Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/TsX0a8R-cUmMHlDyBCrTuawvkFo.roa
File: TsX0a8R-cUmMHlDyBCrTuawvkFo.roa (raw, json)
Hash identifier: zJqZ0EHcE/5m038aZrqNd1gOFTqjLkP+KPIrra1KvJQ=
Subject key identifier: 4E:C5:F4:6B:C4:7E:71:49:8C:1E:50:F2:04:2A:D3:B9:AC:2F:90:5A
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01864BA2DC3D7338EDA49AE388D079FE59C9
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/TsX0a8R-cUmMHlDyBCrTuawvkFo.roa
Signing time: Mon 13 Feb 2023 16:36:49 +0000
ROA not before: Mon 13 Feb 2023 16:36:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 91.147.117.0/24 maxlen: 24
91.147.118.0/24 maxlen: 24
91.147.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:a2:dc:3d:73:38:ed:a4:9a:e3:88:d0:79:fe:59:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Feb 13 16:36:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ec5f46bc47e71498c1e50f2042ad3b9ac2f905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:5a:4d:0f:6f:b8:21:67:19:d7:02:78:d7:
5d:ef:72:5d:d0:0e:04:16:7f:ab:de:ea:1b:3e:66:
8d:55:b3:07:4d:cc:b0:52:24:57:fa:1e:91:64:76:
16:22:87:cd:c9:91:56:a9:13:31:12:cb:84:51:f1:
af:b6:4f:2b:7f:b2:7c:35:3c:28:0c:6f:84:6d:ba:
4d:4e:f8:fd:64:e5:1b:77:03:00:50:1e:0b:2f:cf:
d5:a2:b0:d7:bb:5c:23:15:65:bc:40:dc:6f:a8:e4:
a4:27:4f:f5:71:24:8f:24:5e:ac:06:8e:a2:4d:28:
2c:21:d6:c7:da:f3:a7:a7:07:35:49:bb:5e:ed:6a:
f4:86:bc:e7:3d:55:0b:30:ca:08:56:ff:41:45:8b:
20:52:05:dc:4b:28:4d:f5:62:81:cf:8b:6a:1c:80:
52:a8:49:77:3b:da:b4:52:90:22:57:4b:ef:b3:de:
ef:db:f0:a4:c9:58:30:b1:a1:46:25:68:86:b2:aa:
ed:86:07:5d:78:04:97:45:4f:51:35:86:ec:68:c3:
fa:0d:6a:fe:9b:a3:23:eb:b7:66:17:c6:b1:7d:15:
c1:69:5e:c8:0e:e0:60:b7:79:0a:8a:0a:51:0a:be:
da:28:0a:88:2e:a3:e2:db:5b:5e:71:6a:ca:a6:d3:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C5:F4:6B:C4:7E:71:49:8C:1E:50:F2:04:2A:D3:B9:AC:2F:90:5A
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/TsX0a8R-cUmMHlDyBCrTuawvkFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0-91.147.118.255
Signature Algorithm: sha256WithRSAEncryption
28:34:88:ee:9b:32:00:35:5a:5a:c9:11:3d:53:4f:79:fa:5d:
eb:41:01:03:ef:7f:11:0d:13:e0:00:83:4a:47:ce:ad:73:48:
af:f7:51:c5:2c:18:61:5f:f5:1d:16:76:87:ec:20:ce:73:55:
7a:c4:ea:84:ec:1f:c0:d6:93:b8:d9:4d:c9:1f:6f:0e:5e:49:
87:b8:9c:91:53:c7:3c:6f:cc:82:d2:3e:a7:3e:6b:d8:e4:f5:
88:a8:5e:e7:de:d0:7a:c0:4c:a1:a7:dc:50:57:7c:64:1a:f7:
ae:77:85:64:da:8e:6f:5f:89:7c:21:63:ae:9d:67:e1:5e:da:
30:9d:77:2e:1b:df:3c:b5:48:06:d8:ea:31:81:22:da:82:1c:
d4:04:12:f2:35:5f:5b:46:00:dc:c1:2d:2f:0b:97:2e:5b:92:
8a:b5:da:77:1e:ab:4d:52:cd:15:e8:b2:db:6f:f4:76:2a:87:
e6:8d:81:00:c7:83:ab:95:40:a3:79:1b:63:47:54:a9:fc:35:
d0:a2:0b:13:d9:10:73:df:12:8b:8c:36:47:ef:7f:a9:f0:7a:
c9:93:80:39:33:cf:37:64:a1:5a:a9:fe:59:a2:13:b3:cc:2a:
54:ea:e2:41:55:79:5d:15:3d:a1:c6:93:ab:08:77:b5:11:19:
95:b2:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:17 2025 by rpki-client