Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/7aKJLJ-1_joad_PciaGsUIrTXK4.roa
File: 7aKJLJ-1_joad_PciaGsUIrTXK4.roa (raw, json)
Hash identifier: XUz3+mKYIj+dSKDAfMrEPC217150NYfAAVjpjv6k8iU=
Subject key identifier: ED:A2:89:2C:9F:B5:FE:3A:1A:77:F3:DC:89:A1:AC:50:8A:D3:5C:AE
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE69A1FED57AD1D4F04E2D01593EC
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/7aKJLJ-1_joad_PciaGsUIrTXK4.roa
Signing time: Sun 01 Jan 2023 14:44:51 +0000
ROA not before: Sun 01 Jan 2023 14:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45051
IP address blocks: 91.203.170.0/24 maxlen: 24
91.203.168.0/24 maxlen: 24
91.203.168.0/22 maxlen: 22
91.203.169.0/24 maxlen: 24
91.203.171.0/24 maxlen: 24
212.75.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e6:9a:1f:ed:57:ad:1d:4f:04:e2:d0:15:93:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda2892c9fb5fe3a1a77f3dc89a1ac508ad35cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:e3:86:4b:be:7f:49:5d:48:70:d5:5b:e0:
8f:5d:9c:80:09:af:7f:47:b5:3e:a0:b8:9d:47:2f:
a9:55:e4:66:61:ca:18:b8:85:3e:d8:7c:cc:88:c7:
2b:4c:cc:5d:f9:77:ca:d4:85:b5:ff:ce:12:65:0e:
c9:7f:95:75:b9:f1:11:fe:bd:3c:fc:fb:b2:a0:f7:
b5:00:1a:59:3c:9d:a3:51:fe:b7:c5:ba:db:47:42:
f9:80:2b:da:69:9a:69:29:7b:db:23:43:69:71:15:
f7:cc:1e:9a:f5:7d:c2:d3:7b:12:e8:ea:fb:81:5d:
a8:f1:2d:58:5c:2b:48:20:34:87:f8:0d:31:2c:d2:
b5:97:06:97:c3:b5:2e:d2:b9:2a:2b:cf:40:be:10:
17:9f:f1:f6:d3:47:8b:4e:3f:35:c5:87:0e:c2:eb:
09:79:31:d6:e5:6e:e5:f1:46:15:f1:b7:85:ef:31:
c8:6f:e3:46:cd:ad:a9:79:b4:66:13:07:cd:84:01:
31:fc:05:c4:1e:bb:3f:2e:5b:47:2d:25:37:d9:ec:
b8:0a:97:fe:13:43:13:e8:41:22:11:2f:b0:37:b0:
50:35:b9:df:a1:68:88:e4:ea:7a:67:f7:cd:a3:2a:
c1:da:ce:47:42:e2:55:59:ed:1a:e1:d3:09:12:18:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A2:89:2C:9F:B5:FE:3A:1A:77:F3:DC:89:A1:AC:50:8A:D3:5C:AE
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/7aKJLJ-1_joad_PciaGsUIrTXK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.168.0/22
212.75.224.0/19
Signature Algorithm: sha256WithRSAEncryption
27:92:d3:b1:b5:a3:ac:50:35:20:84:f3:4e:ba:94:93:9a:17:
9e:a8:2f:33:cd:d1:5a:8a:f6:61:4e:d6:ac:5b:90:8b:11:fd:
27:20:d1:9e:ef:2a:93:b7:47:d9:c3:1e:67:d7:e2:27:c0:a7:
62:e6:36:92:34:15:34:e3:a5:b6:bb:2c:f7:05:45:7f:49:04:
99:37:b2:4e:c5:09:7b:28:c9:0a:00:bb:2d:b7:b1:1b:05:19:
73:42:f1:f7:b5:f5:9f:af:20:c0:a1:4b:8d:7f:71:eb:62:99:
20:4f:0c:c3:b7:58:2f:f3:20:56:17:a0:13:47:61:c6:3b:38:
92:4d:12:1e:9d:aa:34:5b:77:a1:77:82:59:59:a4:c6:e1:7d:
e9:7d:3f:ee:e6:0f:ce:0e:86:f7:46:2e:cc:2d:5d:af:a9:07:
2d:b9:79:c8:c3:b2:a5:4f:f0:81:9c:cb:05:1f:26:c1:f1:d9:
ba:5f:3e:31:20:bc:35:07:3d:75:83:a9:e9:e0:a9:35:3c:a1:
2e:d3:28:a7:f7:94:87:8b:76:ab:8a:18:75:97:a2:18:ed:9c:
28:e5:80:c9:30:02:a7:c0:83:b2:15:62:67:c8:24:02:21:d0:
6d:04:d6:65:00:b2:73:e6:24:a6:f4:5d:ae:6c:5a:91:87:25:
bf:9f:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:14 2025 by rpki-client