Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/tgbRQo561KEzj9zEp_L-vOg4NwM.roa
File: tgbRQo561KEzj9zEp_L-vOg4NwM.roa (raw, json)
Hash identifier: YnfmWKKOED5LevT5/9lQKYyUH317NiwOsCZa0fWQRCs=
Subject key identifier: B6:06:D1:42:8E:7A:D4:A1:33:8F:DC:C4:A7:F2:FE:BC:E8:38:37:03
Certificate issuer: /CN=feac88baf93dc07a1d29a50db3d50575d332c799
Certificate serial: 0185710BE83743B69A4BFD4D1347D06C1803
Authority key identifier: FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/tgbRQo561KEzj9zEp_L-vOg4NwM.roa
Signing time: Mon 02 Jan 2023 05:54:43 +0000
ROA not before: Mon 02 Jan 2023 05:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211193
IP address blocks: 91.236.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:e8:37:43:b6:9a:4b:fd:4d:13:47:d0:6c:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feac88baf93dc07a1d29a50db3d50575d332c799
Validity
Not Before: Jan 2 05:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b606d1428e7ad4a1338fdcc4a7f2febce8383703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:b6:14:cb:da:25:9a:bc:b4:1f:ac:54:ba:
9f:53:bf:5c:c7:41:c5:91:20:c4:17:a5:fa:67:95:
55:46:6e:24:44:c8:02:5b:d4:6a:19:6f:e5:bd:85:
b1:b1:9a:69:0a:18:8b:9f:fe:47:7f:db:a5:d5:02:
da:91:5f:c3:0e:4b:15:14:17:3c:9c:ab:aa:92:62:
f5:bf:98:70:70:4e:a4:27:77:46:6c:b4:2e:34:7e:
d2:21:39:95:14:05:42:47:1c:c6:05:89:22:c3:58:
dd:60:89:f9:bd:c2:65:71:cc:70:45:38:ba:a0:8f:
dc:6f:9b:82:9b:a5:21:4f:77:03:bb:f8:3c:df:fb:
b8:7d:3d:0f:61:dc:43:1d:19:3f:22:84:b1:a5:60:
c2:48:97:b9:44:7f:b7:d9:f1:a5:f1:92:45:98:c5:
24:7e:bd:24:fe:04:5f:3f:00:70:52:ad:59:44:f9:
d3:3c:a2:20:4d:41:0e:12:fa:5a:c0:c8:3b:d8:42:
7f:56:52:a0:20:d2:14:77:fe:ee:e5:2f:8d:2a:b3:
85:38:12:32:0a:5f:36:e4:26:a3:7e:75:03:7b:cb:
35:51:1b:3a:62:c8:ae:15:f7:e3:3e:86:d7:78:dc:
fb:6f:46:d3:be:69:6b:53:8b:5e:34:a5:52:ff:25:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:D1:42:8E:7A:D4:A1:33:8F:DC:C4:A7:F2:FE:BC:E8:38:37:03
X509v3 Authority Key Identifier:
keyid:FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/tgbRQo561KEzj9zEp_L-vOg4NwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.79.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ac:6e:5e:13:bb:b8:f9:0e:e6:2a:eb:f4:f4:c1:5d:53:09:
77:ac:95:bf:b9:e6:69:40:b7:13:b4:89:ab:4d:cd:8d:ff:84:
15:4b:53:15:59:3f:06:88:57:49:2a:40:86:76:8c:e3:3e:a4:
17:ed:92:0d:21:a2:47:65:b9:4c:9b:92:b4:d2:b1:ac:96:e4:
f1:08:cf:00:df:36:d1:34:e5:e0:e7:b5:b8:02:d4:30:9e:53:
32:f8:83:a2:ca:66:3c:54:1f:84:f5:13:7c:07:87:65:2f:99:
8b:11:83:58:8e:bc:65:76:56:60:99:2a:f0:3e:28:2d:a0:15:
b6:82:a1:e0:a7:0e:5f:d8:c5:8e:b3:ea:3d:15:46:9b:f2:fe:
b2:ed:54:16:fc:a9:26:03:0c:61:d6:d7:7a:4b:4a:cc:4b:b8:
ad:6a:69:c2:5f:83:2e:3e:21:cf:af:04:5b:d2:8e:12:bc:d9:
af:a8:24:ad:9c:4a:54:15:be:c0:58:92:0b:fe:be:59:53:14:
bf:57:78:f5:e4:2c:5c:d9:82:07:ee:f6:c7:ec:5b:1b:f6:21:
63:de:41:c5:0a:e6:9b:89:65:8a:0d:f4:9d:66:be:aa:36:4a:
4b:f3:96:ea:77:d2:ca:8e:f5:e2:81:21:68:34:c6:08:65:81:
f8:ce:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:18:38 2025 by rpki-client