54:9c:42:39:ee:be:e5:f8:05:8a:17:cd:4d:
3e:73:98:e6:d9:cc:d8:64:c5:24:67:1a:97:bc:04:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:84:F2:FA:8F:20:6E:DF:1B:92:50:6E:DD:99:0A:23:2E:18:28
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/bLmE8vqPIG7fG5JQbt2ZCiMuGCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.253.0-91.188.254.255
Signature Algorithm: sha256WithRSAEncryption
2c:78:fe:46:be:cf:4a:17:5a:31:e0:f0:90:45:62:47:2e:52:
1a:f2:c1:40:6f:e7:96:74:04:bc:84:1a:4d:51:41:b1:23:43:
0d:37:84:e0:0f:8f:b2:ee:a4:0b:e1:25:3c:29:f3:68:d1:45:
6c:be:94:83:ad:a6:fc:c4:7e:93:52:c4:5e:de:08:09:63:be:
1c:3f:ff:d8:07:45:ae:fb:85:46:6b:56:b5:c0:98:23:5d:2f:
cc:46:ec:4e:51:5a:be:e8:8a:76:9a:5e:63:af:79:f4:a2:7a:
c1:b2:80:e5:fd:bd:f0:af:8b:9c:cd:58:ed:d7:e6:72:f4:fb:
83:21:88:6f:02:83:58:dc:50:f4:99:a4:ff:03:6c:48:df:ad:
d1:64:f9:60:43:33:17:63:a9:bf:65:40:06:fb:11:a3:01:bf:
39:f2:10:90:9e:7c:52:db:a7:f1:89:b5:06:e5:27:44:26:55:
28:88:01:0d:0d:a5:14:75:e6:42:b4:9d:df:23:a6:a8:66:f6:
11:ea:9f:1f:8b:79:84:b8:70:b8:58:81:ba:e4:c5:21:b4:f1:
9a:06:11:ad:7c:c8:d3:31:39:32:39:af:46:5d:b1:4a:98:a5:
ec:40:7e:35:39:bb:94:d9:9f:0a:a4:29:af:59:d9:a8:b7:7a:
24:8a:16:11
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVxDCTvc/nq/T1DvSg+w747MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzZlZDMzNzVhNmE4OTVjYWRkNDllMGVjZDQyOTk0NTRi
M2I4OWMwHhcNMjMwMTAyMDU1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2I5ODRmMmZhOGYyMDZlZGYxYjkyNTA2ZWRkOTkwYTIzMmUxODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms6JSWsaTGAQMbJDsGrXtVAHVYac
eCcsRLu9IbKwOubvnCenobxTapGVCn/U2oWYSG8wayKk5vHeraX6SOC2LSOeq5FT
Hmh8ptS2yedhVt6QsbiZ8b3qinvwO8VQU5kXTHBlmrHQWfBpVc0px2J9VJHDSptT
zz2lyuEixhMeWWIW21I422Ie7AuJyyep3P1ER9nHPcZEzlxba/LAeNwMYCzOJEXS
egJEzJZIxxn1Se0nZFZ00J13F3pEy/m4qMm5Wy0XyVZwAdszbfyF7k6VNVj7Ho2+
5Hnup1jZRW04PWXKkVScQjnuvuX4BYoXzU0+c5jm2czYZMUkZxqXvASCCwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGy5hPL6jyBu3xuSUG7dmQojLhgoMB8GA1UdIwQY
MBaAFP827TN1pqiVyt1J4OzUKZRUs7icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pidE0zV21xSlhLM1VuZzdOUXBsRlN6dUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zYmM4NDAtODMyOS00Mzg5LWEzNGIt
ZWMxOTBiMWNlYWNhLzEvYkxtRTh2cVBJRzdmRzVKUWJ0MlpDaU11R0NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zYmM4NDAtODMyOS00Mzg5LWEzNGItZWMxOTBiMWNlYWNh
LzEvX3pidE0zV21xSlhLM1VuZzdOUXBsRlN6dUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbvP0D
BABbvP4wDQYJKoZIhvcNAQELBQADggEBACx4/ka+z0oXWjHg8JBFYkcuUhrywUBv
55Z0BLyEGk1RQbEjQw03hOAPj7LupAvhJTwp82jRRWy+lIOtpvzEfpNSxF7eCAlj
vhw//9gHRa77hUZrVrXAmCNdL8xG7E5RWr7oinaaXmOvefSiesGygOX9vfCvi5zN
WO3X5nL0+4MhiG8Cg1jcUPSZpP8DbEjfrdFk+WBDMxdjqb9lQAb7EaMBvznyEJCe
fFLbp/GJtQblJ0QmVSiIAQ0NpRR15kK0nd8jpqhm9hHqnx+LeYS4cLhYgbrkxSG0
8ZoGEa18yNMxOTI5r0ZdsUqYpexAfjU5u5TZnwqkKa9Z2ai3eiSKFhE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org