Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fe088b-2835-4e56-b460-b2835df80eb4/1/J9SOTTtQY-Gbi7tCUjEhS-FqFIE.roa
File: J9SOTTtQY-Gbi7tCUjEhS-FqFIE.roa (raw, json)
Hash identifier: 8qSohqAQ6bv5KsS00nVbOi8/gVpkSFFBPIe8uUA35vI=
Subject key identifier: 27:D4:8E:4D:3B:50:63:E1:9B:8B:BB:42:52:31:21:4B:E1:6A:14:81
Certificate issuer: /CN=11d1b0c1ed4766fd3463d8a3933563202a2b7daf
Certificate serial: 0190306EA608781A7BAE95A08D77C26C99F4
Authority key identifier: 11:D1:B0:C1:ED:47:66:FD:34:63:D8:A3:93:35:63:20:2A:2B:7D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGwwe1HZv00Y9ijkzVjICorfa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fe088b-2835-4e56-b460-b2835df80eb4/1/J9SOTTtQY-Gbi7tCUjEhS-FqFIE.roa
Signing time: Wed 19 Jun 2024 12:17:56 +0000
ROA not before: Wed 19 Jun 2024 12:17:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 91.205.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:6e:a6:08:78:1a:7b:ae:95:a0:8d:77:c2:6c:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d1b0c1ed4766fd3463d8a3933563202a2b7daf
Validity
Not Before: Jun 19 12:17:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27d48e4d3b5063e19b8bbb425231214be16a1481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:cb:7e:57:39:ff:b3:0f:46:83:f1:f6:cb:
6b:cd:e6:17:03:b9:d4:c3:65:27:9d:eb:60:8a:ee:
6b:3e:73:48:d3:66:1c:17:e6:2e:17:6f:15:79:15:
62:17:2c:65:f1:50:da:59:9f:f5:81:fa:e4:26:78:
08:2c:c0:29:41:66:e2:85:ca:98:11:9f:23:e6:51:
fa:8a:0a:49:64:79:ce:93:20:aa:8e:d1:1b:f5:2c:
9c:84:61:bf:06:9d:55:a3:67:b4:83:0a:c3:0d:20:
00:f1:ad:a1:61:b2:41:eb:38:ca:c2:aa:2c:48:52:
f5:da:1b:d9:87:1c:0c:99:18:ff:7b:be:3b:02:03:
f6:c9:50:47:1a:98:68:f2:0d:d7:fd:b5:5d:6e:c7:
31:28:06:6f:8b:68:81:7a:90:46:0c:8b:eb:7a:8c:
0a:46:b6:b8:e1:a1:d8:8c:79:d9:4d:18:f6:19:cd:
89:41:16:0c:24:67:66:40:fc:54:e8:d2:0d:df:a5:
b9:89:c9:23:a6:fb:61:7f:32:6e:8c:68:e8:ca:2c:
9e:05:54:24:ee:1f:2b:48:45:58:4b:b5:0d:b5:af:
17:af:fc:23:90:c6:9a:d3:9f:07:18:92:1e:5d:62:
52:58:58:ca:77:86:ac:e5:55:dc:e1:da:d4:66:f7:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D4:8E:4D:3B:50:63:E1:9B:8B:BB:42:52:31:21:4B:E1:6A:14:81
X509v3 Authority Key Identifier:
keyid:11:D1:B0:C1:ED:47:66:FD:34:63:D8:A3:93:35:63:20:2A:2B:7D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGwwe1HZv00Y9ijkzVjICorfa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fe088b-2835-4e56-b460-b2835df80eb4/1/J9SOTTtQY-Gbi7tCUjEhS-FqFIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fe088b-2835-4e56-b460-b2835df80eb4/1/EdGwwe1HZv00Y9ijkzVjICorfa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:80:ed:4c:07:0f:4f:42:33:10:1d:0d:32:d8:46:70:d3:c1:
1d:73:51:cc:6a:86:16:2c:01:fd:2a:96:b9:4d:93:38:24:30:
c5:df:82:23:52:78:d2:1f:2c:b7:dd:41:8a:ec:24:a9:05:d1:
31:41:f9:75:ca:7f:75:2a:6b:e1:f4:15:ba:ba:49:59:ac:94:
f4:c0:02:c8:f6:b9:1b:a4:26:88:6e:ae:58:03:b2:cb:87:d5:
3a:05:7e:ff:6c:83:8a:42:cc:54:79:2e:a6:bc:3b:7e:ea:39:
6c:67:a1:00:67:db:b5:c7:86:d7:53:a2:27:54:83:0f:26:8d:
3f:7a:79:9b:9c:f2:f5:b8:ad:05:fe:a7:8b:48:be:4d:a4:7c:
9e:78:9e:e1:09:05:05:14:dd:9d:1a:91:a3:a7:1c:40:d5:32:
d7:c6:51:17:b2:a9:a3:8c:95:9f:48:5e:85:cf:7d:b3:80:a0:
16:d7:b1:5b:76:7f:d5:f2:ed:25:45:6a:a6:f2:1f:f4:5a:c5:
55:ae:aa:6d:90:40:c2:ab:e6:10:e7:c8:0b:c7:8c:df:10:ce:
45:b9:ab:12:55:90:db:ac:f1:04:57:55:e6:4a:94:55:34:77:
77:fc:86:c7:e4:c0:87:f4:7b:58:cb:33:0a:c8:be:0c:8e:6b:
bf:9f:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:07 2025 by rpki-client