Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/E-uln3x2mzXRFnxOXcEiJPVK3gE.roa
File: E-uln3x2mzXRFnxOXcEiJPVK3gE.roa (raw, json)
Hash identifier: iUpiM2Yj/W0ohRWFUa/jIfSUi1qrMfG0YPm0mqCZMww=
Subject key identifier: 13:EB:A5:9F:7C:76:9B:35:D1:16:7C:4E:5D:C1:22:24:F5:4A:DE:01
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 018570C2B48F1263CD40430851C48A7E4DA4
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/E-uln3x2mzXRFnxOXcEiJPVK3gE.roa
Signing time: Mon 02 Jan 2023 04:34:46 +0000
ROA not before: Mon 02 Jan 2023 04:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 91.200.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:b4:8f:12:63:cd:40:43:08:51:c4:8a:7e:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jan 2 04:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13eba59f7c769b35d1167c4e5dc12224f54ade01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:c8:5f:2c:f5:b2:21:35:98:36:87:a6:0c:
72:0e:0e:d3:10:b1:9f:b2:6e:d7:0a:3c:31:97:4a:
71:04:e4:5f:53:1a:c3:4d:66:9a:7f:b6:ce:a0:ce:
81:ee:19:7a:54:39:18:53:04:23:62:a3:f1:55:9f:
7d:c4:2b:c8:68:42:cf:9a:36:b2:c0:12:40:e9:ab:
a7:cf:bb:42:8d:ff:a3:a5:08:e0:42:28:6a:96:8c:
e1:2b:2b:23:da:1f:ee:fb:9f:c0:8f:5b:6b:e7:c4:
08:d0:04:12:6a:b4:9e:6b:fd:9d:bb:7b:79:68:b2:
65:29:e1:6a:b1:99:54:ab:80:57:e3:f9:b6:35:02:
25:9e:0e:31:ea:a8:29:8e:63:ee:a2:33:07:85:d3:
fb:77:cd:de:19:01:d3:7c:bf:95:ef:78:43:3d:21:
91:5e:4d:f5:0b:6e:fc:54:92:12:5d:fa:83:00:26:
5f:36:fb:30:27:5f:f6:b1:ac:95:55:14:5d:55:f6:
99:29:e7:7f:fa:28:f8:85:61:ba:2b:9e:8a:b7:29:
6a:d2:db:2d:32:bf:c3:6d:cb:33:5b:f8:e3:78:d1:
a3:d9:1b:f0:95:1e:1a:20:11:ab:26:a9:37:9e:8a:
89:ae:1d:5d:8e:e5:20:69:dc:d0:a1:1a:18:53:32:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:A5:9F:7C:76:9B:35:D1:16:7C:4E:5D:C1:22:24:F5:4A:DE:01
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/E-uln3x2mzXRFnxOXcEiJPVK3gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:96:01:29:e5:9b:2d:bb:cb:7f:4f:0f:fa:33:3a:27:5e:76:
7c:3c:fb:a3:42:0f:fc:3d:6b:42:4e:82:5d:7b:b2:d1:c8:eb:
dd:27:9e:12:b6:02:e9:e9:f3:11:54:8d:69:57:c5:86:5c:ad:
51:a7:cf:44:55:c7:7a:22:8c:5d:cc:15:24:7d:6e:d4:3c:f3:
b4:4c:ff:eb:1e:ef:75:de:16:85:84:60:28:5b:6b:81:4e:d0:
9e:42:2a:0d:33:80:64:1d:66:10:52:d8:41:5e:08:ff:42:a6:
d3:68:d2:e8:99:fb:b3:c6:da:7c:9e:e3:3f:87:d2:a4:db:13:
fb:e1:df:f9:c6:d0:c3:c0:d1:92:aa:ae:d6:0d:da:8b:7d:80:
f8:80:89:93:80:b5:1c:51:4a:37:fa:c0:83:4f:60:50:69:9f:
83:67:03:3d:74:36:6a:e2:02:a3:af:04:a3:5e:70:a3:63:5b:
ab:2b:43:e3:b9:a3:f7:9b:55:38:fe:b5:c5:a4:71:6d:fa:f7:
81:62:15:ca:03:37:1a:cd:b5:93:09:9d:b6:81:c1:90:57:bd:
08:45:a4:93:46:0e:b7:aa:1e:4c:43:fd:51:d6:89:8b:28:be:
e9:d9:f4:ed:d9:56:00:41:80:29:31:37:af:96:0f:72:8d:cb:
93:57:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:14 2025 by rpki-client