Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/jV-3tArc8dsjcZ6kDNPRZe17c7E.roa
File: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (raw, json)
Hash identifier: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=
Subject key identifier: 8D:5F:B7:B4:0A:DC:F1:DB:23:71:9E:A4:0C:D3:D1:65:ED:7B:73:B1
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 019421B1CAC73B4D3083A9D0072AAEFA3DB8
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/jV-3tArc8dsjcZ6kDNPRZe17c7E.roa
Signing time: Wed 01 Jan 2025 11:48:07 +0000
ROA not before: Wed 01 Jan 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211580
IP address blocks: 91.197.120.0/24 maxlen: 24
91.197.121.0/24 maxlen: 24
91.197.122.0/24 maxlen: 24
91.197.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ca:c7:3b:4d:30:83:a9:d0:07:2a:ae:fa:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d5fb7b40adcf1db23719ea40cd3d165ed7b73b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:3d:a1:fd:2b:58:a0:78:5b:5d:aa:ac:89:
56:0f:6a:b4:24:43:c3:6a:17:e1:e0:47:54:85:d4:
11:a2:64:9d:34:c8:a1:3a:82:e2:5f:71:40:33:82:
5a:35:83:cf:de:8e:f4:d9:ad:27:ed:1c:6b:b4:6b:
9f:1e:a0:c2:d9:c2:7e:93:a7:cf:ea:9f:78:d4:6c:
5d:27:1c:07:49:a0:bb:20:c7:44:37:77:37:fc:8d:
1d:6f:b4:5b:ff:69:0f:54:b0:e5:56:1c:1b:b6:5b:
6a:8d:49:6f:65:b5:18:7d:1e:58:71:0c:e8:43:17:
0e:f5:5f:89:75:d9:a6:57:34:7d:57:99:37:f5:18:
05:99:3b:df:5d:41:31:8a:1c:8e:c6:9f:c7:71:8b:
11:f0:20:9f:5b:f7:41:04:43:8a:7c:ae:1d:0a:21:
bc:ad:92:f0:16:85:26:e5:26:90:41:61:35:f9:90:
21:bf:df:fc:c9:49:8f:ac:49:70:99:b8:7e:7b:01:
33:8e:bf:fb:99:0d:5c:af:9c:ad:de:a9:33:59:88:
f9:cd:2d:fc:92:ad:03:54:66:28:85:93:c5:a2:6b:
ef:ab:ca:67:63:bb:48:72:b2:eb:1b:a4:10:80:96:
0f:44:a7:15:04:5f:4e:23:2e:23:08:4d:7f:82:3d:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:B7:B4:0A:DC:F1:DB:23:71:9E:A4:0C:D3:D1:65:ED:7B:73:B1
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/jV-3tArc8dsjcZ6kDNPRZe17c7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.120.0/22
Signature Algorithm: sha256WithRSAEncryption
95:ef:e7:9c:79:ea:1f:e0:19:60:31:4c:aa:e8:73:af:34:dc:
5f:8c:b0:82:ec:b3:27:c6:c8:e6:41:82:fd:66:50:e4:62:ea:
bd:3c:d7:51:11:81:cb:a5:6b:98:8d:18:6e:d5:dc:3a:66:24:
a8:74:31:a7:2c:66:ac:37:45:32:c4:16:21:15:05:81:25:1f:
fa:ef:62:c7:99:d6:e7:4b:c4:1c:cc:bb:f5:aa:c8:ec:7f:be:
46:b8:65:f3:07:19:61:34:bb:59:63:c1:82:11:82:5f:f7:2d:
3f:8d:87:1a:b1:42:0e:4c:68:6e:47:04:b8:eb:13:83:f8:5d:
4a:f5:19:e5:9f:2b:fa:07:dc:80:09:76:af:ed:6a:4e:3c:02:
5c:49:ed:c0:8a:aa:0e:f7:fd:d3:b6:29:03:ef:57:53:23:25:
91:da:91:78:8c:88:e6:b2:ba:26:a2:6c:a1:5b:77:d1:8f:09:
58:e9:54:6f:6c:4d:f0:b3:50:70:40:ed:71:97:08:77:6d:e1:
17:48:4c:33:64:1f:74:5e:69:3d:7d:5e:48:02:47:22:e7:e5:
8c:a8:d6:4e:04:fe:5a:dc:49:6d:28:0e:97:eb:ac:93:68:1b:
63:c2:01:04:95:5f:a3:47:43:9f:54:ae:9e:ad:9d:b0:81:f0:
bc:fd:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:03 2025 by rpki-client