Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/sAzwdze2kzeerontW19GNqadQDY.roa
File: sAzwdze2kzeerontW19GNqadQDY.roa (raw, json)
Hash identifier: Pq3d4eOqUeDKF4W5kDsAhOeY9VEoh4BijY1CPBVXS90=
Subject key identifier: B0:0C:F0:77:37:B6:93:37:9E:AE:89:ED:5B:5F:46:36:A6:9D:40:36
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0A7D89A8
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/sAzwdze2kzeerontW19GNqadQDY.roa
Signing time: Thu 19 May 2022 14:59:29 +0000
ROA not before: Thu 19 May 2022 14:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15440
IP address blocks: 91.188.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175999400 (0xa7d89a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: May 19 14:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b00cf07737b693379eae89ed5b5f4636a69d4036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:9d:24:29:01:69:c9:b9:71:c2:f9:61:30:
7c:f1:90:36:64:3e:1f:a7:7c:e7:7a:d6:03:31:59:
0b:a0:8b:c1:8e:3d:03:c0:48:a5:7d:01:ea:83:b3:
4e:ae:e4:fc:04:26:e8:5f:2e:0d:0d:58:d6:2f:45:
f6:17:c1:ec:2d:e9:0f:6a:23:e5:bf:00:58:0d:68:
20:11:ea:97:e7:2b:0b:4a:a0:7d:b8:2e:63:ca:9a:
9e:52:34:11:f0:bf:40:63:68:9c:30:3c:97:c8:7b:
94:f5:4d:67:f5:7a:65:27:47:80:c9:45:8b:ec:c0:
8f:da:c2:64:86:b7:be:57:47:99:ea:34:80:bf:2a:
b1:0d:f7:ee:f3:87:25:90:bb:57:9c:c7:45:db:1c:
96:eb:14:c8:13:eb:64:d2:0f:1b:ee:a3:fd:05:cf:
e5:87:5f:52:4e:37:2d:a6:c9:a1:0c:ae:58:1d:0e:
7a:68:f7:4d:6c:c1:d0:b4:7e:b8:42:5b:2b:90:6f:
9b:58:ec:6c:4b:bd:bd:2f:8c:31:89:61:1c:4e:e0:
e9:55:72:e0:88:84:71:b0:78:70:68:c5:5c:0e:45:
6a:4d:22:af:f9:5c:a6:a7:3e:3f:f8:e3:cd:dd:42:
48:e0:75:ad:cb:92:9c:e0:95:50:5f:2e:3a:01:b4:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:F0:77:37:B6:93:37:9E:AE:89:ED:5B:5F:46:36:A6:9D:40:36
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/sAzwdze2kzeerontW19GNqadQDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:67:de:0f:4b:b1:3a:76:4a:7b:67:5e:1f:a6:11:3a:34:79:
35:2d:67:78:49:4a:cc:71:e9:d7:ca:df:c1:c5:53:4e:54:2a:
01:81:30:46:60:1e:a3:92:7b:e4:82:e1:b6:43:a8:e1:20:1c:
84:ad:40:da:d1:83:2c:f1:a6:98:7b:f5:0e:6f:3c:b3:17:57:
2e:38:20:01:d2:a6:d2:76:be:0f:5d:94:60:8a:b0:87:99:87:
b0:7f:39:11:4e:20:50:68:07:2e:b7:ea:a6:67:7e:d7:ca:f4:
a3:0a:51:06:65:4b:33:4a:d3:aa:70:76:32:da:d9:70:3c:50:
36:c5:4d:4c:61:ee:70:e6:5c:23:c2:58:ed:ea:72:72:6d:3f:
59:00:4a:8b:ff:09:29:0e:e7:fc:54:5c:f0:5b:90:b2:39:ec:
2e:48:ea:c6:bc:f6:af:3d:dc:f2:06:f6:d5:85:cb:02:dd:37:
e0:58:f7:4d:9e:46:2e:50:b6:e4:71:3b:d4:db:8b:86:39:10:
f3:b4:56:c1:4c:4a:de:b4:a4:99:92:23:9e:6e:98:fd:82:6b:
a1:87:34:c4:e9:77:c5:a7:dc:d4:05:6f:47:03:b0:fe:cb:7d:
f1:4e:2a:b5:35:eb:09:88:ee:b3:72:14:7d:c9:21:78:1d:ff:
09:3f:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org