Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/vcGt_IiXPNQeR-qh5che8LCb29Q.roa
File: vcGt_IiXPNQeR-qh5che8LCb29Q.roa (raw, json)
Hash identifier: Cqctx7C/uJrNZ94fDVIxPUdwKd2r+3kRvQHhj04vvnQ=
Subject key identifier: BD:C1:AD:FC:88:97:3C:D4:1E:47:EA:A1:E5:C8:5E:F0:B0:9B:DB:D4
Certificate issuer: /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial: 01840E42D9B3A28AC67A54BA8EEDE0A29642
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/vcGt_IiXPNQeR-qh5che8LCb29Q.roa
Signing time: Tue 25 Oct 2022 08:29:32 +0000
ROA not before: Tue 25 Oct 2022 08:29:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21700
IP address blocks: 91.241.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:42:d9:b3:a2:8a:c6:7a:54:ba:8e:ed:e0:a2:96:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Validity
Not Before: Oct 25 08:29:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdc1adfc88973cd41e47eaa1e5c85ef0b09bdbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:53:25:3c:ec:d3:43:b5:3a:66:80:5a:86:
58:15:ce:14:d7:7c:3d:46:13:e0:50:d9:81:98:b2:
e8:19:65:c9:78:68:14:a7:6a:65:d4:04:27:0a:4e:
23:ab:91:35:97:22:92:20:42:ca:93:ea:30:ed:bc:
bd:5a:40:40:01:a2:66:15:ee:ef:6d:a9:68:8b:a3:
1a:6c:16:a9:be:5b:45:ed:7b:42:52:3e:bc:9a:5c:
b6:7b:63:6e:eb:0c:c5:d4:57:9c:05:c0:41:33:75:
db:1e:75:01:e2:dd:08:c8:57:e7:22:fb:4d:11:5c:
e1:0c:2b:b6:5f:1e:fc:fc:ec:e4:6b:45:c6:20:ac:
45:3f:88:22:b7:8d:b3:df:1c:47:f7:f0:7f:1e:33:
6c:75:6c:67:db:2e:06:f1:2f:38:93:87:17:a6:66:
a3:51:ff:dd:f5:a2:6d:44:97:49:e1:99:7b:5e:83:
e0:29:63:f8:5e:11:ce:fe:ea:8c:19:5e:79:42:e9:
36:6e:48:d8:80:e8:15:bf:fb:ac:a1:7a:49:68:e6:
53:3c:a5:ee:02:5a:ee:b1:62:d9:57:48:7b:3a:60:
5e:94:cd:47:f2:71:6e:61:fa:bf:be:2f:55:f5:b3:
d3:e5:e2:12:ce:d2:df:96:f6:e4:a6:a8:5c:60:60:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:AD:FC:88:97:3C:D4:1E:47:EA:A1:E5:C8:5E:F0:B0:9B:DB:D4
X509v3 Authority Key Identifier:
keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/vcGt_IiXPNQeR-qh5che8LCb29Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.164.0/24
Signature Algorithm: sha256WithRSAEncryption
47:86:a8:0a:11:30:62:1a:1b:cf:0f:54:0b:3a:0a:65:1e:68:
f9:2a:64:c2:a2:e6:f5:f4:ae:7e:7a:e6:33:8f:2f:44:16:54:
dd:b5:79:a2:c3:3e:a9:20:fa:18:5c:de:e1:32:77:a4:56:28:
5d:9c:45:90:0c:8a:42:33:f7:f7:40:d2:c1:24:c4:39:67:30:
2e:df:00:92:03:c0:92:c4:e3:07:f1:70:b3:2f:6b:fe:af:f7:
36:49:08:2d:3e:b2:d3:33:73:75:94:16:1e:47:64:cb:20:e2:
7a:73:4b:0b:46:06:15:7e:3b:64:66:cb:c7:cd:84:83:e5:23:
3b:66:52:2e:94:e4:a2:d1:88:d7:d5:b1:36:f9:ab:a9:bf:28:
3c:29:19:56:18:06:71:3a:3b:b1:d8:a7:29:fd:ac:42:cf:36:
63:6d:0b:f6:dd:ee:bd:d5:f3:0e:1f:79:1e:d9:f6:56:3f:66:
54:e5:9d:52:47:59:28:c4:d6:3d:8e:9c:8b:c1:6d:29:16:60:
ea:37:5e:b5:12:73:72:c4:12:95:4f:88:84:10:8c:7f:14:39:
73:49:67:eb:fd:b4:22:f4:5c:41:1f:50:94:c4:8a:b9:42:7c:
eb:46:70:17:8f:b6:5d:a0:5c:38:7f:a1:6b:9a:2b:0d:94:de:
55:3e:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net