Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/__nau84opvh6x8gClEFBRAiXmWA.roa
File: __nau84opvh6x8gClEFBRAiXmWA.roa (raw, json)
Hash identifier: YmxhU/gqMkUiXAnHRcwQQzBy0PVyk04lFfQe62Bt4ko=
Subject key identifier: FF:F9:DA:BB:CE:28:A6:F8:7A:C7:C8:02:94:41:41:44:08:97:99:60
Certificate issuer: /CN=05ccb1770ef70619bcad6baac7a8372bc900711f
Certificate serial: 01856C78141215DE7726B6BC0245BD6D687B
Authority key identifier: 05:CC:B1:77:0E:F7:06:19:BC:AD:6B:AA:C7:A8:37:2B:C9:00:71:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/__nau84opvh6x8gClEFBRAiXmWA.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.246.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:14:12:15:de:77:26:b6:bc:02:45:bd:6d:68:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ccb1770ef70619bcad6baac7a8372bc900711f
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fff9dabbce28a6f87ac7c8029441414408979960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:af:53:1a:a0:24:dc:3e:c0:0c:4c:a6:ba:
f9:a3:4b:ea:33:75:8c:71:15:f9:03:52:72:45:fa:
2c:36:a7:2f:16:9d:e3:a1:d6:a0:ab:d6:e1:2f:b7:
18:33:f2:e7:35:b6:81:f4:86:87:20:99:38:23:7f:
45:9f:5b:0e:9e:6a:39:cd:75:c3:1a:2b:ec:18:39:
6e:ca:b1:2a:7a:b7:be:04:d3:08:b3:47:aa:82:dc:
2f:e9:94:89:9f:61:5c:d3:ab:2e:ca:36:73:e5:52:
06:b5:fb:07:cd:6b:d1:1d:9d:7e:44:7e:c0:7c:dd:
95:3c:98:9d:9c:c4:0a:80:86:7f:55:76:16:f9:de:
23:f1:d1:04:75:a1:57:3a:91:a9:24:a9:6e:6f:29:
c5:74:c2:8c:f8:2e:80:c0:ba:26:dd:b6:70:d1:54:
35:eb:b3:41:32:70:05:ab:d4:18:02:4a:80:e5:56:
7e:0c:df:06:b0:5e:b2:b3:3a:48:cb:6a:38:b6:0a:
db:2b:50:aa:01:19:fd:69:30:80:29:dd:27:c0:5b:
e6:ba:ab:b2:5a:6d:5c:c2:a7:f6:af:c6:cb:89:7b:
58:7d:72:86:d9:58:81:af:2f:aa:c0:2e:a8:ee:0f:
02:54:41:8c:26:c2:95:54:a4:59:63:0a:c3:83:23:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F9:DA:BB:CE:28:A6:F8:7A:C7:C8:02:94:41:41:44:08:97:99:60
X509v3 Authority Key Identifier:
keyid:05:CC:B1:77:0E:F7:06:19:BC:AD:6B:AA:C7:A8:37:2B:C9:00:71:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/__nau84opvh6x8gClEFBRAiXmWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.59.0/24
Signature Algorithm: sha256WithRSAEncryption
52:43:ec:cd:c1:3b:f3:6b:7e:21:2c:a7:8e:22:d9:4b:ff:79:
a1:35:df:b0:b5:10:09:56:b9:d6:e1:cd:ca:28:db:6c:57:72:
84:2d:68:16:4f:d6:b7:88:05:f2:14:da:0c:81:ff:c7:ee:6a:
28:38:01:87:f8:44:28:fb:37:0f:d0:0c:28:0a:64:cb:2f:19:
41:67:70:37:94:cf:78:d4:6f:45:f3:e7:25:b0:2c:20:2c:fa:
f4:33:75:e6:a5:c6:03:f2:53:ba:fd:5f:e2:e6:65:aa:9a:e7:
e6:21:69:72:4c:bd:d0:0b:1f:7e:01:74:eb:ec:cf:1c:a0:57:
42:5b:2f:d4:78:cf:fa:97:98:ef:26:cc:f2:95:57:6e:7f:74:
f7:e3:34:1f:93:1e:06:23:5c:73:59:b1:27:b4:61:9f:e7:13:
33:79:0c:6d:f3:2d:7f:16:ba:d3:5e:b3:fc:70:fe:ab:72:66:
f5:9d:25:7b:59:7d:28:bd:ca:56:12:cb:80:19:03:cb:0d:20:
59:64:50:59:52:02:44:c0:cf:30:78:55:7d:86:96:33:fc:84:
03:92:d2:ad:bc:fe:52:18:ae:0b:ec:e5:06:78:59:d6:4a:ba:
14:d5:3e:f1:75:7c:5e:a0:cb:f7:66:4e:9a:e2:70:3a:09:9a:
f4:ec:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:08 2025 by rpki-client