Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7i37rmorCwMf61VHiLme0zmLw8g.roa
File: 7i37rmorCwMf61VHiLme0zmLw8g.roa (raw, json)
Hash identifier: 8AZ3umUVTgz/Y//M2eflJ+YC0tYWME8unIj0Q8B82uE=
Subject key identifier: EE:2D:FB:AE:6A:2B:0B:03:1F:EB:55:47:88:B9:9E:D3:39:8B:C3:C8
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018C025A9C457264DD9702691772A423F565
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7i37rmorCwMf61VHiLme0zmLw8g.roa
Signing time: Fri 24 Nov 2023 17:22:21 +0000
ROA not before: Fri 24 Nov 2023 17:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 212.116.242.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:5a:9c:45:72:64:dd:97:02:69:17:72:a4:23:f5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 24 17:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee2dfbae6a2b0b031feb554788b99ed3398bc3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:06:75:f3:56:02:de:cc:51:a3:ce:f5:0b:
3e:f5:1c:05:ea:f1:0a:30:02:5d:67:ed:ae:19:9d:
a1:66:93:52:5a:d3:b3:0e:f3:bc:0c:db:09:94:92:
fd:ec:c4:b9:69:02:06:f3:92:23:93:90:51:d8:c5:
76:47:aa:b2:ec:96:03:58:3f:a3:03:94:9f:85:08:
48:32:5d:46:d7:ee:62:f4:b8:2f:9b:3d:ef:0f:38:
4e:33:7a:8b:93:d9:eb:b5:d1:8e:36:f8:71:15:25:
69:cf:7e:44:9c:d9:e4:58:d7:15:ce:d1:69:64:1f:
01:31:91:36:ab:35:18:d2:11:18:f9:e9:a6:fd:d1:
0a:e0:c3:79:cb:10:2d:64:ff:77:00:f1:e7:a6:96:
cc:50:04:21:bd:c3:27:21:46:fb:1a:94:a2:3a:b7:
5e:e3:15:5f:dc:e0:4a:15:0f:80:e1:78:51:56:00:
5c:f7:eb:86:2f:51:14:06:34:ec:79:aa:86:63:1c:
5d:c7:61:4b:a2:6b:0e:e0:5a:74:76:21:91:11:cd:
67:88:2c:11:59:e0:07:31:56:f2:e6:05:45:e6:74:
f6:5d:f8:6b:29:99:25:8e:ed:3d:8e:dd:8b:fa:1b:
89:85:bc:06:c9:1c:bc:2c:fa:12:73:78:51:0a:95:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:FB:AE:6A:2B:0B:03:1F:EB:55:47:88:B9:9E:D3:39:8B:C3:C8
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7i37rmorCwMf61VHiLme0zmLw8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
212.116.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bc:f3:bb:bf:12:12:a3:96:69:1f:cd:46:b7:cc:cc:e4:5a:
31:9d:d2:c8:27:dc:a4:09:0f:61:9e:89:b3:d0:86:2c:65:2c:
74:0b:4e:a5:ae:13:4b:8a:5a:46:74:da:cf:bb:bf:bf:d1:55:
cb:af:94:b6:b5:b6:25:ac:a1:63:94:15:b7:39:ed:8c:00:07:
d2:80:b4:1c:02:41:57:69:57:96:5d:45:dc:f4:bc:fb:c1:85:
05:19:90:02:0e:d0:55:84:57:2e:ab:89:be:ae:82:b6:57:8f:
39:6c:e9:43:0c:bf:7f:72:03:3b:0b:5d:5e:08:8c:f4:a5:89:
4f:06:38:c4:19:ba:f0:9f:ef:0e:97:1d:20:5a:e0:89:d1:c3:
b3:ed:45:6a:8c:5a:bd:84:11:dc:0c:67:1d:d8:fb:ab:e0:4f:
ce:b1:8a:9c:f3:a7:82:1a:ee:8f:23:26:19:c7:6d:db:1d:cd:
9b:04:00:20:9a:64:93:72:f2:24:6a:55:ab:a0:c5:e2:49:36:
14:58:f9:70:47:b1:b9:37:5d:87:aa:fa:7c:d8:b9:bf:2d:73:
1a:d6:a7:99:50:a2:21:91:9f:f1:d2:72:ca:59:12:a4:fa:c1:
0b:24:b8:a6:64:2b:01:5e:60:fd:39:6c:47:1b:d3:46:f4:3f:
ba:8d:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:03 2025 by rpki-client