Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/1-9EtgywRzQjHtK-CkWmX77CXMVQ.roa
File: 1-9EtgywRzQjHtK-CkWmX77CXMVQ.roa (raw, json)
Hash identifier: HGf9dX/1zgbzgyslhJI0ViZwh7JE1Zq1yND3qYUBk1o=
Subject key identifier: FB:D1:2D:83:2C:11:CD:08:C7:B4:AF:82:91:69:97:EF:B0:97:31:54
Certificate issuer: /CN=e06025f61f0282732a15b4b92850ebcda4749585
Certificate serial: 01856F1DB68BD6721E0DD53D14F61BA38F67
Authority key identifier: E0:60:25:F6:1F:02:82:73:2A:15:B4:B9:28:50:EB:CD:A4:74:95:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GAl9h8CgnMqFbS5KFDrzaR0lYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/1-9EtgywRzQjHtK-CkWmX77CXMVQ.roa
Signing time: Sun 01 Jan 2023 20:54:56 +0000
ROA not before: Sun 01 Jan 2023 20:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:b6:8b:d6:72:1e:0d:d5:3d:14:f6:1b:a3:8f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06025f61f0282732a15b4b92850ebcda4749585
Validity
Not Before: Jan 1 20:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbd12d832c11cd08c7b4af82916997efb0973154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:cf:7e:7a:09:ea:f8:85:bb:fa:fa:15:f2:
24:e8:c3:f5:56:81:22:f7:87:eb:02:22:29:3b:8f:
a7:d2:e0:d3:c4:f1:c2:01:24:b9:41:69:92:92:a3:
db:ee:74:32:6b:c8:aa:61:ec:1f:0e:04:b7:b1:9d:
47:45:7f:99:de:63:a0:e9:01:0f:b7:e5:07:46:a2:
f6:44:a7:25:97:74:26:af:6f:6a:4d:bb:4a:30:68:
9f:b7:3a:14:dd:6c:36:b4:36:e0:45:29:ca:da:93:
e3:cc:c3:94:01:fa:01:db:3a:2e:cc:3a:ef:93:8d:
93:c7:27:64:4c:c8:3e:2a:bd:56:84:9c:21:aa:57:
c9:e9:2a:ee:45:b8:32:f2:aa:63:c6:e9:09:8f:ae:
04:61:0e:73:18:24:4b:82:c1:5f:a9:e0:b7:db:3a:
bd:83:f2:d7:25:a7:7a:a6:c0:bd:c4:d8:b2:75:c5:
45:12:b6:a4:34:4d:8c:f8:4b:d1:f4:fb:fb:9e:d4:
6a:01:0e:6b:2c:0d:08:3f:cf:ec:d7:e4:c6:f6:79:
b7:5e:be:19:64:3d:6e:ec:58:6d:83:68:69:2c:0d:
82:c3:50:76:20:cf:7d:99:fa:b9:7e:66:f5:0d:3c:
d1:ce:9e:69:6d:ee:23:e0:69:93:19:47:8f:ae:3c:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:2D:83:2C:11:CD:08:C7:B4:AF:82:91:69:97:EF:B0:97:31:54
X509v3 Authority Key Identifier:
keyid:E0:60:25:F6:1F:02:82:73:2A:15:B4:B9:28:50:EB:CD:A4:74:95:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GAl9h8CgnMqFbS5KFDrzaR0lYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/1-9EtgywRzQjHtK-CkWmX77CXMVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/4GAl9h8CgnMqFbS5KFDrzaR0lYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.183.0/24
Signature Algorithm: sha256WithRSAEncryption
37:07:c6:5c:ac:90:c0:ad:1f:f4:f8:7b:de:c2:59:02:c4:f7:
4d:c3:9e:5e:23:10:0d:8c:38:ea:6f:cb:5e:56:c5:bd:0c:14:
f6:a5:97:14:43:f8:f5:f7:f7:92:03:12:5d:b7:bc:09:49:b7:
11:b5:04:4e:3c:14:a0:22:d8:aa:34:e2:e8:64:7d:eb:de:0f:
53:4b:6b:c3:7e:ec:20:e1:e7:d5:1c:98:d0:3b:9e:89:dc:06:
f0:3e:66:0e:7b:77:57:e9:20:95:f5:bc:d4:72:46:c4:43:9b:
ee:a9:22:56:d2:e4:d5:cf:bb:27:5b:d5:ac:d5:95:3e:3c:08:
d2:e3:7c:13:b7:30:ab:f5:8a:83:57:87:28:5e:dd:1d:f9:a5:
48:1e:32:c3:ea:25:32:20:be:e7:1b:f4:aa:02:a4:7c:4d:34:
c7:7a:c7:d2:91:2f:fb:64:a5:2b:f0:c6:52:0b:f1:07:cf:da:
73:ef:09:c5:dd:bf:1d:15:38:2b:88:20:7e:cf:44:1e:56:f6:
3b:aa:b3:51:40:fb:e1:05:32:49:fc:7f:ee:1e:7c:19:d2:0b:
21:dd:48:1e:a3:9c:1d:0e:c3:73:2b:71:29:fd:02:5b:13:04:
ca:2c:41:4c:42:77:40:2f:2d:8c:be:6c:66:f2:c2:89:d0:63:
dc:7e:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:13 2025 by rpki-client