Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa
File: GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa (raw, json)
Hash identifier: encqJVvBdRm6B6vTFCshfVj5JBcWptS0eKrTwjTdeJk=
Subject key identifier: 19:B3:93:61:75:51:13:89:C6:22:0C:0E:40:0E:B3:05:79:63:D9:7A
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019421B201B3DB9240C247A22825CC61039D
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 91.147.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:01:b3:db:92:40:c2:47:a2:28:25:cc:61:03:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19b3936175511389c6220c0e400eb3057963d97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:7f:0d:76:95:06:4f:2e:2b:4b:a0:7f:db:
8d:80:5a:7b:10:b4:62:72:af:82:c9:ee:3b:17:da:
a7:00:66:32:09:02:31:0f:9a:f7:68:a2:8c:5b:8a:
9f:36:71:d5:27:d0:2c:b4:1a:ed:1e:cf:65:1e:fa:
03:cf:08:a6:04:55:46:e7:49:b6:12:10:e7:ca:d9:
3e:aa:e6:b9:5a:3d:47:24:b7:10:84:69:60:33:91:
50:a8:04:7e:f3:19:4c:56:aa:6c:df:29:d4:2e:3c:
60:44:4f:4d:67:e4:4d:7a:cc:df:22:c5:c3:6b:fc:
42:1d:30:03:9f:de:dc:cc:09:08:6b:65:bd:02:9c:
f3:58:5f:10:bc:4b:aa:b6:8a:e5:9d:49:f1:a2:ca:
dc:98:d8:69:a3:1b:8e:c7:fc:78:08:5e:87:e5:c7:
68:9f:94:d9:f3:67:d3:2d:10:f2:84:82:fa:41:f1:
4e:b6:cb:fe:56:5b:85:c8:19:50:3a:ef:48:74:97:
cc:29:c8:ab:48:dd:cd:bf:0d:bb:4f:7b:d8:e2:2c:
17:5e:35:92:59:f9:dc:69:58:59:78:f1:86:a0:92:
2f:9c:2b:13:fd:67:ad:ff:a1:30:dd:3b:a9:f5:92:
71:d5:d1:3b:e8:3f:e8:71:d7:26:5e:59:eb:a5:ca:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B3:93:61:75:51:13:89:C6:22:0C:0E:40:0E:B3:05:79:63:D9:7A
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:c9:11:2f:df:ad:8d:31:2e:1d:c1:1f:01:4c:8a:c3:b8:51:
d8:fd:32:fd:ed:5b:16:1e:33:68:4f:60:7d:fe:0c:74:15:ac:
b7:4a:75:22:2a:2b:95:73:80:84:6b:c5:2d:2c:37:b6:77:df:
de:c0:a0:68:c8:d7:33:0c:8d:3f:dd:32:ce:02:c9:7c:9d:df:
2f:41:29:c4:b1:76:1f:0e:fd:2b:73:bf:5c:53:ef:27:4e:83:
4d:2e:39:11:06:0b:12:58:85:fa:d2:a8:34:92:30:80:1e:54:
5f:4b:78:0f:c8:b1:ab:ef:21:2e:ff:ff:78:e6:67:a1:19:b9:
c6:72:19:cf:8a:15:8e:02:5c:a9:2f:e5:f4:c0:03:82:ee:bf:
4a:bf:ff:f2:dd:f2:97:25:69:e2:60:4b:5c:5b:5d:78:16:64:
88:a6:63:62:10:a5:e5:95:ad:5b:a1:5e:13:c8:e4:15:7e:7e:
ea:64:c0:84:84:f5:11:bc:5c:76:56:46:72:c2:f4:55:0a:a4:
25:43:76:49:11:59:cd:89:7d:4a:eb:21:ae:b4:44:fd:02:63:
bc:cc:38:f8:47:92:3c:62:56:f7:dc:94:dc:d7:d2:23:48:de:
d0:33:57:c7:7a:b2:6b:3b:73:d5:e0:5b:91:c3:25:86:01:99:
e9:0f:cf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:42 2025 by rpki-client