Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/Vl1XLAS3heMxp5D4YQ_l5MNfViQ.roa
File: Vl1XLAS3heMxp5D4YQ_l5MNfViQ.roa (raw, json)
Hash identifier: MhYMAfs5Qb9cya+ZOq50ELlxQr1tzA+QO/E9pR6MMc8=
Subject key identifier: 56:5D:57:2C:04:B7:85:E3:31:A7:90:F8:61:0F:E5:E4:C3:5F:56:24
Certificate issuer: /CN=9e090317adda08e323ebceed7d54565212742dba
Certificate serial: 01856EA6AEBAE713058BCDD0703772265CED
Authority key identifier: 9E:09:03:17:AD:DA:08:E3:23:EB:CE:ED:7D:54:56:52:12:74:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngkDF63aCOMj687tfVRWUhJ0Lbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/Vl1XLAS3heMxp5D4YQ_l5MNfViQ.roa
Signing time: Sun 01 Jan 2023 18:44:55 +0000
ROA not before: Sun 01 Jan 2023 18:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198560
IP address blocks: 91.236.128.128/25 maxlen: 25
91.236.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ae:ba:e7:13:05:8b:cd:d0:70:37:72:26:5c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e090317adda08e323ebceed7d54565212742dba
Validity
Not Before: Jan 1 18:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=565d572c04b785e331a790f8610fe5e4c35f5624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5e:4b:1b:5a:fd:96:29:3e:43:89:de:c9:68:
eb:ba:6a:4f:ca:14:2e:b3:fe:09:b1:a7:6f:a6:22:
34:9e:09:9f:7f:74:1f:9c:27:7e:c2:cc:52:a9:c6:
77:7f:12:74:6b:be:be:64:dd:25:bc:4e:70:30:96:
d5:89:86:e2:14:94:db:3a:02:ce:91:9b:41:eb:17:
48:e1:18:c4:84:4e:89:44:69:56:e0:06:20:d4:d2:
59:d9:4a:58:a6:4d:75:03:69:ad:e2:73:80:a3:31:
3c:bc:c6:6e:d1:5c:5c:3b:a5:35:ee:95:aa:1c:f3:
1c:b5:5c:a2:a1:58:86:d6:f9:c9:09:37:f1:1a:2d:
6c:63:40:94:17:d1:c7:a9:3e:9a:cc:d3:a8:56:1b:
b1:13:b0:60:ef:f4:95:a2:e5:6c:cb:09:0b:92:e2:
63:81:45:8c:c5:09:08:b4:ee:ec:f0:ac:4d:33:46:
ee:5b:98:5f:a2:e8:6b:d8:fa:4d:46:e5:dd:4e:c8:
5a:0b:31:0d:bd:14:d6:2b:16:e9:57:9e:1b:14:3e:
84:a8:e2:66:cc:45:7e:33:35:ef:88:34:a0:dd:97:
41:54:8c:3c:48:73:db:4d:dc:c8:49:b9:c4:ca:26:
aa:26:3c:5a:52:c7:14:f4:68:e9:d4:35:e2:1b:da:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5D:57:2C:04:B7:85:E3:31:A7:90:F8:61:0F:E5:E4:C3:5F:56:24
X509v3 Authority Key Identifier:
keyid:9E:09:03:17:AD:DA:08:E3:23:EB:CE:ED:7D:54:56:52:12:74:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngkDF63aCOMj687tfVRWUhJ0Lbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/Vl1XLAS3heMxp5D4YQ_l5MNfViQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/ngkDF63aCOMj687tfVRWUhJ0Lbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:f5:49:36:ad:c2:08:03:2a:21:49:4f:f2:f6:25:9d:17:2b:
f3:46:3b:04:06:6c:0c:87:7f:7a:b0:ff:84:97:c5:ad:d1:4a:
39:05:9e:52:b1:30:82:78:30:31:ea:e8:31:b3:29:aa:aa:c6:
2a:8c:38:39:7f:bf:99:06:05:33:fc:66:ef:7f:4e:34:11:dd:
2d:33:c0:e1:0c:cb:7a:7b:e5:2f:ec:f9:56:1d:2a:6d:1d:4f:
d1:fd:0e:e0:93:a6:ac:3c:7d:d9:57:3b:29:f8:63:46:96:15:
09:d9:b8:5b:d6:b0:94:9d:76:8f:d4:32:d1:a3:6d:73:a3:34:
8d:ad:00:82:ac:bf:ff:20:6e:66:8e:e8:75:4e:db:ca:7e:00:
b9:93:3f:7d:38:2c:61:2b:95:e8:0f:65:a3:65:9b:8d:09:dc:
7e:5b:48:c0:06:85:bc:e3:59:f5:9c:f9:f8:26:9b:cf:78:39:
15:7a:16:3f:fe:58:31:59:fa:37:47:71:e1:85:af:4a:a3:bc:
75:b3:d4:08:d7:16:d8:c3:50:e9:85:6c:27:fa:a0:e8:54:15:
9e:93:8d:61:37:18:c1:87:e4:38:6f:89:22:26:32:08:25:2d:
eb:be:40:54:2d:24:2e:01:64:44:c7:f2:fb:8d:76:69:8f:99:
3e:13:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:42 2024 by rpki-client on console-fra.rpki-client.org