Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/vGNQI2QLEPJSDP_vbUCN0nmSK_o.roa
File: vGNQI2QLEPJSDP_vbUCN0nmSK_o.roa (raw, json)
Hash identifier: FILwIlnYThNJxHmNr0Fy8J/BbJiBwRLAlm5TX04kbvg=
Subject key identifier: BC:63:50:23:64:0B:10:F2:52:0C:FF:EF:6D:40:8D:D2:79:92:2B:FA
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0183C893DC053D785648D4606473809F47B9
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/vGNQI2QLEPJSDP_vbUCN0nmSK_o.roa
Signing time: Tue 11 Oct 2022 19:44:36 +0000
ROA not before: Tue 11 Oct 2022 19:44:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 91.188.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:93:dc:05:3d:78:56:48:d4:60:64:73:80:9f:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Oct 11 19:44:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc635023640b10f2520cffef6d408dd279922bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:af:93:41:0d:6a:be:e8:8f:4e:81:de:e8:
f6:c3:68:e7:79:fe:4c:88:4a:57:64:a8:0d:ae:d4:
27:32:42:6e:e6:bd:cd:71:98:6e:47:28:1e:17:e7:
55:4e:91:cc:14:70:68:88:4a:56:3e:6d:e4:7b:05:
e1:ac:78:a7:1f:7f:77:43:67:b3:dd:33:15:8e:06:
dd:2a:89:5b:f8:da:1d:b3:e1:4d:57:e9:10:94:98:
48:17:10:b9:8d:00:46:ce:d6:89:e0:b8:33:14:10:
41:a7:e8:2d:61:15:cf:66:e6:59:a0:68:c4:bb:68:
49:72:b1:b7:52:17:c2:31:bc:6d:99:5c:60:b8:c0:
91:d9:8c:d8:09:6a:ea:21:7f:c3:d7:02:d6:84:31:
4d:24:43:d9:67:27:4f:36:d9:68:51:22:2d:c9:c6:
8b:85:5b:1f:17:ba:ae:4e:2f:2a:54:60:03:6c:7b:
a7:c4:ce:84:7d:5c:c6:03:f6:f6:7b:80:39:2f:3c:
8e:07:2c:c7:75:47:22:ab:a4:bf:60:e9:1b:01:4c:
8c:b3:54:14:ab:5f:c1:64:d6:99:33:51:ae:b3:0c:
23:01:51:1a:72:e7:eb:0d:0c:06:7e:ba:72:43:f6:
f7:ff:5f:25:41:86:36:38:41:c4:ae:73:8b:06:34:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:50:23:64:0B:10:F2:52:0C:FF:EF:6D:40:8D:D2:79:92:2B:FA
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/vGNQI2QLEPJSDP_vbUCN0nmSK_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9b:98:75:94:bf:c8:27:f7:fe:f6:49:b2:2e:2d:f5:d3:76:
fa:d2:79:e9:ef:58:9c:2c:a7:f6:5c:76:5a:72:14:ba:97:ff:
7e:aa:69:fd:5e:88:9a:46:ad:71:8e:fc:65:bb:90:ff:e6:b6:
71:59:e9:84:93:f1:b0:5f:15:01:31:75:61:06:c7:bc:4f:ab:
05:dc:cf:da:9b:8b:a2:60:a5:72:f5:a7:fb:0d:00:00:ca:6e:
8d:0f:50:08:98:6c:4f:f1:82:59:32:7d:c3:73:55:9c:6f:c9:
e0:8e:ea:d2:47:e6:41:e4:28:5a:39:90:9c:d1:02:9d:77:b4:
e7:38:f2:c4:47:c8:2c:66:d6:02:01:b3:a7:25:a1:73:e8:db:
5a:93:cc:5e:d0:10:c0:40:0c:45:c6:03:71:ad:68:7d:1f:09:
db:31:d9:30:0c:20:14:2f:c7:4d:fe:ce:39:3f:12:7f:1e:83:
f4:0b:39:3d:6e:dc:da:24:3e:43:6a:cd:6b:a0:d3:28:ad:6a:
b3:17:4a:94:97:a4:93:0e:eb:25:0b:f0:c5:36:07:fc:c7:25:
a2:69:69:b5:f3:27:e3:30:a6:18:58:88:b3:29:b5:bc:4f:0a:
ba:9d:70:13:b8:c5:79:eb:5f:1a:12:48:ce:e0:08:69:86:07:
d0:2d:2f:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPIk9wFPXhWSNRgZHOAn0e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzZlZDMzNzVhNmE4OTVjYWRkNDllMGVjZDQyOTk0NTRi
M2I4OWMwHhcNMjIxMDExMTk0NDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzYzNTAyMzY0MGIxMGYyNTIwY2ZmZWY2ZDQwOGRkMjc5OTIyYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBWvk0ENar7oj06B3uj2w2jnef5M
iEpXZKgNrtQnMkJu5r3NcZhuRygeF+dVTpHMFHBoiEpWPm3kewXhrHinH393Q2ez
3TMVjgbdKolb+Nods+FNV+kQlJhIFxC5jQBGztaJ4LgzFBBBp+gtYRXPZuZZoGjE
u2hJcrG3UhfCMbxtmVxguMCR2YzYCWrqIX/D1wLWhDFNJEPZZydPNtloUSItycaL
hVsfF7quTi8qVGADbHunxM6EfVzGA/b2e4A5LzyOByzHdUciq6S/YOkbAUyMs1QU
q1/BZNaZM1GuswwjAVEacufrDQwGfrpyQ/b3/18lQYY2OEHErnOLBjSt8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxjUCNkCxDyUgz/721AjdJ5kiv6MB8GA1UdIwQY
MBaAFP827TN1pqiVyt1J4OzUKZRUs7icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pidE0zV21xSlhLM1VuZzdOUXBsRlN6dUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zYmM4NDAtODMyOS00Mzg5LWEzNGIt
ZWMxOTBiMWNlYWNhLzEvdkdOUUkyUUxFUEpTRFBfdmJVQ04wbm1TS19vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zYmM4NDAtODMyOS00Mzg5LWEzNGItZWMxOTBiMWNlYWNh
LzEvX3pidE0zV21xSlhLM1VuZzdOUXBsRlN6dUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z8MA0G
CSqGSIb3DQEBCwUAA4IBAQB1m5h1lL/IJ/f+9kmyLi3103b60nnp71icLKf2XHZa
chS6l/9+qmn9XoiaRq1xjvxlu5D/5rZxWemEk/GwXxUBMXVhBse8T6sF3M/am4ui
YKVy9af7DQAAym6ND1AImGxP8YJZMn3Dc1Wcb8ngjurSR+ZB5ChaOZCc0QKdd7Tn
OPLER8gsZtYCAbOnJaFz6Ntak8xe0BDAQAxFxgNxrWh9HwnbMdkwDCAUL8dN/s45
PxJ/HoP0Czk9btzaJD5Das1roNMorWqzF0qUl6STDuslC/DFNgf8xyWiaWm18yfj
MKYYWIizKbW8Twq6nXATuMV5618aEkjO4AhphgfQLS+K
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org