Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/xGZZZfCAZBoumeHXBBQDLwv6S0s.roa
File: xGZZZfCAZBoumeHXBBQDLwv6S0s.roa (raw, json)
Hash identifier: ZkqKYVZcoAa+vz04cbDh5d4hYL55DLruTpMDfgPZgSU=
Subject key identifier: C4:66:59:65:F0:80:64:1A:2E:99:E1:D7:04:14:03:2F:0B:FA:4B:4B
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0181D543A401E2354C98302079F7A93504B5
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/xGZZZfCAZBoumeHXBBQDLwv6S0s.roa
Signing time: Wed 06 Jul 2022 20:46:28 +0000
ROA not before: Wed 06 Jul 2022 20:46:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 91.245.239.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:43:a4:01:e2:35:4c:98:30:20:79:f7:a9:35:04:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jul 6 20:46:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4665965f080641a2e99e1d70414032f0bfa4b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:25:ac:d9:52:65:94:75:97:24:a6:60:20:
7e:de:0c:c2:11:77:d9:42:11:b5:6c:ea:32:43:f6:
d8:89:ac:59:ca:0a:ee:33:c4:52:b8:79:a8:ed:3c:
e8:ad:ab:15:f0:f8:eb:51:0a:ad:89:52:00:2c:ea:
41:c4:6b:b2:ff:71:de:1a:df:47:4e:47:08:08:bb:
86:1e:23:36:ab:5f:dc:3d:63:73:9f:00:86:be:c6:
be:25:0a:f1:08:ac:78:56:b4:c0:15:71:97:18:8e:
00:90:78:48:3c:e1:f1:cf:72:24:dc:76:7e:80:3b:
d5:c3:fd:85:2c:04:02:6a:02:26:29:0c:c9:d0:85:
ec:58:2d:47:a3:16:f5:71:aa:0b:54:b7:ce:d8:f4:
8d:8f:c3:c5:ae:1e:8c:06:58:27:2b:94:eb:1f:fe:
13:6b:e7:62:ac:0d:5c:9c:d3:2f:98:09:d9:90:27:
3f:05:83:e0:f4:bf:e7:c7:71:6f:ec:56:e3:ad:56:
23:ca:58:40:89:8c:7a:7b:ef:b0:ba:e3:05:f5:37:
c5:db:b2:e2:ff:af:40:6f:19:82:1d:0f:0d:05:dd:
93:60:47:61:69:2e:b7:b0:c1:32:c9:af:d0:52:d0:
54:51:e3:ed:0c:ad:98:c8:6a:0b:8c:2e:46:e7:a1:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:66:59:65:F0:80:64:1A:2E:99:E1:D7:04:14:03:2F:0B:FA:4B:4B
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/xGZZZfCAZBoumeHXBBQDLwv6S0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.239.0/24
95.214.92.0/24
95.214.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:62:7f:65:49:8a:4d:67:2c:10:1d:ed:00:04:50:b4:30:57:
94:94:1e:14:29:27:bc:e6:f1:84:11:4b:92:db:2d:6c:75:20:
5c:20:59:1f:51:65:34:eb:80:d9:56:d9:8d:52:93:27:f8:e6:
f1:3e:e3:a5:da:91:a3:92:6d:89:bc:0d:16:2b:2f:85:0b:7e:
f3:7f:bd:86:5b:b0:1e:e3:0c:5d:e7:2a:38:cc:82:1f:c2:5a:
f2:51:7b:2c:55:b4:d1:01:b9:b5:f0:74:3d:8e:c3:71:c4:5d:
52:4b:08:f6:98:23:4e:be:48:d3:72:68:2d:9e:50:6a:21:63:
22:58:8f:3f:6b:ce:cd:6d:12:6f:11:23:85:33:a7:23:1a:c8:
00:ca:a0:d3:62:c8:09:be:03:74:d3:f6:7b:23:d0:0c:aa:ae:
f2:f9:02:dc:61:8b:0c:a1:36:ea:82:75:2e:75:c4:d4:7e:16:
ce:42:e7:d1:c5:02:70:20:38:72:d6:3f:bb:88:ae:b1:54:1d:
32:f2:b0:73:3e:80:a8:b6:20:be:4c:b1:0d:b0:e8:b5:18:a5:
25:89:c9:bf:24:9d:2a:37:47:e5:e3:27:f3:9c:d4:80:9b:22:
39:69:af:73:2f:13:ad:52:1c:dc:ea:5f:35:2a:70:f3:46:f5:
61:55:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org