Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z7crJzB0xi3Dg-tzFyB74PltzkE.roa
File: Z7crJzB0xi3Dg-tzFyB74PltzkE.roa (raw, json)
Hash identifier: G1BmPGN/MxN3JUJup63jZ3Sgvvcgnl1UeMcBJwS3DQM=
Subject key identifier: 67:B7:2B:27:30:74:C6:2D:C3:83:EB:73:17:20:7B:E0:F9:6D:CE:41
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018AD2584CF83563C73B94AF54A84BF0C3AA
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z7crJzB0xi3Dg-tzFyB74PltzkE.roa
Signing time: Tue 26 Sep 2023 16:35:16 +0000
ROA not before: Tue 26 Sep 2023 16:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.243.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:58:4c:f8:35:63:c7:3b:94:af:54:a8:4b:f0:c3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 26 16:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67b72b273074c62dc383eb7317207be0f96dce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:e8:45:ad:ba:0b:62:7a:8f:6c:b1:95:98:
f3:90:35:b5:68:24:b1:ec:6d:f9:9d:5a:02:26:78:
d8:ed:0f:57:a4:cc:4b:a0:e5:cd:ba:51:9c:89:bf:
aa:18:c5:81:9a:88:c7:c9:f9:07:3f:66:66:2f:43:
39:8d:9a:ab:2d:b6:f0:6b:cc:4c:a7:6d:8d:4c:88:
d5:cc:2f:08:42:c9:91:38:d5:be:de:60:73:fc:c1:
99:8d:5e:23:87:26:e8:02:3e:ef:63:54:c2:f3:8f:
53:82:6a:4b:82:af:04:19:66:67:94:62:bf:c3:11:
be:74:b0:cd:83:2e:cc:6b:c0:28:05:84:8e:88:f3:
0a:0d:e5:08:e3:19:ab:c9:00:a7:25:18:1d:40:e2:
93:f9:0c:22:64:8d:f1:73:fb:c4:7f:32:6b:45:7a:
27:7b:82:b4:be:d5:17:7c:d2:91:2b:25:2d:8a:88:
a0:cd:07:41:b3:4c:71:0a:7a:7d:a4:7f:0d:5e:2e:
f7:f9:8f:42:35:8c:81:27:8c:c8:32:81:f5:59:c6:
fb:48:1c:19:45:53:88:38:01:d4:d4:f8:69:a4:be:
0d:4d:ff:a7:ad:e9:a7:56:4a:2b:6e:31:fc:25:f2:
8b:52:88:36:83:c3:29:9f:7f:28:1f:88:bc:2d:33:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B7:2B:27:30:74:C6:2D:C3:83:EB:73:17:20:7B:E0:F9:6D:CE:41
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z7crJzB0xi3Dg-tzFyB74PltzkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8e:58:80:85:e0:63:41:5e:c6:4e:93:8f:d8:9c:65:ca:a3:
0b:66:28:f5:a0:06:89:93:73:30:43:c3:66:53:c1:a6:9e:a0:
16:bd:f6:7a:5e:33:a1:12:41:77:d8:41:00:91:49:79:1c:7a:
45:bd:64:b3:56:d6:5f:4b:24:c9:34:ce:a3:3b:8a:47:db:7e:
64:93:94:84:80:4f:c8:70:64:e4:48:9a:69:8b:bf:f0:82:77:
ab:bc:68:68:5e:48:3e:b4:d3:b0:5c:15:42:3a:08:50:f8:30:
d9:d3:ab:6f:7f:7d:0b:aa:48:16:cd:15:b2:ac:c7:39:1c:15:
8a:64:ae:e5:0b:58:d2:3e:17:47:7d:be:f1:9b:42:12:44:e7:
4a:ca:68:26:8c:48:88:c6:5b:7b:02:98:83:32:c8:f8:de:17:
15:ff:54:6d:59:c6:a7:7f:72:c2:94:57:55:fc:e2:1c:da:8f:
36:d0:47:cc:38:5e:4d:49:21:2a:75:ef:8f:4c:cc:4d:c7:dc:
bc:94:e0:e4:62:7a:d0:33:52:a4:07:63:31:2a:cd:31:63:67:
9b:a9:bc:a8:13:a9:9f:85:8d:56:50:19:ed:1b:3b:44:64:52:
0b:37:d6:5e:34:13:2f:a4:92:a1:59:66:02:fe:68:ba:96:52:
f0:9d:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:23 2025 by rpki-client