Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/6uI8MmfOe6sSqsR1vi9TBlx8gSw.roa
File: 6uI8MmfOe6sSqsR1vi9TBlx8gSw.roa (raw, json)
Hash identifier: TPjmalGMEmPd0dKkWJE24zYSIhEgQ8UI1iIC9lQ/WeU=
Subject key identifier: EA:E2:3C:32:67:CE:7B:AB:12:AA:C4:75:BE:2F:53:06:5C:7C:81:2C
Certificate issuer: /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial: 07AA8253
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/6uI8MmfOe6sSqsR1vi9TBlx8gSw.roa
Signing time: Sat 01 Jan 2022 07:03:07 +0000
ROA not before: Sat 01 Jan 2022 07:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21343
IP address blocks: 91.223.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128614995 (0x7aa8253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Validity
Not Before: Jan 1 07:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eae23c3267ce7bab12aac475be2f53065c7c812c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:48:b6:56:f8:0a:01:0a:04:52:b1:16:cf:
79:4d:93:57:e6:31:d6:3b:7f:9f:60:75:9f:35:f3:
11:9a:90:d0:03:d3:a2:9a:b0:46:f2:d0:2a:1d:a1:
eb:12:ba:ac:89:b0:6a:67:2a:b5:56:7f:92:49:8e:
e6:e8:6e:41:5c:36:e8:db:a1:14:0b:e0:c7:2f:d9:
7a:96:40:24:25:03:09:cc:6c:8a:53:b6:c8:45:32:
e4:31:e6:70:e6:a4:26:f0:e5:65:5d:2a:f9:89:25:
3c:b1:9d:af:b7:ae:ea:80:53:24:88:f3:66:b2:2c:
14:8f:79:64:b4:f2:54:89:e0:77:22:da:72:51:19:
75:9b:7c:c9:e4:69:fb:2e:c7:7a:2b:e8:0d:bb:8c:
b2:93:ae:c9:06:42:53:73:f8:e7:23:51:10:54:f4:
ee:ab:36:15:e2:cf:26:9d:54:ce:d9:42:bc:93:e5:
d2:18:76:b8:49:32:a6:2f:fc:9d:8a:e6:1c:c7:89:
6e:fb:0c:00:c8:2e:ab:19:24:a3:40:75:39:01:29:
e5:8a:d4:90:3e:39:0e:64:9e:37:01:51:d7:bc:26:
2f:90:8a:a3:c8:31:49:2c:25:37:8e:8f:b2:56:d7:
ba:c2:ad:7a:7d:a9:a9:0c:fd:28:d4:c2:66:fa:6a:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:3C:32:67:CE:7B:AB:12:AA:C4:75:BE:2F:53:06:5C:7C:81:2C
X509v3 Authority Key Identifier:
keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/6uI8MmfOe6sSqsR1vi9TBlx8gSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8f:08:de:12:89:14:0e:c5:ce:76:21:71:90:34:f5:53:aa:
e4:d2:48:33:ca:4c:c3:32:a3:28:77:37:7d:82:a6:b9:10:12:
07:9b:98:cc:d2:9e:3e:78:d8:0b:57:f6:c2:6a:10:5a:a3:bc:
c7:22:6d:66:dd:fb:01:d0:42:9a:f9:47:f0:6c:42:1a:aa:e0:
b1:45:16:05:eb:68:99:9f:6c:f1:d4:53:f6:f8:b0:99:83:6f:
88:f8:a0:e6:c2:51:d6:4d:5c:66:9e:42:a8:48:4e:ad:8b:43:
33:67:c3:60:de:24:60:34:37:d8:24:02:78:02:61:0b:cb:6e:
ab:9e:21:44:e0:59:a8:62:6c:e8:28:61:58:af:cf:16:e2:4e:
89:3c:80:9b:73:73:b0:ed:3d:07:dd:83:4d:03:2f:eb:1e:3d:
5a:a5:b0:7d:7a:db:70:05:aa:e9:9a:05:9e:53:1c:fb:d7:53:
10:0d:15:38:85:7a:ab:75:67:ce:1b:86:da:53:29:05:41:c8:
f9:ce:0d:c0:ef:48:62:2a:63:31:c9:8d:85:60:b3:e4:cf:a8:
85:a2:11:4f:04:c2:f9:43:28:9c:8d:cc:4f:62:01:37:2f:4a:
ca:4b:48:cb:c3:1a:eb:de:d1:60:3d:f9:6a:a4:c0:6a:a9:c0:
6e:8c:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:00 2025 by rpki-client