Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/jYi3LtRqdXBr9fS5386Q1hiK8D8.roa
File: jYi3LtRqdXBr9fS5386Q1hiK8D8.roa (raw, json)
Hash identifier: g9r0Yp0WBWCNqfB6u7My2NiDV+5TK+eH2YPV68Vtv/k=
Subject key identifier: 8D:88:B7:2E:D4:6A:75:70:6B:F5:F4:B9:DF:CE:90:D6:18:8A:F0:3F
Certificate issuer: /CN=f2dd218110d6ee1844c849e672f6618fbadf9615
Certificate serial: 018964C08975F2F5533182CC81EF61CCD2BB
Authority key identifier: F2:DD:21:81:10:D6:EE:18:44:C8:49:E6:72:F6:61:8F:BA:DF:96:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t0hgRDW7hhEyEnmcvZhj7rflhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/jYi3LtRqdXBr9fS5386Q1hiK8D8.roa
Signing time: Mon 17 Jul 2023 16:48:06 +0000
ROA not before: Mon 17 Jul 2023 16:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.247.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:89:75:f2:f5:53:31:82:cc:81:ef:61:cc:d2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2dd218110d6ee1844c849e672f6618fbadf9615
Validity
Not Before: Jul 17 16:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d88b72ed46a75706bf5f4b9dfce90d6188af03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:f0:64:bf:84:5c:bf:89:7e:6c:d9:79:e2:
37:ad:e9:7d:28:6d:87:cf:6d:b6:41:01:13:d3:e8:
c8:48:77:51:83:55:1f:94:b6:19:ee:8b:c5:80:f8:
7a:b0:4b:f5:44:09:c4:c2:ed:cc:37:fc:f0:b1:7d:
ba:99:23:df:29:5e:02:47:0d:08:10:91:0d:eb:3c:
00:a6:97:5f:26:d5:82:9f:75:c6:16:50:fe:bb:4e:
f9:45:01:09:b9:31:b9:d4:f8:81:fe:23:38:86:5b:
65:29:42:e8:eb:34:45:c6:70:87:1d:78:e2:60:2c:
b6:91:cf:73:8f:99:7d:e9:70:59:71:6d:1e:38:a4:
cc:c1:cd:27:8d:79:a1:a1:b7:13:e3:32:87:79:15:
bb:10:41:96:d2:24:8b:38:e1:53:e9:d8:cd:40:d0:
07:67:82:12:2a:f3:91:ed:56:65:49:52:26:c7:a9:
9d:4a:6d:17:91:50:78:4a:ba:8d:c8:da:03:87:b4:
77:51:0e:63:f0:c9:28:a8:2f:54:42:ae:29:bc:f4:
7b:64:ef:db:92:93:0f:ae:bd:b8:00:ae:b5:e1:50:
bb:e6:64:45:c8:ef:08:a0:39:9b:81:a0:e7:19:e6:
8e:28:b3:98:59:0e:e9:51:1b:31:cc:e3:23:2c:37:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:B7:2E:D4:6A:75:70:6B:F5:F4:B9:DF:CE:90:D6:18:8A:F0:3F
X509v3 Authority Key Identifier:
keyid:F2:DD:21:81:10:D6:EE:18:44:C8:49:E6:72:F6:61:8F:BA:DF:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t0hgRDW7hhEyEnmcvZhj7rflhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/jYi3LtRqdXBr9fS5386Q1hiK8D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/8t0hgRDW7hhEyEnmcvZhj7rflhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.78.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ef:c0:28:91:9a:80:11:be:c6:74:3e:d0:7b:ab:8e:b6:f7:
ae:bc:c6:53:fe:5c:bd:1a:27:15:fa:8e:f6:1c:48:99:05:cd:
bf:2b:0a:bd:65:b1:f1:85:16:29:6c:b4:bb:0b:e3:3c:83:fb:
87:6b:b0:4b:cd:0c:26:ed:67:4b:ec:0c:97:26:15:3f:7d:b9:
83:4c:c8:33:72:dd:a5:49:61:dd:ab:ef:41:50:c4:0d:03:74:
5a:43:d2:b8:0e:8b:18:2c:1d:c2:ee:3e:35:8d:0f:53:50:f1:
1b:e0:d5:04:a8:76:30:6b:b9:f6:e5:36:4e:94:f8:f2:bd:6f:
36:06:0f:c7:28:fd:30:45:7d:65:d1:b1:a2:1a:45:c6:05:30:
26:b1:5c:8d:cc:86:8f:f1:c9:cd:98:ec:73:ea:18:43:da:2c:
7f:96:1a:29:09:3d:0c:44:cb:8a:42:6d:7b:da:22:84:a3:2a:
c5:a3:be:75:4c:1c:78:9d:9a:53:f3:0e:f9:78:00:09:42:a5:
72:3a:ed:c9:6e:73:58:c2:63:62:1a:18:a5:66:40:1a:4d:a2:
b9:84:ba:e5:f6:ee:25:26:6e:f9:75:72:49:9d:e2:8b:1b:96:
e1:ee:26:6e:ad:f0:67:4c:78:f5:96:37:37:05:86:0a:d0:d4:
21:83:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:48 2025 by rpki-client