Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/5Fi-gPJF_EANw6sS3AGRBh-9r5U.roa
File: 5Fi-gPJF_EANw6sS3AGRBh-9r5U.roa (raw, json)
Hash identifier: W9SD74Gl0tpgV/im+0gYp6EhOB2MNUt9vNcK+6S+4eA=
Subject key identifier: E4:58:BE:80:F2:45:FC:40:0D:C3:AB:12:DC:01:91:06:1F:BD:AF:95
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 018BA60F828C89EEDAA1DC4A6D2AB00B63FA
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/5Fi-gPJF_EANw6sS3AGRBh-9r5U.roa
Signing time: Mon 06 Nov 2023 19:15:16 +0000
ROA not before: Mon 06 Nov 2023 19:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136557
IP address blocks: 91.217.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:0f:82:8c:89:ee:da:a1:dc:4a:6d:2a:b0:0b:63:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Nov 6 19:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e458be80f245fc400dc3ab12dc0191061fbdaf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:a0:0a:ac:66:48:c2:9a:90:04:d0:af:88:
04:4c:5e:42:ce:f1:f3:fb:ae:a9:b2:a9:91:46:03:
3e:9a:6f:45:49:ae:9e:ec:e5:48:0f:0a:fd:a1:f5:
88:b3:2b:46:b8:fb:82:8f:41:2a:e1:a1:f1:74:3a:
31:fc:47:5f:22:c3:ba:21:dd:f4:4c:70:37:a3:05:
31:46:94:39:26:35:53:0d:51:a8:3e:10:59:e2:12:
ab:a6:ab:70:e2:15:2f:2e:47:1e:29:49:45:1f:02:
4c:7c:21:b5:92:f6:c6:0f:a8:31:13:39:9c:af:aa:
13:65:f7:7c:2d:54:12:1a:13:d7:75:64:7b:e3:38:
c7:8c:91:4a:27:d0:fc:e9:6d:30:8b:4c:77:34:ec:
fd:d6:8e:ba:6b:44:1a:ef:9a:f5:82:3c:5e:7c:02:
01:40:34:f8:37:e8:1b:4e:2b:a4:50:b2:98:a7:93:
01:56:21:65:bd:10:32:ce:32:06:6b:9d:7c:38:8d:
76:43:27:4f:36:7e:a4:09:be:7f:d7:af:08:12:b9:
d7:18:b5:e3:6d:59:e8:12:66:ce:4c:ac:b9:1f:b7:
da:ef:9c:b5:13:4d:d7:5b:d2:9f:b1:f3:e5:ac:62:
0e:9a:f2:e8:5a:29:2a:c9:c7:1e:d1:01:62:64:c2:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:BE:80:F2:45:FC:40:0D:C3:AB:12:DC:01:91:06:1F:BD:AF:95
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/5Fi-gPJF_EANw6sS3AGRBh-9r5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.72.0/23
Signature Algorithm: sha256WithRSAEncryption
69:c3:8d:f9:f4:4b:cd:ff:87:83:14:8d:54:ed:40:7e:1e:63:
f5:6b:31:58:92:9c:55:c2:e9:34:b4:c6:80:4c:cc:11:22:95:
a0:ad:c5:ee:99:a9:53:bf:c4:dc:69:f6:29:25:6a:45:8e:74:
9a:63:3a:6e:26:60:32:89:78:bb:0c:3e:9c:01:a9:29:eb:71:
d8:7f:d1:e3:9f:4b:ba:e2:d6:27:68:20:98:e4:aa:d4:ed:8f:
91:72:bb:08:80:4b:ef:17:58:36:49:9c:de:07:9f:08:cb:5e:
00:9f:5f:ad:3f:11:8a:54:1e:c0:ea:9a:8b:86:c2:03:d8:a0:
82:5f:5d:ef:2d:e5:74:bd:6f:b0:6e:d2:65:c5:c2:a4:6c:83:
56:35:f6:5c:70:cd:1a:df:7a:64:ae:f2:b8:d1:ff:8c:aa:6e:
ea:8a:89:a7:d3:a8:0f:09:03:f7:64:b7:71:cb:76:ac:ca:2f:
59:a3:93:b8:8e:62:98:d8:3b:fa:b3:96:a0:b7:d2:87:a2:08:
12:df:8f:4e:68:3d:cf:a0:c4:9d:ee:bd:cd:8c:d8:42:6b:69:
eb:6f:b6:95:1d:76:e1:83:b7:44:8d:17:17:4a:9e:54:1a:e8:
60:24:f7:f2:ca:8d:74:81:df:b5:cf:d1:a4:ed:6d:58:a7:bc:
8d:48:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:58 2025 by rpki-client