Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f914f1-cf36-4c86-afab-319b7e612203/1/7boQ9FutEoYaccYb3LnAa2MM0QM.roa
File: 7boQ9FutEoYaccYb3LnAa2MM0QM.roa (raw, json)
Hash identifier: EKj6uVuHVJEt5mWYav7wa2uilIF0eoqHHHKCAV35AhA=
Subject key identifier: ED:BA:10:F4:5B:AD:12:86:1A:71:C6:1B:DC:B9:C0:6B:63:0C:D1:03
Certificate issuer: /CN=e4ababd37eb1fd6430ba640f98c35688d59b5ed7
Certificate serial: 0FAD897D
Authority key identifier: E4:AB:AB:D3:7E:B1:FD:64:30:BA:64:0F:98:C3:56:88:D5:9B:5E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kur036x_WQwumQPmMNWiNWbXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f914f1-cf36-4c86-afab-319b7e612203/1/7boQ9FutEoYaccYb3LnAa2MM0QM.roa
Signing time: Sat 01 Jan 2022 07:57:49 +0000
ROA not before: Sat 01 Jan 2022 07:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39894
IP address blocks: 91.103.136.0/21 maxlen: 21
91.103.139.0/24 maxlen: 24
91.103.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263031165 (0xfad897d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ababd37eb1fd6430ba640f98c35688d59b5ed7
Validity
Not Before: Jan 1 07:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edba10f45bad12861a71c61bdcb9c06b630cd103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:7a:ac:93:e1:a7:64:64:09:34:a1:ac:db:
12:6d:cc:6a:f3:29:34:11:5e:cb:50:6b:9a:48:95:
d3:e7:29:ab:dd:cc:2e:41:18:5f:c7:f4:83:64:db:
31:3c:3e:9a:5b:30:b3:4c:d8:cb:7f:0c:ff:2a:2b:
7a:4c:ed:a4:41:d0:3e:26:4e:06:1d:ee:9d:48:5f:
12:97:31:cf:82:71:a1:17:d8:2e:77:79:bd:0f:c7:
e0:d1:e4:c0:b3:e8:73:db:ca:31:0a:4f:9a:c3:31:
6d:0e:a5:d8:78:9c:af:a4:2a:d4:2f:ef:23:e6:c3:
f5:3b:19:b8:6e:7a:ee:03:9b:69:bd:ac:fe:08:a8:
ba:74:ad:80:7f:4e:ff:25:f6:7a:a3:0b:21:aa:10:
d5:bb:fa:7e:c7:ff:6d:dc:e4:eb:3c:6b:64:60:3d:
5a:c0:3f:f1:af:b6:68:ad:14:d2:6c:56:b7:f6:5b:
88:bf:e7:78:3b:c8:2b:b4:06:e9:47:ce:9f:6a:4a:
56:c5:1b:eb:76:b9:9c:93:aa:b0:93:d9:e7:d4:22:
7b:4f:c3:b3:72:92:84:bb:08:2a:9b:28:b7:c9:61:
7b:f5:ff:af:1a:01:01:1b:4d:ca:0b:9e:c7:ef:e0:
e7:55:67:4c:e9:d4:10:5f:05:63:c7:56:db:e2:86:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BA:10:F4:5B:AD:12:86:1A:71:C6:1B:DC:B9:C0:6B:63:0C:D1:03
X509v3 Authority Key Identifier:
keyid:E4:AB:AB:D3:7E:B1:FD:64:30:BA:64:0F:98:C3:56:88:D5:9B:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kur036x_WQwumQPmMNWiNWbXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f914f1-cf36-4c86-afab-319b7e612203/1/7boQ9FutEoYaccYb3LnAa2MM0QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f914f1-cf36-4c86-afab-319b7e612203/1/5Kur036x_WQwumQPmMNWiNWbXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.136.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:cf:24:61:30:97:94:a7:08:8b:4b:9b:b9:2e:c7:96:a8:49:
98:72:92:03:ac:0d:cc:90:d0:8d:77:a8:f0:7d:2d:b3:59:bf:
94:75:46:a9:77:45:eb:6d:90:fb:17:18:85:9a:0a:4b:30:9b:
fe:39:ac:1a:f5:0a:6b:8b:4c:78:c0:9f:77:8b:15:67:db:9f:
82:0e:5a:76:52:87:a5:bb:c4:c0:64:14:d9:17:df:21:3d:78:
90:bd:db:8f:7c:1d:ce:bb:12:80:fd:2d:8b:e5:00:1c:4f:2b:
14:76:87:62:5e:c1:df:10:4d:bb:8e:03:73:30:7d:44:79:10:
4a:88:c8:94:48:08:eb:07:4d:88:4b:a8:1a:b3:02:4a:9e:cf:
8e:5b:cf:92:fb:f8:b3:8a:bd:f5:71:20:fb:8d:85:82:80:84:
39:30:99:3c:8a:f7:55:5c:62:5a:a7:41:12:55:7f:34:8e:c1:
6e:77:7f:4f:3d:da:12:9e:23:e2:30:1f:70:dd:0f:0a:b4:71:
bd:d0:34:bd:3e:05:76:99:cc:f0:4b:07:cc:37:00:d1:9d:2f:
13:f4:c2:11:c8:44:8a:d3:26:87:aa:bd:89:5e:71:4a:74:27:
42:84:74:de:57:17:c7:65:51:0d:3b:10:d1:08:69:79:d3:8d:
1a:c2:b8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:59 2025 by rpki-client