Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/K4m2yuUI6rYuxbTsNsbIhZ19gao.roa
File: K4m2yuUI6rYuxbTsNsbIhZ19gao.roa (raw, json)
Hash identifier: 7+GsuLnfvKbxZMFUjL0rTW9Nya5VINotZjqi2tZvnWg=
Subject key identifier: 2B:89:B6:CA:E5:08:EA:B6:2E:C5:B4:EC:36:C6:C8:85:9D:7D:81:AA
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018BA769939040DEE85659E93BBC99CF258D
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/K4m2yuUI6rYuxbTsNsbIhZ19gao.roa
Signing time: Tue 07 Nov 2023 01:33:16 +0000
ROA not before: Tue 07 Nov 2023 01:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.245.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a7:69:93:90:40:de:e8:56:59:e9:3b:bc:99:cf:25:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 7 01:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b89b6cae508eab62ec5b4ec36c6c8859d7d81aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:1e:1f:e5:6e:9e:42:f4:ee:24:57:32:55:
7f:92:73:4c:ae:5a:b6:fe:93:da:c1:0d:9c:2f:2a:
0c:5f:e3:f7:62:33:fe:10:30:57:5c:6d:eb:1e:9f:
88:d0:44:dc:3e:32:66:c3:59:c5:0f:63:74:fd:5c:
bd:be:12:2f:d1:73:6c:30:e3:bb:a7:76:ac:9e:73:
74:b9:77:61:bc:7a:79:d4:17:97:2a:11:e6:3f:33:
89:78:e8:44:98:8b:df:1f:c3:c6:3e:aa:5e:b4:d2:
0b:b9:24:e4:69:6f:18:70:2c:3c:57:90:61:f8:74:
b9:0a:71:6c:f1:a1:93:f9:4b:f5:cd:85:30:be:df:
da:d2:91:d5:84:ca:c6:65:06:00:4f:46:40:d2:b8:
79:35:2f:c9:58:40:ba:69:d3:84:ea:1f:64:f1:c6:
5a:28:c0:a0:43:91:36:7a:83:3d:03:e2:14:a5:6b:
48:c4:6a:f4:ca:a8:98:24:93:43:63:56:e2:45:fe:
72:4d:e8:ae:68:b8:35:ce:58:41:ba:a8:5e:72:fe:
96:8c:8f:7c:b3:14:95:15:bb:c4:e0:93:ab:a8:c7:
f6:8a:08:d1:d7:a9:d9:8a:8a:52:6a:9c:f3:c7:6c:
ea:a3:62:11:1d:d3:3d:52:35:e0:a9:6f:d3:6c:b8:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:B6:CA:E5:08:EA:B6:2E:C5:B4:EC:36:C6:C8:85:9D:7D:81:AA
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/K4m2yuUI6rYuxbTsNsbIhZ19gao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
212.116.245.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4f:71:d4:8e:73:5f:a1:20:41:a2:a5:b1:67:ba:9e:d4:46:
b8:29:c7:66:fe:36:8e:c3:50:7c:ab:9c:d9:b8:98:77:31:4b:
8f:56:25:47:31:a1:aa:f9:26:19:cb:2e:8e:47:0a:91:2d:36:
49:d6:09:39:5b:56:35:b5:4d:88:88:f5:bb:cd:7f:08:05:02:
3e:5c:51:e3:be:6b:21:36:1a:7b:cd:e3:f9:be:4f:f3:89:13:
59:9b:1d:bd:bd:e3:0c:70:e3:27:b0:42:2d:64:c9:19:1a:d9:
ad:7a:48:e7:43:82:8e:7c:39:0a:70:b2:e8:fb:1c:43:45:f8:
91:9d:47:41:fd:a0:30:4f:d1:3c:67:53:49:cc:12:15:49:76:
db:ee:44:e4:12:67:fd:89:81:f4:90:79:24:9e:60:3e:7d:73:
ed:41:03:82:79:f6:88:91:f5:32:ba:1b:65:78:0c:86:c0:f9:
da:f3:c5:a5:09:e2:e8:df:1a:34:42:f6:0e:db:36:27:71:f3:
91:cb:80:37:3e:16:12:9d:e8:b9:23:e3:6b:f3:76:c0:18:3f:
49:e1:55:3e:4a:70:d0:d4:a3:b9:96:b6:54:c5:7c:e8:38:7a:
2c:b4:ae:10:13:dd:b1:3b:78:4a:58:6e:ca:f9:9a:e1:15:15:
86:09:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:05 2025 by rpki-client