Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/vztgWI-5W9hFUdhXaJ6kGp2Xs2E.roa
File: vztgWI-5W9hFUdhXaJ6kGp2Xs2E.roa (raw, json)
Hash identifier: 5zQbYRI0MbnTMw8PQdcs6chhuqyk65Cj6ZAZqhZY9Hs=
Subject key identifier: BF:3B:60:58:8F:B9:5B:D8:45:51:D8:57:68:9E:A4:1A:9D:97:B3:61
Certificate issuer: /CN=31836010eedef15f76adeba9f729a828bf2be8cb
Certificate serial: 01856F8B7F942E4ED331A5F9971DBD8C8428
Authority key identifier: 31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/vztgWI-5W9hFUdhXaJ6kGp2Xs2E.roa
Signing time: Sun 01 Jan 2023 22:54:51 +0000
ROA not before: Sun 01 Jan 2023 22:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.239.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:7f:94:2e:4e:d3:31:a5:f9:97:1d:bd:8c:84:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31836010eedef15f76adeba9f729a828bf2be8cb
Validity
Not Before: Jan 1 22:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf3b60588fb95bd84551d857689ea41a9d97b361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:76:57:08:5c:dd:b2:12:16:4d:14:59:35:
f4:8d:6f:1e:45:2b:fe:34:c1:7f:a8:59:14:4a:7f:
ef:a6:76:97:7f:fd:86:00:0f:7f:44:45:c7:6f:fc:
05:6c:99:87:88:6f:5d:a2:07:89:a2:7a:85:f6:8e:
c4:da:f8:89:5c:58:13:46:a7:59:5d:2c:44:66:4e:
24:10:34:a1:7f:86:cc:ed:44:a4:99:e2:11:0f:d1:
90:96:e6:18:db:a8:b8:15:47:5e:80:fb:33:2b:30:
2d:ec:75:4e:af:8c:91:9f:42:d0:49:80:72:35:d8:
ed:4c:24:0b:16:91:4f:92:0f:7c:6b:9c:0c:d6:c0:
0a:a2:85:57:f0:63:54:49:14:3e:72:9e:76:e0:0d:
23:d3:59:91:61:80:a6:b6:76:72:fd:ca:87:a5:09:
1a:67:ee:53:fb:4f:22:cc:0b:e2:0e:9b:57:b3:50:
1a:bc:f7:d9:a5:7e:d5:11:22:ec:20:b5:13:81:a7:
bb:c4:d3:e5:53:60:86:9e:c1:9b:34:d9:1e:05:1f:
3e:74:23:f5:c1:98:35:c1:a3:4d:30:0b:10:83:fd:
37:50:16:cb:89:cd:10:d0:2c:81:c1:8e:eb:33:d6:
a4:e6:63:58:ff:31:62:26:b1:c4:57:36:61:8d:7b:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:60:58:8F:B9:5B:D8:45:51:D8:57:68:9E:A4:1A:9D:97:B3:61
X509v3 Authority Key Identifier:
keyid:31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/vztgWI-5W9hFUdhXaJ6kGp2Xs2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/MYNgEO7e8V92reup9ymoKL8r6Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
41:58:37:9f:c3:b4:17:e8:2f:a2:51:00:67:06:67:b7:26:0a:
dd:aa:d4:c3:4d:72:f5:f5:84:8f:39:c0:d0:9e:1b:1f:41:a8:
3c:3a:3b:f0:34:dd:ed:52:0d:0f:70:f3:7b:1f:9c:5a:78:29:
bc:7e:25:c9:c9:e9:47:0b:a5:5d:1f:dc:36:7a:68:5f:f1:14:
bb:c7:da:51:d4:ef:4e:3e:6a:ac:9b:98:c8:78:8b:18:3e:45:
7e:40:06:d0:5a:2a:fd:c0:d3:ef:24:a0:5f:51:12:78:f4:f1:
75:84:ff:1f:eb:6c:d9:73:23:ac:cc:eb:f0:5f:89:c9:fa:89:
6d:75:a8:2b:c5:3e:97:02:dd:de:98:e4:ec:0b:88:71:f9:87:
4e:44:f6:a9:f9:4a:9a:c1:38:bb:e0:3b:d6:25:b8:d9:e7:98:
66:2b:f9:50:ca:81:9d:64:e8:e1:4a:6e:c0:3c:5d:16:c7:ee:
db:9e:99:dd:d1:97:4b:1c:34:10:aa:d6:56:dd:82:c4:be:9d:
49:49:73:9a:a5:ea:f7:6d:75:0a:a5:cc:e9:8b:a4:fb:b7:de:
4c:31:26:ec:e0:59:e4:c7:c4:20:aa:11:20:49:d7:e2:f3:f5:
a2:3a:6a:a4:a2:83:f6:0a:f0:32:75:84:33:51:27:f4:36:0a:
33:3c:b0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:00 2025 by rpki-client