Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/z4i7vNcM5nMOlfJY-a4tnfdWPl8.roa
File: z4i7vNcM5nMOlfJY-a4tnfdWPl8.roa (raw, json)
Hash identifier: qrFsUk+F6BZL/cGcD1WzgGfPterf4Wr20EkcQaUwaWQ=
Subject key identifier: CF:88:BB:BC:D7:0C:E6:73:0E:95:F2:58:F9:AE:2D:9D:F7:56:3E:5F
Certificate issuer: /CN=064aba015d2b652cb489da4bd992d14be07673c7
Certificate serial: 018964C060CCDC6D6D5409F49FA7C83FE8BE
Authority key identifier: 06:4A:BA:01:5D:2B:65:2C:B4:89:DA:4B:D9:92:D1:4B:E0:76:73:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/z4i7vNcM5nMOlfJY-a4tnfdWPl8.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.242.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:60:cc:dc:6d:6d:54:09:f4:9f:a7:c8:3f:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064aba015d2b652cb489da4bd992d14be07673c7
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf88bbbcd70ce6730e95f258f9ae2d9df7563e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:71:4c:50:e3:fb:79:90:2c:61:67:46:a2:
37:2a:04:d1:3f:d1:a8:1f:b8:9b:5d:5b:ab:da:79:
03:a8:cd:4b:ba:7d:51:b1:12:a9:d9:45:54:5f:2f:
fe:5a:31:a8:2b:3e:0c:41:43:ba:0c:41:a2:93:33:
81:56:b7:64:58:18:67:63:f8:7f:47:19:c4:a3:b2:
01:99:02:d5:8c:8f:0d:32:c5:97:9d:2d:30:ad:e5:
fe:36:de:b3:31:2c:71:e0:cc:66:a3:7c:eb:31:c4:
34:cb:7e:11:ed:2f:13:2f:da:90:4f:ef:0e:fd:bb:
de:44:85:f0:87:c5:5b:76:89:c2:c9:74:59:a9:1e:
8d:ea:58:45:be:6e:2e:50:d1:bf:4a:0e:a5:c6:a7:
50:e9:0e:dc:4f:c3:4b:aa:b8:42:30:69:83:7e:99:
26:4b:93:c3:31:b7:84:22:83:82:35:05:56:eb:4d:
0c:79:bf:a6:57:63:ba:f4:ec:f2:ad:07:b5:5f:8a:
c1:b7:45:56:ac:1d:74:af:9f:6f:03:01:90:9b:c6:
d3:79:69:29:dd:9a:33:e1:e4:3f:03:f5:50:4e:50:
36:48:e1:2c:d8:0f:88:11:89:1b:69:3a:45:44:fa:
cb:59:85:ea:49:2d:4c:27:fc:cb:21:6d:0e:e8:2d:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:BB:BC:D7:0C:E6:73:0E:95:F2:58:F9:AE:2D:9D:F7:56:3E:5F
X509v3 Authority Key Identifier:
keyid:06:4A:BA:01:5D:2B:65:2C:B4:89:DA:4B:D9:92:D1:4B:E0:76:73:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/z4i7vNcM5nMOlfJY-a4tnfdWPl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:12:1e:c3:07:33:54:b9:9b:61:ec:2b:e4:c2:a4:aa:ee:85:
4a:e0:e0:4e:cd:cb:c1:c0:c9:13:2d:c4:a0:82:9b:b9:e0:4f:
b5:14:2f:4a:02:9f:69:1a:57:fe:26:ff:96:e8:3b:c8:61:bb:
2b:43:67:79:99:83:0a:20:15:fe:8d:bd:04:7a:d9:8d:a5:95:
ae:69:ac:e5:06:2a:16:d9:c9:40:65:23:ae:5f:c8:e0:3c:bc:
5a:24:69:e5:e0:5b:3d:b6:83:8d:97:11:fd:f1:ea:a7:e3:a2:
94:7b:cd:fb:f9:83:81:d3:10:00:bf:7d:2d:71:19:36:0b:9a:
f5:77:5e:31:04:f6:ac:42:6c:0e:ac:67:fb:84:f2:09:7f:28:
d8:c3:1b:0b:ae:fb:c9:34:70:cc:92:a5:18:6b:b2:6c:be:80:
cc:d6:e1:94:6a:7e:44:57:64:71:c9:86:ac:1c:5a:89:5d:63:
26:f3:04:91:11:77:e4:d9:6e:28:68:b7:13:33:2d:b3:64:44:
ba:78:21:65:4f:37:e2:15:0e:4c:60:84:4f:1b:4b:5d:bf:28:
76:0a:57:8a:c4:eb:bb:60:69:44:d7:f6:41:ef:30:b8:06:7e:
51:8f:cc:81:e6:68:83:dc:fc:16:02:77:df:c8:2a:89:38:da:
2d:31:7c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:58 2025 by rpki-client