Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/1-ByfuB5lSyYV9b8iGpu1b_gTc_o.roa
File: 1-ByfuB5lSyYV9b8iGpu1b_gTc_o.roa (raw, json)
Hash identifier: 51ndzHhTzu0Cq9icXq4U+UgBNc9b1l6vM46W5I6Lc0k=
Subject key identifier: F8:1C:9F:B8:1E:65:4B:26:15:F5:BF:22:1A:9B:B5:6F:F8:13:73:FA
Certificate issuer: /CN=91242d9769b759349c8018c908736e54dffc0cb5
Certificate serial: 018779E372409C11418E56547C793A383894
Authority key identifier: 91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/1-ByfuB5lSyYV9b8iGpu1b_gTc_o.roa
Signing time: Thu 13 Apr 2023 09:12:41 +0000
ROA not before: Thu 13 Apr 2023 09:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.249.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e3:72:40:9c:11:41:8e:56:54:7c:79:3a:38:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91242d9769b759349c8018c908736e54dffc0cb5
Validity
Not Before: Apr 13 09:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81c9fb81e654b2615f5bf221a9bb56ff81373fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:e8:42:70:f9:7a:89:ea:70:8f:7f:99:41:
83:c3:2c:2b:86:3f:e2:d9:ba:68:81:49:d5:b7:95:
0c:95:3c:ed:37:30:d0:ac:fb:2e:c0:77:32:69:5a:
6a:7b:54:ee:a3:23:0f:7d:c4:c9:07:3f:77:17:46:
c6:d4:f0:a9:65:36:41:ab:55:78:67:98:7a:3e:e4:
07:7f:91:74:d7:be:bf:f7:1a:38:0e:64:f4:06:82:
d3:9b:a6:56:6e:81:50:74:7a:88:03:f6:d6:88:1f:
26:4d:c8:a6:b1:88:ee:b6:97:79:9a:ad:e7:c8:ee:
5c:6b:f2:7f:8d:9d:33:c4:4c:d9:92:fa:3f:97:71:
fa:4a:16:52:2f:ed:01:11:db:fb:02:70:c1:3f:26:
25:f9:b0:97:02:d6:3d:de:83:87:56:4f:a7:a1:b2:
df:62:9d:c9:45:05:a8:99:a9:03:19:25:6b:79:33:
5b:3d:d9:fe:04:17:94:3c:a6:69:16:8c:fc:78:b5:
b4:07:d8:dc:f0:d7:ac:83:03:7d:7c:4a:a8:83:5c:
06:e9:34:18:19:f6:d7:1c:5e:68:19:df:84:f1:66:
b8:c5:1f:51:45:61:74:f2:8f:52:7a:31:18:c2:a4:
e8:a1:44:8f:12:f0:0f:6a:0c:8b:4b:c2:5a:c3:cf:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1C:9F:B8:1E:65:4B:26:15:F5:BF:22:1A:9B:B5:6F:F8:13:73:FA
X509v3 Authority Key Identifier:
keyid:91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/1-ByfuB5lSyYV9b8iGpu1b_gTc_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.55.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0b:b1:7d:8e:e7:67:22:78:f8:f0:61:7a:2e:fc:ca:b6:40:
72:62:e5:e0:90:f8:85:ef:43:36:ad:d8:8c:5a:6a:cb:4f:f7:
58:4a:de:82:0b:75:e8:05:e4:b6:f5:1e:32:b6:05:e2:f0:a5:
7b:aa:5f:cc:ac:1a:20:a3:d0:09:63:20:43:42:d1:df:b5:09:
17:42:e2:4a:0f:c0:5e:f0:c4:78:11:3e:ea:24:36:ed:0c:91:
de:41:5b:9c:b1:29:5f:f3:2d:47:fa:51:4c:bc:d6:24:7b:c0:
23:9e:6f:9a:cf:81:c0:d1:93:29:78:96:95:12:45:b5:f1:19:
99:a4:f1:87:1b:d1:c3:41:84:e5:6e:d4:fa:0a:a6:25:d5:16:
74:f3:62:4b:e9:39:d9:da:af:3a:1a:00:ac:12:d0:3b:8a:c8:
cd:bd:04:43:70:e1:82:85:18:19:66:08:59:af:11:a4:02:a8:
c9:38:a6:e0:5b:2e:a0:3f:ee:90:05:e0:65:a8:45:3d:36:eb:
0c:14:f3:b9:a3:7a:8a:3d:8f:c3:28:0b:fb:ed:b9:70:4e:7b:
ab:ee:a9:29:8b:ba:99:58:6b:7d:b3:8f:6d:07:fd:eb:c9:26:
c0:0c:40:bb:45:18:40:1c:f9:75:64:14:ad:1e:70:5d:79:06:
61:87:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:33 2025 by rpki-client