Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/Mq5wISWfiVU0QEgEPoiQCXA-Ufc.roa
File: Mq5wISWfiVU0QEgEPoiQCXA-Ufc.roa (raw, json)
Hash identifier: kFCCSElbZv9SaVmuJBvhlsdf2ZIrR54C4lScDkVJyu0=
Subject key identifier: 32:AE:70:21:25:9F:89:55:34:40:48:04:3E:88:90:09:70:3E:51:F7
Certificate issuer: /CN=f2dd218110d6ee1844c849e672f6618fbadf9615
Certificate serial: 014756A2
Authority key identifier: F2:DD:21:81:10:D6:EE:18:44:C8:49:E6:72:F6:61:8F:BA:DF:96:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t0hgRDW7hhEyEnmcvZhj7rflhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/Mq5wISWfiVU0QEgEPoiQCXA-Ufc.roa
Signing time: Sat 01 Jan 2022 16:05:22 +0000
ROA not before: Sat 01 Jan 2022 16:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 91.247.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21452450 (0x14756a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2dd218110d6ee1844c849e672f6618fbadf9615
Validity
Not Before: Jan 1 16:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32ae7021259f8955344048043e889009703e51f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:69:f4:54:28:c2:9b:cc:c6:6e:53:c4:20:
a3:51:64:f6:d8:5f:74:47:6f:2f:87:c5:5f:93:b5:
43:63:97:01:ad:c3:1c:05:46:88:5d:72:63:72:34:
04:f4:c5:a7:0c:68:93:87:18:2b:3b:71:c0:6e:72:
9f:1e:36:19:bd:44:0e:b8:78:13:86:ab:41:b7:13:
2d:ce:96:0c:42:82:ab:29:20:94:65:b0:9c:77:2a:
01:4a:94:ff:8d:b7:43:43:2b:1f:23:a5:9f:39:4b:
79:ef:f4:f9:e7:a0:61:5d:2e:30:2b:61:67:53:0c:
c4:bc:60:81:92:f1:59:f6:87:71:79:1c:5f:4c:5d:
5d:12:5b:77:59:2f:9c:62:6e:4e:35:c1:fd:1e:8b:
56:4e:bf:2f:18:40:f0:73:fc:97:c4:f5:da:75:8e:
67:ae:f5:97:19:6b:da:2e:56:d3:b9:91:f3:46:56:
03:75:fe:18:6c:7a:c5:d7:2d:71:24:1c:b4:0c:ef:
a1:19:46:86:d4:71:6d:1b:53:ca:69:fa:3b:23:9c:
3c:c5:6a:a2:8b:a3:ba:ad:65:bc:bc:52:5d:81:35:
9a:dc:bf:96:43:fa:22:bb:8a:d6:3b:0b:5d:0d:ab:
e4:bb:a7:c0:29:26:e8:e8:de:13:b8:06:73:aa:f9:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AE:70:21:25:9F:89:55:34:40:48:04:3E:88:90:09:70:3E:51:F7
X509v3 Authority Key Identifier:
keyid:F2:DD:21:81:10:D6:EE:18:44:C8:49:E6:72:F6:61:8F:BA:DF:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t0hgRDW7hhEyEnmcvZhj7rflhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/Mq5wISWfiVU0QEgEPoiQCXA-Ufc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/8t0hgRDW7hhEyEnmcvZhj7rflhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.78.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0b:f0:83:1c:95:53:31:5d:9f:20:b6:9d:e1:93:d3:95:09:
ca:c9:b4:08:25:49:10:7e:2d:d5:00:14:b0:33:14:2c:8d:31:
c4:8e:ed:2d:fc:14:5c:11:fc:df:c9:f8:a2:69:31:72:ec:f8:
88:89:1b:9d:3c:d8:cc:4e:80:df:0b:96:eb:d2:9e:47:e6:73:
9c:59:ce:00:37:a4:56:4e:31:2b:69:f1:93:89:9a:ce:98:16:
fd:dc:df:39:b2:75:7b:89:f8:d9:b2:5a:27:c8:aa:a4:3f:d0:
1b:50:2d:6e:1f:31:c9:fb:b6:ab:3e:28:d9:16:7d:7a:f4:30:
1d:6f:ca:50:bf:c2:ab:1f:75:94:05:f5:f4:76:1b:4a:38:4e:
12:16:89:10:1c:a8:2c:96:39:26:ea:ef:5d:1a:d9:42:7d:23:
4c:33:77:fd:fb:89:cb:96:3b:a8:b7:87:f4:2b:af:4c:12:22:
59:e7:44:24:7f:67:ef:94:5d:74:40:da:f6:fa:fa:ae:10:94:
46:86:4f:93:fa:81:32:29:14:9e:8f:73:f2:2a:72:5b:a1:ba:
39:88:d8:4b:77:93:4c:84:07:0a:c9:2d:ff:15:4d:9e:4e:cf:
78:ef:c4:e2:c0:35:5d:ea:61:3a:2e:c2:79:da:11:c7:3a:ff:
30:ce:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:27 2025 by rpki-client