Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/kwJh6UT92BB7AGI1CredbetmL7M.roa
File: kwJh6UT92BB7AGI1CredbetmL7M.roa (raw, json)
Hash identifier: MJs9hmodok+2xEIJTQJH+rLj3Ca/8N7b5mnIEwo/zdQ=
Subject key identifier: 93:02:61:E9:44:FD:D8:10:7B:00:62:35:0A:B7:9D:6D:EB:66:2F:B3
Certificate issuer: /CN=feac88baf93dc07a1d29a50db3d50575d332c799
Certificate serial: 01862B82FA3A44C265B60DD6C9DFC26E6C54
Authority key identifier: FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/kwJh6UT92BB7AGI1CredbetmL7M.roa
Signing time: Tue 07 Feb 2023 10:54:09 +0000
ROA not before: Tue 07 Feb 2023 10:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 91.236.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:82:fa:3a:44:c2:65:b6:0d:d6:c9:df:c2:6e:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feac88baf93dc07a1d29a50db3d50575d332c799
Validity
Not Before: Feb 7 10:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=930261e944fdd8107b0062350ab79d6deb662fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:1a:f7:5f:f0:f7:09:ab:1f:1a:51:82:06:
28:ed:1b:02:e7:a6:13:d3:18:e7:85:47:9b:60:d0:
a5:71:18:c6:15:99:e4:27:67:b7:c7:0e:be:72:22:
48:cf:95:d5:d3:a6:b2:e7:db:20:76:84:c7:a4:63:
d2:c4:db:9b:61:9c:8b:87:34:eb:ae:0c:01:d6:93:
97:cd:93:fb:8f:bc:aa:f6:06:2d:e4:3a:37:29:2a:
3c:ec:3d:6e:40:ec:a7:c2:a1:99:f3:ca:fd:a0:e2:
67:02:c4:69:32:ea:42:33:97:e2:2e:0e:ff:af:f7:
66:30:f0:d4:08:08:50:5d:a5:f0:07:a5:bd:2d:19:
30:dc:c1:1a:e5:2e:d6:96:db:02:aa:7b:69:e8:ec:
e9:8b:68:d9:2d:1f:b9:2a:12:2a:da:e2:34:4d:97:
f5:98:56:86:db:e0:c9:f8:82:f9:5f:23:92:9a:85:
d8:90:14:77:9c:51:3e:8e:38:43:7d:c6:af:55:a3:
d5:c3:c8:b5:09:d9:1f:fc:a0:d1:1e:e2:05:7d:69:
76:7b:84:cc:55:8e:05:fb:48:7a:21:35:b4:8b:35:
9e:0d:60:34:af:a2:8a:a6:ab:34:cc:07:91:88:f1:
79:f3:b9:71:4b:23:e7:c5:4d:1d:94:ea:78:4e:44:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:61:E9:44:FD:D8:10:7B:00:62:35:0A:B7:9D:6D:EB:66:2F:B3
X509v3 Authority Key Identifier:
keyid:FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/kwJh6UT92BB7AGI1CredbetmL7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.79.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:eb:00:62:67:dc:a2:b9:fa:03:2e:57:7a:ae:f8:5b:6f:c7:
51:ec:ae:5b:73:d2:04:eb:26:f9:00:ce:e6:29:ca:64:91:0d:
04:00:e4:25:9f:80:45:20:27:4a:1f:4d:b0:45:42:d3:2d:b1:
0e:14:34:85:68:71:24:64:f2:6d:77:ae:7e:ae:85:30:a6:56:
98:5e:38:c7:86:11:e1:36:93:83:41:ef:63:ff:da:b6:57:5b:
6f:df:30:be:ee:7a:2a:56:95:54:b4:31:a8:32:17:22:1d:a9:
8a:9b:59:2b:ba:57:0a:68:8f:c3:40:19:71:af:62:3d:00:23:
e0:11:a3:e4:80:15:0d:75:8f:09:fe:c4:f4:39:41:e6:fe:9e:
75:9c:13:70:a4:d2:0e:5e:48:b6:0d:01:59:86:df:86:99:1a:
9c:10:18:16:90:3c:f2:2e:a6:1a:31:7e:55:e6:20:0d:13:c7:
5c:7d:9f:87:35:32:b5:d7:67:ad:44:d5:6b:93:3e:a3:ab:c7:
a0:50:10:e1:b0:ca:c5:f8:be:56:f1:36:aa:38:e7:0e:a0:da:
a2:e5:30:17:29:b3:ab:39:68:50:03:88:6a:da:de:63:b8:ce:
9c:07:d7:db:b8:90:c0:6a:a6:f6:0a:6a:ca:a5:39:91:34:69:
fd:b3:02:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:50:42 2025 by rpki-client