Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/4L59RB99516s2soJZGw44_G9qbI.roa
File: 4L59RB99516s2soJZGw44_G9qbI.roa (raw, json)
Hash identifier: Zas1764cgbvGvtMi9fUkifXok8kKKE3ZViXLQIQYkf0=
Subject key identifier: E0:BE:7D:44:1F:7D:E7:5E:AC:DA:CA:09:64:6C:38:E3:F1:BD:A9:B2
Certificate issuer: /CN=9e090317adda08e323ebceed7d54565212742dba
Certificate serial: 0C1E4ECF
Authority key identifier: 9E:09:03:17:AD:DA:08:E3:23:EB:CE:ED:7D:54:56:52:12:74:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngkDF63aCOMj687tfVRWUhJ0Lbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/4L59RB99516s2soJZGw44_G9qbI.roa
Signing time: Sat 01 Jan 2022 08:02:58 +0000
ROA not before: Sat 01 Jan 2022 08:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198560
IP address blocks: 91.236.128.128/25 maxlen: 25
91.236.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203312847 (0xc1e4ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e090317adda08e323ebceed7d54565212742dba
Validity
Not Before: Jan 1 08:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0be7d441f7de75eacdaca09646c38e3f1bda9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:8c:20:67:eb:16:4f:5a:3f:14:af:af:eb:
61:2c:ad:f6:c1:69:fa:b1:b0:f8:54:c7:6b:90:dd:
38:5d:68:b0:41:83:41:71:bf:d7:63:94:a3:dd:23:
d1:b1:e4:b5:43:07:e6:74:69:e3:e1:af:99:91:af:
cb:39:d0:f3:32:a5:e8:12:94:3c:54:24:b9:83:cf:
34:eb:26:7a:f9:3e:c5:7c:ed:bd:80:15:82:62:ea:
1c:b9:cc:30:74:bc:5f:03:7d:22:3a:03:d5:1d:4f:
d0:85:4d:ce:1f:d4:76:34:db:10:c5:6c:86:56:10:
31:80:e7:d5:3f:65:89:54:75:76:c6:44:b1:a7:3f:
6f:42:e2:31:11:72:83:30:ea:fa:ca:8e:6a:3f:ff:
50:f8:3e:5b:67:d6:3c:fa:cd:af:a3:28:0b:dd:bb:
e1:59:33:91:54:69:fb:72:a3:94:bb:02:67:6d:d6:
c4:13:fd:83:33:59:be:45:8d:ba:fc:88:a8:ab:d8:
8f:01:d1:34:c7:69:75:b3:18:4a:54:e2:2a:70:8e:
6d:84:75:94:0c:63:1e:aa:20:97:56:d2:41:4c:fd:
78:21:19:c1:8b:ce:b7:40:2b:fb:a1:9b:66:17:5e:
3f:38:3f:b8:cc:dc:e7:be:2d:19:c7:78:76:82:49:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:7D:44:1F:7D:E7:5E:AC:DA:CA:09:64:6C:38:E3:F1:BD:A9:B2
X509v3 Authority Key Identifier:
keyid:9E:09:03:17:AD:DA:08:E3:23:EB:CE:ED:7D:54:56:52:12:74:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngkDF63aCOMj687tfVRWUhJ0Lbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/4L59RB99516s2soJZGw44_G9qbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/ngkDF63aCOMj687tfVRWUhJ0Lbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
79:70:89:4b:df:c1:22:a3:0c:b7:7c:50:72:c9:bc:3f:d5:9f:
2a:0e:30:d6:f6:10:d3:5a:cf:0a:b4:e0:51:33:13:f8:ef:87:
83:64:9d:48:73:84:f6:9e:7d:0b:dc:91:d2:18:13:ab:55:da:
1d:34:50:6a:02:d6:a3:ee:af:e8:e6:b3:20:a0:45:15:ae:97:
39:f7:f6:f0:98:7f:e1:c2:d5:9c:70:6d:48:c8:8f:e0:85:56:
b4:96:81:7a:c9:5f:f0:d6:39:09:8a:8c:59:6a:b5:ac:47:9e:
b3:42:45:9c:62:e8:04:2b:6b:3f:32:65:c0:ef:2f:ec:48:79:
7c:26:85:8e:b3:8f:b2:4a:0e:b7:d3:81:a5:15:a4:f9:f7:28:
d7:13:24:76:3a:25:cc:a5:ff:c0:16:5d:3a:9d:cc:2e:25:17:
47:91:7b:18:81:59:e6:b5:11:42:e4:bf:25:ae:74:4b:6e:c2:
a2:b3:f0:e0:62:96:f2:c8:82:8c:88:fc:0a:38:00:ca:86:4e:
cf:92:74:df:b9:fc:e7:08:96:8b:a2:d6:24:a9:d0:9a:bd:d3:
e2:e9:c4:66:82:bf:51:53:2f:a5:d7:ec:13:f2:cd:e2:5c:66:
17:b2:88:f6:71:c4:d3:a3:56:c9:80:c4:2e:4d:d3:9f:b5:27:
0d:52:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:06 2024 by rpki-client on console-ams.rpki-client.org