Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2A7U-OqUsax6FVb39BNPRyi9R30.roa
File: 2A7U-OqUsax6FVb39BNPRyi9R30.roa (raw, json)
Hash identifier: KDB5ZBDb5FN/forP0RkdsGBM2wl622wed5ZSH0YXmNg=
Subject key identifier: D8:0E:D4:F8:EA:94:B1:AC:7A:15:56:F7:F4:13:4F:47:28:BD:47:7D
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01899B559E34DFF91BD21E98071B816B73A3
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2A7U-OqUsax6FVb39BNPRyi9R30.roa
Signing time: Fri 28 Jul 2023 07:10:26 +0000
ROA not before: Fri 28 Jul 2023 07:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.147.116.0/24 maxlen: 24
91.147.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:55:9e:34:df:f9:1b:d2:1e:98:07:1b:81:6b:73:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 28 07:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d80ed4f8ea94b1ac7a1556f7f4134f4728bd477d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:e0:90:21:ff:57:cd:fd:96:ac:f9:ee:4e:
c5:ef:f0:54:ea:ea:4d:2e:26:87:f6:ff:5b:32:50:
f8:c5:76:26:2b:ce:6a:55:7c:94:56:fd:d8:45:21:
a6:58:05:81:10:ff:7d:db:5e:8d:ab:92:b6:9c:c3:
e6:ce:ed:55:2f:5c:09:37:ee:78:34:38:5a:da:63:
ab:f0:59:75:d8:17:a8:49:35:22:86:ed:87:80:fe:
95:af:c2:27:90:78:c7:1b:0d:22:b6:b7:ae:ac:66:
d8:05:db:68:87:0c:93:7a:a9:7b:6a:d6:32:22:91:
3a:c8:0f:c0:62:06:5b:4d:d4:8f:bd:4b:31:6d:15:
17:09:22:dc:14:ef:da:af:ce:6e:14:49:24:8f:24:
15:60:41:b3:67:a8:f7:c7:ae:ac:e7:60:ed:f4:f6:
f9:7c:66:38:7d:e7:c5:45:f6:c2:f3:19:fc:1c:ae:
f5:6f:cb:52:15:59:2b:d1:6e:0b:42:67:93:21:30:
7f:22:4f:1e:76:ff:52:41:c3:c1:53:5a:55:39:a6:
8b:97:d7:34:52:4b:c0:cc:c8:9f:5b:75:c9:24:96:
cf:de:6c:14:2e:5b:76:35:8d:47:57:e8:9f:cd:55:
6a:15:e5:e5:7f:32:71:06:48:39:ff:51:a2:e4:72:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:D4:F8:EA:94:B1:AC:7A:15:56:F7:F4:13:4F:47:28:BD:47:7D
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2A7U-OqUsax6FVb39BNPRyi9R30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0/24
91.147.118.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:71:6c:9f:7d:a0:04:2d:8d:09:93:9b:d4:41:9d:69:7d:4c:
5e:ba:e5:da:81:a0:d1:cb:c1:bb:b1:61:95:a8:19:96:63:8d:
2b:e8:00:65:e6:55:c2:30:fa:a0:a8:92:ee:79:57:3a:44:f1:
e6:b6:75:59:4b:45:2e:b5:7c:48:67:9d:03:d0:21:cf:f6:91:
f3:ab:72:45:8f:9f:4a:e5:a7:76:ac:6d:f7:82:d8:12:78:1b:
c0:f3:85:cf:31:08:f2:c6:bb:d6:54:c9:3f:29:d1:fb:94:55:
3e:8c:25:31:67:a0:7f:0e:b8:bb:66:00:22:82:bd:cc:5b:03:
25:4a:0e:68:b6:b2:a4:1e:99:41:3d:57:2d:5e:65:17:46:e0:
85:01:2a:41:58:bd:ca:40:9a:bc:dd:2e:c7:d1:a8:8e:be:bb:
ad:80:fa:60:5f:ec:a9:4b:42:c1:31:15:f2:5d:38:7d:20:e3:
32:2e:25:6a:cb:ac:31:da:80:e5:aa:d6:87:8c:f3:e2:8c:53:
9c:b0:bf:ab:2d:d6:08:8f:9a:93:3b:6d:fa:7f:f6:0d:cc:19:
c2:b4:87:a9:c4:62:e9:f4:b3:60:7f:61:ff:7a:1e:45:81:2d:
9f:1d:07:eb:48:4f:aa:3e:65:a1:6b:9b:a8:76:32:00:f7:f5:
13:31:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:43 2025 by rpki-client