Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/JLuBFLivuW8pau-SGcrSzaniPB8.roa
File: JLuBFLivuW8pau-SGcrSzaniPB8.roa (raw, json)
Hash identifier: nXM3XT7rArI1bsu/J/g7WC8GqMg/7oNgNlQKGNIX3v0=
Subject key identifier: 24:BB:81:14:B8:AF:B9:6F:29:6A:EF:92:19:CA:D2:CD:A9:E2:3C:1F
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0182D9D6CDA3227DE558FB1F414FEABF2AC9
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/JLuBFLivuW8pau-SGcrSzaniPB8.roa
Signing time: Fri 26 Aug 2022 11:08:29 +0000
ROA not before: Fri 26 Aug 2022 11:08:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.147.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d9:d6:cd:a3:22:7d:e5:58:fb:1f:41:4f:ea:bf:2a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 26 11:08:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24bb8114b8afb96f296aef9219cad2cda9e23c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:0d:b5:26:9e:8c:1f:03:a9:b9:6e:33:b4:
37:e1:c9:df:a3:9b:a3:f4:c7:fe:6e:ad:82:bd:a4:
c2:92:25:b9:de:ad:11:48:8f:7e:a9:e2:3e:2a:1a:
67:32:71:6a:23:b2:22:14:44:09:cf:83:dc:13:79:
26:e5:c4:05:1e:24:f9:c6:d0:c6:04:88:44:08:b9:
da:48:b5:bb:6f:59:0a:69:33:55:2c:f5:b1:20:4a:
24:ef:9f:ee:0d:93:f3:d4:e7:57:34:36:ce:8c:51:
cc:69:9a:ca:d0:db:8e:8c:ae:e1:d0:66:6d:81:ee:
c4:5b:28:1f:8b:a2:d2:d5:61:72:52:16:07:35:0d:
13:f1:3a:83:63:65:eb:3f:ad:39:8d:ff:ac:bb:e3:
86:22:bc:79:16:5f:06:c2:03:73:fa:bd:78:08:62:
d5:65:31:77:02:81:7e:aa:6c:c9:b7:8a:e3:c3:0f:
31:14:4e:74:94:e7:ff:09:32:2b:70:4a:71:1e:04:
c7:59:9e:f3:69:b8:4c:87:06:7d:cd:63:97:14:50:
52:31:1e:0a:0c:ca:85:95:b9:a1:8f:7f:a7:83:02:
39:8f:4f:64:95:59:a8:c0:ef:27:a3:9f:47:e7:31:
75:16:15:bb:47:63:bc:08:0e:4b:56:01:47:4d:c1:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BB:81:14:B8:AF:B9:6F:29:6A:EF:92:19:CA:D2:CD:A9:E2:3C:1F
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/JLuBFLivuW8pau-SGcrSzaniPB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:4d:5a:3d:7a:6b:77:53:78:d5:40:e3:f4:d0:6f:ef:6a:91:
1a:9b:95:78:91:3d:7b:f9:e8:7e:39:e1:93:76:63:f8:57:6e:
2e:bf:6c:d1:2f:49:f0:ed:4f:a3:2a:b3:21:3a:9c:48:ae:e1:
1f:3a:f7:4a:10:9e:9d:a1:36:5f:89:6c:9c:d6:18:46:3e:33:
77:5c:cd:d4:69:33:86:48:23:51:14:ae:e9:7e:2c:58:91:4c:
30:55:b7:73:28:d3:26:9c:78:20:6c:76:82:1b:6d:3f:d3:40:
e6:10:b5:ec:ff:14:70:be:db:79:fa:71:93:67:c7:99:29:cf:
62:b2:09:b1:ee:3b:c3:5e:7b:12:8e:34:b9:b6:36:5f:35:be:
73:38:7e:59:40:d8:df:28:cc:d2:06:3f:c8:69:d8:47:e3:e4:
1a:5a:8a:7c:43:97:6f:5f:3b:ae:c7:28:67:26:23:04:17:23:
cf:e9:b0:1a:4d:ae:5b:17:fb:47:00:ae:2e:9f:79:16:6a:ee:
e6:df:75:47:51:06:ae:ce:f8:69:b6:4e:ac:c3:f0:39:a1:dd:
13:9e:eb:16:40:c6:18:d5:db:65:76:89:d6:b7:90:19:27:a7:
05:d5:3c:a7:35:0e:29:16:dd:dc:54:ce:f5:69:06:25:4d:db:
bf:87:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:05 2025 by rpki-client