Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/SSbp1H89ZNwc1U6d3C9t5eOmOok.roa
File: SSbp1H89ZNwc1U6d3C9t5eOmOok.roa (raw, json)
Hash identifier: J3JF1AxlXCSgZgTHJJ2xUfLOcGcgFXPIQT/+R5gLnwg=
Subject key identifier: 49:26:E9:D4:7F:3D:64:DC:1C:D5:4E:9D:DC:2F:6D:E5:E3:A6:3A:89
Certificate issuer: /CN=e6cf91e7b949fd843d88ecfce2d1554d6ae981d9
Certificate serial: 0181F45578F19961086786174174150A2BAC
Authority key identifier: E6:CF:91:E7:B9:49:FD:84:3D:88:EC:FC:E2:D1:55:4D:6A:E9:81:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5s-R57lJ_YQ9iOz84tFVTWrpgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/SSbp1H89ZNwc1U6d3C9t5eOmOok.roa
Signing time: Tue 12 Jul 2022 21:34:11 +0000
ROA not before: Tue 12 Jul 2022 21:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:55:78:f1:99:61:08:67:86:17:41:74:15:0a:2b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cf91e7b949fd843d88ecfce2d1554d6ae981d9
Validity
Not Before: Jul 12 21:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4926e9d47f3d64dc1cd54e9ddc2f6de5e3a63a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:87:50:da:2e:45:21:0a:85:96:49:2a:f0:
a4:83:ca:c3:71:73:cb:14:0e:19:06:27:8e:43:2b:
a1:71:6b:d4:54:05:55:53:c9:24:37:82:9e:06:64:
31:78:f3:e6:5c:cd:fe:1c:a8:d5:2f:f4:0a:7b:f7:
e9:a5:45:bc:01:98:c4:73:44:0d:a1:f8:25:13:ae:
b9:cc:34:43:67:85:40:ad:76:4b:45:10:b5:8b:10:
7a:30:b7:8c:a3:ba:16:20:c2:13:69:2f:1d:4b:2b:
a4:92:9c:7e:f2:ed:46:e8:29:5a:fb:8d:43:8e:cc:
f5:d9:9e:2e:27:0e:26:7d:9f:75:a0:ec:5c:e3:a3:
0a:4e:92:41:04:2d:de:ae:15:c6:00:ca:1b:14:61:
28:04:87:97:b2:e8:70:6a:81:da:d9:a2:69:a2:b2:
db:bb:93:9d:ce:28:4f:9c:ca:01:11:1a:0f:a7:33:
f2:07:0a:ff:e6:09:41:91:5d:2a:fc:56:9a:f4:c6:
87:78:f8:ba:14:ec:65:7a:6c:a8:d4:a9:2a:b1:96:
eb:37:ef:70:1d:a4:73:86:20:dc:63:3b:96:88:89:
b3:cd:17:4e:f7:3e:e6:d9:56:6f:76:35:a5:cb:59:
4b:37:46:a0:e9:84:7c:59:85:43:b8:10:fc:29:48:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:26:E9:D4:7F:3D:64:DC:1C:D5:4E:9D:DC:2F:6D:E5:E3:A6:3A:89
X509v3 Authority Key Identifier:
keyid:E6:CF:91:E7:B9:49:FD:84:3D:88:EC:FC:E2:D1:55:4D:6A:E9:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5s-R57lJ_YQ9iOz84tFVTWrpgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/SSbp1H89ZNwc1U6d3C9t5eOmOok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/5s-R57lJ_YQ9iOz84tFVTWrpgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bb:8a:ee:f0:d0:45:13:37:69:4b:66:e2:ca:59:6f:ba:91:
c2:96:1b:fe:b7:3d:9c:7e:4b:c1:3a:b2:a8:7c:7c:f2:63:da:
4a:e7:75:11:76:ec:be:40:7c:4c:43:f7:97:b5:cd:84:f3:ca:
91:60:13:9b:6f:c9:b4:34:5b:62:a2:0d:20:92:3b:5d:84:84:
ed:a3:b0:ea:46:47:eb:e2:bf:9f:9d:d7:52:61:25:48:e6:cb:
94:b6:e9:2b:8f:20:e8:b0:5f:51:56:b6:78:19:94:bb:e8:ae:
69:44:4c:10:5f:58:95:05:7f:f6:64:a7:ee:39:6e:bc:96:61:
4e:99:28:a5:bc:6f:60:fd:e0:f6:95:3e:47:f6:ab:ff:55:f0:
7d:03:8b:8a:3e:91:8c:10:61:e9:33:38:ac:8c:53:84:05:5d:
7b:25:f9:b9:cd:d0:9a:7e:ac:52:83:c9:06:7f:6e:70:82:95:
64:d4:5f:86:2a:92:45:8a:cf:fc:88:55:3b:b2:76:63:ad:79:
3c:f2:d2:0e:50:8e:ef:95:35:33:55:73:21:42:0f:e5:49:5f:
17:71:33:d2:34:76:3d:9f:76:53:f9:0d:4e:56:97:b7:88:12:
60:79:87:31:54:f8:47:ca:70:3b:a1:28:0e:c4:ac:76:3c:cb:
4d:0a:88:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:07 2025 by rpki-client