Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2Q53M7pk-OqzwSw0rmuOo2Ks6LQ.roa
File: 2Q53M7pk-OqzwSw0rmuOo2Ks6LQ.roa (raw, json)
Hash identifier: 2x70YSBCgRek6B3JMhh2BL2HAEmBLmUJENONwiXx2cg=
Subject key identifier: D9:0E:77:33:BA:64:F8:EA:B3:C1:2C:34:AE:6B:8E:A3:62:AC:E8:B4
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0190696757C1FBAD9F61A0FE7A9B6F1E021A
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2Q53M7pk-OqzwSw0rmuOo2Ks6LQ.roa
Signing time: Sun 30 Jun 2024 13:48:18 +0000
ROA not before: Sun 30 Jun 2024 13:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 91.147.119.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
212.116.240.0/24 maxlen: 24
212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:67:57:c1:fb:ad:9f:61:a0:fe:7a:9b:6f:1e:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 30 13:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d90e7733ba64f8eab3c12c34ae6b8ea362ace8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:6d:98:f7:c0:5f:5e:20:58:15:1b:67:8c:
c6:b9:5a:55:47:44:63:e8:8f:28:c2:13:47:c2:ad:
64:06:e4:34:79:96:d2:a4:6c:8a:03:3f:3b:14:eb:
26:eb:9b:40:d5:c2:31:94:46:f4:12:ed:89:5b:e5:
d2:a1:64:6c:e0:33:80:77:38:0a:4c:94:53:2c:8c:
60:3e:18:b1:1c:d7:81:9f:a5:a0:59:eb:1b:4e:16:
5c:6d:b7:1f:d1:6a:e6:05:6e:3e:7f:15:20:25:64:
c3:a2:51:a0:db:43:fd:15:da:0a:6c:65:93:94:bf:
e6:43:00:8c:ba:e3:f1:6a:0a:25:11:57:e5:27:95:
90:1e:bb:4f:c9:fa:40:96:04:54:20:f9:77:03:2a:
26:a8:c2:be:ac:a6:d7:8c:ce:4e:e7:90:70:dc:c5:
b2:90:df:f3:2b:6c:4b:bf:df:f4:c9:f3:8a:b0:13:
2b:00:30:ea:88:4a:9c:93:79:bd:5e:65:37:45:be:
6d:df:6c:25:3e:0b:0b:23:da:50:4b:8f:f7:09:94:
27:20:53:38:24:c9:e0:11:ae:76:db:71:d6:00:f6:
8c:dd:37:54:a2:1c:9e:3f:22:a9:34:44:ca:e8:66:
53:a7:7c:fe:75:a8:d0:99:7a:c7:2f:7a:61:e3:79:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0E:77:33:BA:64:F8:EA:B3:C1:2C:34:AE:6B:8E:A3:62:AC:E8:B4
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2Q53M7pk-OqzwSw0rmuOo2Ks6LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.119.0/24
91.147.123.0/24
91.147.126.0/23
212.116.240.0/24
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f4:5c:19:bf:a8:dd:9c:a8:37:ee:d6:fd:a8:64:75:53:92:
27:cc:41:2c:e4:47:d8:7f:29:b9:a7:48:77:43:28:a7:4e:93:
07:c5:04:ba:a4:42:c4:d9:64:89:5f:23:14:0f:3e:06:fc:61:
aa:7e:67:1c:14:04:6d:cd:97:50:f0:fb:90:98:18:cd:31:09:
d8:11:d3:a4:94:a4:cf:5e:6a:f9:a0:4a:9b:39:14:a1:7e:33:
b3:78:3e:52:e0:27:2b:48:ff:d1:78:23:f9:fb:a5:cf:e4:52:
1d:36:25:04:f3:5e:eb:95:a7:fb:a3:4d:e9:03:c0:69:41:dd:
fe:8c:f2:0f:24:00:e4:8b:df:07:c7:94:47:a5:32:83:f8:82:
98:e4:35:0b:d7:52:b7:4b:61:82:da:e1:2d:a1:88:b5:c3:ab:
0f:83:60:c8:1c:a4:19:2e:2f:cd:bb:a9:37:0a:6f:5f:9b:51:
03:8f:91:89:e3:9e:f4:58:a4:45:65:09:92:37:21:a5:ae:f5:
72:24:94:9f:b1:9e:ab:65:a9:f5:5c:c8:e0:4e:aa:13:0f:a8:
26:e2:4a:3c:f5:99:0c:32:f5:11:2f:ed:4e:eb:df:a8:b3:85:
f1:ed:9b:0c:9e:be:60:a5:7f:bf:82:88:0a:e3:a6:73:81:54:
1f:0f:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:03 2025 by rpki-client