Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/6TUZWaubDr9Wt2C48FcCl3f1o2k.roa
File: 6TUZWaubDr9Wt2C48FcCl3f1o2k.roa (raw, json)
Hash identifier: +AMnNydggoe+aof+lkN15M0FIovDkEvkhcfhw9jB9K8=
Subject key identifier: E9:35:19:59:AB:9B:0E:BF:56:B7:60:B8:F0:57:02:97:77:F5:A3:69
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01928DC9E525C6073AA6EBC1EF71CC756BA1
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/6TUZWaubDr9Wt2C48FcCl3f1o2k.roa
Signing time: Tue 15 Oct 2024 01:27:51 +0000
ROA not before: Tue 15 Oct 2024 01:27:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.147.124.0/23 maxlen: 24
212.116.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8d:c9:e5:25:c6:07:3a:a6:eb:c1:ef:71:cc:75:6b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 15 01:27:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9351959ab9b0ebf56b760b8f057029777f5a369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:c6:c8:80:25:fa:30:7e:21:e9:18:6c:ed:
8b:1e:86:bc:91:ae:dc:a6:dc:30:62:3b:2c:79:e1:
81:68:ae:a0:fe:32:f2:4b:64:9b:34:e4:bd:51:f8:
15:c7:aa:84:9d:dd:0a:b9:78:28:78:7e:91:93:31:
65:5a:4e:6f:11:67:0e:14:b3:71:a8:e0:86:f5:d3:
e4:58:be:b1:c7:8e:f1:28:58:f2:a9:ad:df:a4:bc:
2b:12:17:5d:b2:1e:27:53:6c:ec:2b:50:5f:d3:c2:
a3:2f:11:4a:57:f7:62:0d:fe:56:3e:9f:55:d5:f8:
07:1b:88:e7:6e:95:a2:c7:50:25:f1:c0:8b:76:9a:
53:0e:16:3c:ed:bb:0e:13:01:d9:7c:d8:ca:bb:70:
ca:9c:81:8e:50:cd:e1:1c:b0:43:7b:ab:2e:d4:91:
75:0f:a2:b7:1e:51:aa:ac:65:e6:ef:ec:8c:bd:a8:
ee:9f:c9:a7:ad:05:95:f6:ef:68:0a:a7:8c:8b:d3:
4f:b9:a6:2a:50:1a:7e:dc:07:32:6c:8d:6e:56:49:
dd:46:11:26:9f:4e:23:b1:d6:3e:3d:ec:b5:c3:e6:
0c:cc:33:c6:bf:95:d0:e4:94:5a:9d:91:d4:d1:6c:
73:8e:0b:14:52:bf:66:98:95:bc:aa:a4:b1:88:19:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:19:59:AB:9B:0E:BF:56:B7:60:B8:F0:57:02:97:77:F5:A3:69
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/6TUZWaubDr9Wt2C48FcCl3f1o2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
42:92:d0:d1:dc:41:8b:57:3a:11:0b:2e:bb:7e:1e:e2:b2:38:
48:dc:7d:11:6a:00:b7:51:53:ca:44:19:c5:ef:8b:16:b7:c8:
2f:77:2a:c2:e0:b6:ab:73:3e:28:ef:e4:06:6b:49:04:cd:55:
30:d2:f8:c1:32:06:25:6c:7e:6e:c2:7d:69:2c:71:fe:71:3a:
dc:bc:f1:23:55:f9:36:d3:e2:b6:e2:12:98:ba:15:87:8c:14:
8b:8d:a1:92:98:6f:c2:36:9d:dd:3b:fe:04:1b:34:ff:4d:44:
99:0f:bd:fc:a7:46:31:4a:01:93:3b:60:3e:ac:97:19:b0:d4:
43:33:e5:40:ae:bc:73:16:96:69:08:e9:17:94:18:ff:e2:f8:
dc:eb:6f:e0:cf:bd:33:6e:62:83:89:6d:61:7f:35:cf:03:8f:
68:8e:16:64:67:69:a5:c5:a5:4c:38:ec:e7:29:00:4e:6b:85:
61:0c:9b:8c:98:76:55:e8:38:ec:07:8a:be:13:b4:9d:47:b2:
7e:84:5c:2d:df:3e:19:4c:40:cc:57:7a:cd:99:fa:ea:3c:79:
fc:7b:55:ee:64:ac:c7:6a:ff:e1:9e:e3:3d:ff:c9:4b:05:12:
89:38:7a:70:83:25:5c:60:42:1d:d6:f5:18:c3:ca:46:49:76:
ee:2b:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:58 2025 by rpki-client