Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/bjCBaqzYXINszWWhTmsWbdgn3vw.roa
File: bjCBaqzYXINszWWhTmsWbdgn3vw.roa (raw, json)
Hash identifier: Q4rBT7+CpqVeA81E16c/BBcDcjYqllwDnYPUtBMCkKw=
Subject key identifier: 6E:30:81:6A:AC:D8:5C:83:6C:CD:65:A1:4E:6B:16:6D:D8:27:DE:FC
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 01864F7F41E650B71C3C2DB4DE153ACEF858
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/bjCBaqzYXINszWWhTmsWbdgn3vw.roa
Signing time: Tue 14 Feb 2023 10:36:25 +0000
ROA not before: Tue 14 Feb 2023 10:36:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.188.253.0/24 maxlen: 24
91.188.254.0/24 maxlen: 24
91.188.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:7f:41:e6:50:b7:1c:3c:2d:b4:de:15:3a:ce:f8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Feb 14 10:36:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e30816aacd85c836ccd65a14e6b166dd827defc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:17:aa:03:26:02:6d:43:16:5d:5e:30:0d:
ed:29:6a:1c:05:f0:3d:47:3d:30:94:b8:b5:3a:bb:
68:a8:30:a5:7b:5d:a9:c1:82:69:58:69:cd:20:e5:
b9:66:8b:dd:c3:65:7c:07:87:8c:db:4f:53:be:f7:
35:6c:b7:db:54:ee:b7:b2:1f:2c:fc:a6:b0:5b:1a:
f0:33:c6:31:04:72:9a:fd:d1:12:7b:60:42:d4:01:
0f:ab:37:e3:e1:69:e5:9d:1d:62:f8:83:c0:61:8f:
83:81:c8:ff:4f:ac:93:32:c8:a7:c3:59:04:57:14:
f1:03:b6:85:2d:80:94:31:82:ba:15:26:a2:8d:ae:
9f:94:72:8a:c9:c9:5c:4c:9b:e2:4e:e1:e7:ea:aa:
36:02:06:ae:7f:da:eb:f4:b4:10:db:30:8c:30:9e:
27:b5:f0:b7:2e:24:8b:00:e5:ff:e6:4c:32:2d:24:
dd:81:9d:c0:b0:53:0a:66:f1:f9:ba:f2:f3:f4:3d:
fb:1b:7c:89:df:58:7f:2b:22:40:10:24:18:a3:22:
a3:3f:3b:c3:fa:b2:43:e4:3b:4f:3c:27:e0:0e:fc:
f5:bc:6f:d8:70:fc:d4:3b:35:b9:64:c3:e7:83:aa:
73:f3:2c:ba:72:be:cc:3b:35:2e:9d:15:01:e5:37:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:30:81:6A:AC:D8:5C:83:6C:CD:65:A1:4E:6B:16:6D:D8:27:DE:FC
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/bjCBaqzYXINszWWhTmsWbdgn3vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.253.0-91.188.255.255
Signature Algorithm: sha256WithRSAEncryption
2b:ce:15:06:69:d9:6a:6a:7f:a1:5d:41:ab:7d:d2:13:8e:82:
56:c8:1a:af:cc:79:10:d0:72:36:c3:b3:15:e5:83:24:21:1b:
17:b0:4b:90:b8:ce:0a:06:82:a1:70:59:75:8e:6f:d5:cf:41:
21:30:12:4d:40:f8:c6:69:46:d9:ac:a9:5c:a9:eb:74:ff:c6:
32:3a:37:28:73:7c:38:52:b3:88:1f:a4:2c:59:8f:09:6c:fa:
35:6c:b0:e2:2e:88:ab:cf:1f:5c:c9:2a:a9:42:67:b4:0b:72:
06:96:26:f9:b4:91:54:3b:f9:5f:03:d2:ac:f3:eb:10:83:64:
8a:73:12:fb:a8:f0:5b:94:2d:2f:53:bc:2f:c1:04:75:4c:79:
fe:8c:0a:da:af:c2:e0:29:a4:56:7b:9d:61:6d:c7:b9:ff:02:
e0:53:01:e9:d5:22:20:f6:0b:66:64:f8:59:44:88:bf:57:43:
9d:89:38:07:5c:1c:2a:48:c2:39:00:bd:78:23:30:ad:b7:9c:
f1:f7:4c:a8:49:23:b6:56:6b:96:e4:ac:17:82:18:e5:95:35:
85:36:2c:fd:90:62:68:a9:9b:34:a6:24:55:3a:0e:ba:45:8a:
0f:79:c4:18:87:e5:41:ba:8c:e0:e2:5f:3a:37:38:94:aa:5f:
c6:a9:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org