Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uBeUOBjNJBvmFjxJDM10PL4bc2c.roa
File: uBeUOBjNJBvmFjxJDM10PL4bc2c.roa (raw, json)
Hash identifier: CLWjYYuLh+su4kpEIPhTc64qtQ3yTFbF9bBhqIpr8R0=
Subject key identifier: B8:17:94:38:18:CD:24:1B:E6:16:3C:49:0C:CD:74:3C:BE:1B:73:67
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0195478D098360D94ED5B8A3844E9CA8EC6C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uBeUOBjNJBvmFjxJDM10PL4bc2c.roa
Signing time: Thu 27 Feb 2025 13:16:20 +0000
ROA not before: Thu 27 Feb 2025 13:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 91.236.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:8d:09:83:60:d9:4e:d5:b8:a3:84:4e:9c:a8:ec:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Feb 27 13:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b817943818cd241be6163c490ccd743cbe1b7367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:fb:2a:d6:cc:17:2c:57:8c:e2:86:c1:3d:
49:bb:1e:12:5b:50:02:60:82:29:3a:9c:32:11:6f:
27:a8:b2:13:46:21:27:05:fb:ee:78:32:cf:b6:10:
4f:c0:ae:ad:3e:a2:df:2e:a9:55:29:36:58:7b:7c:
6f:05:03:63:1a:ae:3e:88:36:14:b1:f8:44:95:95:
be:d5:09:05:45:f8:48:93:77:b8:30:7f:28:ff:9b:
30:95:36:36:f0:8c:b0:7c:2d:76:cc:41:e1:9c:8e:
87:50:35:2a:6b:97:5c:f5:8f:5f:a6:ab:52:e2:56:
d2:67:d5:9d:4a:96:e3:c7:1a:54:0f:26:d7:63:0d:
01:c9:09:ab:42:6e:ae:68:de:b0:40:14:31:ee:35:
05:8b:5b:77:46:d1:f1:f7:db:51:73:a4:e6:ea:73:
ee:2a:d2:65:7e:0d:c5:00:74:4d:0b:a3:71:7a:ad:
24:b0:b4:9a:e8:a6:3f:7a:6f:db:3e:03:97:e2:3c:
41:63:8c:ea:32:48:53:2e:53:5b:04:f5:0e:02:a8:
46:7a:71:2c:d5:7d:dc:75:d0:0b:d2:e2:36:60:24:
b9:5a:9a:c7:f3:a2:bc:11:85:49:cd:3b:31:5d:8c:
aa:d5:df:99:61:61:fa:7d:46:f5:dd:2e:93:82:dd:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:94:38:18:CD:24:1B:E6:16:3C:49:0C:CD:74:3C:BE:1B:73:67
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uBeUOBjNJBvmFjxJDM10PL4bc2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.79.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6d:21:57:fd:a1:4c:ef:c8:84:5b:81:b7:bc:c2:f9:ff:c3:
62:15:ed:e9:38:93:f8:56:d5:53:0d:88:8a:03:7f:23:0a:3f:
a6:70:95:2b:cc:7d:18:29:12:e2:42:a2:c1:40:63:7e:45:15:
77:06:98:03:cd:09:f0:74:ce:29:9a:e2:44:3a:99:94:2c:4f:
04:ee:d3:5e:7b:27:48:59:cc:fc:10:fe:b1:4f:f0:a0:69:9c:
b8:43:9a:f6:fe:29:9b:1f:78:4d:28:29:28:ae:bc:5b:f4:2a:
7e:65:b0:37:8e:92:ad:54:b8:68:58:8a:9d:d7:a1:c4:97:b2:
53:95:7e:3d:fc:ee:d2:eb:c2:f9:39:96:2e:f2:5d:35:a2:b5:
1b:d8:19:4d:7c:2c:72:1d:db:69:6a:5d:d3:a0:07:8a:ee:4b:
b2:bf:cc:25:c8:5d:b9:23:02:d4:8e:34:42:9d:65:9f:0d:df:
29:dc:a3:c8:18:10:9a:d3:3e:67:fe:02:4d:e4:6f:39:03:55:
c0:89:cc:a0:e7:3e:a5:ea:0d:4f:27:04:c7:3d:b5:f4:4f:2e:
d2:43:0b:bf:60:7e:c3:3e:d7:d2:cd:7d:ca:fe:02:87:bd:ef:
f9:89:03:cb:c8:6f:19:3c:a8:a7:da:52:6b:af:9d:ac:f2:5f:
49:5f:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:04 2025 by rpki-client