Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7ztnAkR-iq2vPHIcwZGmfbzpbzQ.roa
File: 7ztnAkR-iq2vPHIcwZGmfbzpbzQ.roa (raw, json)
Hash identifier: kJRl0R+LKuLTBhoP3z+JlY+5U4xa17H+Eb6Y/7ukGDw=
Subject key identifier: EF:3B:67:02:44:7E:8A:AD:AF:3C:72:1C:C1:91:A6:7D:BC:E9:6F:34
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018848F263FB03ADD4B1734C2DDC1D273E4B
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7ztnAkR-iq2vPHIcwZGmfbzpbzQ.roa
Signing time: Tue 23 May 2023 14:10:24 +0000
ROA not before: Tue 23 May 2023 14:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 91.147.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:f2:63:fb:03:ad:d4:b1:73:4c:2d:dc:1d:27:3e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: May 23 14:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef3b6702447e8aadaf3c721cc191a67dbce96f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:8b:db:f9:8e:a5:b3:a0:9b:a1:65:bc:6d:
73:28:e5:cf:fa:70:c5:6f:13:5b:e7:cc:3a:91:3d:
01:7b:0f:45:cf:bd:83:60:da:7e:82:2a:88:84:7c:
75:ff:ea:95:e4:9c:0d:f9:f6:c9:6c:01:c4:ef:ea:
d4:35:70:82:75:5e:b9:c4:5d:a5:9d:d3:e4:69:79:
b4:6a:a2:21:65:50:0c:d6:48:7c:df:56:98:a3:d7:
b1:7b:32:88:97:9b:5b:ac:a9:8d:66:32:ab:09:41:
4b:f6:aa:35:56:19:7d:ae:38:11:9a:9d:d7:56:ea:
77:5f:55:8d:fa:1e:14:ee:5f:fb:e0:70:53:90:f6:
cc:7a:65:37:f8:6a:d5:d9:e2:a9:c7:38:8f:dd:17:
34:14:15:68:ff:62:e7:3b:5c:9d:43:c4:9f:5e:3b:
ec:fa:62:7d:03:e4:77:ea:c7:c4:99:d4:95:0e:c8:
44:cb:d0:ec:3f:95:0b:9c:90:fa:4a:74:78:c9:87:
21:f9:48:e9:13:e2:f8:38:f5:b7:8b:ae:b2:c4:b2:
d2:2c:c4:a3:95:ae:09:37:79:ab:27:d3:4f:b5:de:
e5:6c:2e:af:8b:9a:b5:fe:ea:88:64:10:63:7f:26:
be:36:b9:16:af:17:ad:fe:e2:11:cd:6e:bb:2b:0c:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3B:67:02:44:7E:8A:AD:AF:3C:72:1C:C1:91:A6:7D:BC:E9:6F:34
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7ztnAkR-iq2vPHIcwZGmfbzpbzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:46:e2:50:b4:73:5e:38:b0:13:4e:9c:27:ce:78:d1:8f:61:
6e:8f:00:55:2d:92:df:1f:6f:9e:c2:8f:07:6e:0b:b1:9e:0e:
9c:46:7c:21:2e:bc:bd:39:e6:10:82:e1:3e:ca:f7:64:d2:37:
21:b0:8f:ed:f1:92:87:0c:8a:68:f7:93:3c:56:00:95:1e:50:
63:d4:44:56:5b:7e:fb:03:1c:b6:d2:04:7c:77:cd:98:8a:fb:
e3:88:fc:fe:32:23:78:49:a7:6b:6d:41:a4:d4:fc:50:f1:ef:
c1:8f:35:49:d7:9d:81:c6:2e:1c:75:7f:88:c4:d1:af:55:fb:
11:d0:48:d7:6f:92:74:ea:92:11:f3:d5:d9:77:6d:82:33:fa:
a0:2f:bf:12:2e:73:b6:36:30:18:ef:07:11:36:d6:05:1e:32:
40:ce:21:e1:af:1b:63:7e:97:a7:78:31:3d:3c:93:c9:c5:02:
dc:4f:22:52:81:25:cc:10:38:dd:94:3d:32:fc:7c:b6:66:1b:
53:8d:8d:b0:a5:18:18:d7:07:e7:48:4f:4b:f6:23:d9:e3:75:
36:20:0a:c9:c9:1e:95:0d:e8:01:24:be:65:9c:82:83:96:db:
03:75:af:1a:21:bb:8d:17:55:64:39:c5:b4:ae:09:99:92:6f:
45:d4:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:39 2025 by rpki-client