Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/99m880VfNe7xCqVH3Yi5n6b0SAI.roa
File: 99m880VfNe7xCqVH3Yi5n6b0SAI.roa (raw, json)
Hash identifier: 0dnKD2pSGutoJHmYFqThCtcN/V36OIDBP7ddVct0Bis=
Subject key identifier: F7:D9:BC:F3:45:5F:35:EE:F1:0A:A5:47:DD:88:B9:9F:A6:F4:48:02
Certificate issuer: /CN=a5f621eeb2bfde993fb6c0e78aced1ec06fb56c2
Certificate serial: 0182D093BEDB8C1D6ED7F5585C3D4D2F4410
Authority key identifier: A5:F6:21:EE:B2:BF:DE:99:3F:B6:C0:E7:8A:CE:D1:EC:06:FB:56:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfYh7rK_3pk_tsDnis7R7Ab7VsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/99m880VfNe7xCqVH3Yi5n6b0SAI.roa
Signing time: Wed 24 Aug 2022 15:58:39 +0000
ROA not before: Wed 24 Aug 2022 15:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 91.231.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:93:be:db:8c:1d:6e:d7:f5:58:5c:3d:4d:2f:44:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f621eeb2bfde993fb6c0e78aced1ec06fb56c2
Validity
Not Before: Aug 24 15:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7d9bcf3455f35eef10aa547dd88b99fa6f44802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:78:d5:82:1b:ea:47:13:8f:b3:67:ef:d4:
63:fb:e1:b3:91:54:95:79:10:0f:db:92:bf:4e:e1:
54:ad:c4:35:d5:44:27:41:e7:08:b2:6a:ce:03:a9:
28:ce:97:98:a8:8c:18:a3:09:ad:79:81:98:a5:29:
1b:9f:e3:f5:57:03:81:b4:e2:e5:d1:ba:1e:c7:88:
0c:46:ba:e3:07:f7:76:a7:ba:9e:68:09:67:fc:c2:
b9:44:0f:5f:37:a0:15:63:14:65:09:b7:a0:b9:76:
5c:38:7d:04:63:ee:fe:8d:bb:ed:20:1c:02:03:28:
c5:4d:8e:d6:5c:3c:73:4a:d3:d3:12:44:93:2f:d0:
ab:85:c1:49:3d:c0:ca:56:ae:98:35:18:95:59:42:
31:91:4a:55:6f:61:23:6f:18:6b:bb:80:13:bf:3f:
99:df:b1:ca:5c:ac:aa:b1:19:5a:b5:f3:f8:f6:b9:
0c:9b:f2:d6:82:f4:7e:f5:67:4a:9b:b8:ef:1e:14:
a4:44:8c:6c:ea:12:5e:d7:20:17:07:45:9f:b3:9b:
ac:30:a7:cc:28:ab:16:09:0e:4c:fb:bc:64:89:9c:
ea:4e:07:8f:bd:83:8d:63:f9:63:7c:14:71:9c:fd:
37:48:7b:05:d4:eb:7b:49:3e:8d:b2:7a:1b:f1:18:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:BC:F3:45:5F:35:EE:F1:0A:A5:47:DD:88:B9:9F:A6:F4:48:02
X509v3 Authority Key Identifier:
keyid:A5:F6:21:EE:B2:BF:DE:99:3F:B6:C0:E7:8A:CE:D1:EC:06:FB:56:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfYh7rK_3pk_tsDnis7R7Ab7VsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/99m880VfNe7xCqVH3Yi5n6b0SAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/pfYh7rK_3pk_tsDnis7R7Ab7VsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7b:0d:79:6a:2e:7d:b6:94:ed:cd:0b:b6:bb:ad:80:8a:71:
b6:ec:a2:5d:2c:f2:16:73:24:87:16:c4:91:86:70:80:4f:6c:
43:dc:f3:8d:09:6a:0f:6b:b8:5c:27:6c:b3:82:44:02:8e:29:
98:6f:3b:33:2b:69:cd:0d:8f:06:a0:05:af:57:14:d2:ef:65:
35:5e:6f:f8:7b:c5:cb:8c:ee:88:2f:b4:39:49:ff:f5:f6:c9:
bf:05:eb:31:89:60:fc:bf:bb:06:f2:ec:4b:3c:bf:8e:d1:89:
8a:f9:00:12:9d:43:42:86:c8:6c:4b:02:15:64:b2:60:eb:c5:
8e:41:4c:a9:d8:13:fa:ed:31:69:a3:5f:f7:67:7b:85:c3:2f:
3a:12:e6:e8:f4:cd:82:80:98:f9:2c:86:27:8d:44:a3:54:a8:
ad:d1:bb:db:62:80:b8:87:fe:08:3d:d0:0b:b2:8f:9d:3c:f4:
75:23:c6:b9:69:90:8b:f6:38:a0:90:bc:8e:29:56:0e:ab:51:
da:de:1a:48:a2:30:24:e9:fe:09:35:ca:9d:e0:64:2e:7e:45:
57:9a:a7:a8:51:dd:9f:cd:92:84:a5:9f:58:4d:a3:27:36:53:
40:06:6d:08:78:7c:a7:3e:e7:14:95:d9:f3:e1:07:9d:32:b6:
d9:fd:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:58 2023 by rpki-client on console.sobornost.net