Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZGFK9XzGyMSMSJhsMtCtT5mqDEQ.roa
File: ZGFK9XzGyMSMSJhsMtCtT5mqDEQ.roa (raw, json)
Hash identifier: uryG9H1ZBx+1SacWXs5IG6Lu+xqvxoqaqjqHeM3Hl0A=
Subject key identifier: 64:61:4A:F5:7C:C6:C8:C4:8C:48:98:6C:32:D0:AD:4F:99:AA:0C:44
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0186041F097F3918C0B178B6ECA0644BD34F
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZGFK9XzGyMSMSJhsMtCtT5mqDEQ.roa
Signing time: Mon 30 Jan 2023 19:19:48 +0000
ROA not before: Mon 30 Jan 2023 19:19:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 91.147.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:1f:09:7f:39:18:c0:b1:78:b6:ec:a0:64:4b:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 30 19:19:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64614af57cc6c8c48c48986c32d0ad4f99aa0c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:f7:56:4a:cb:de:02:b5:0e:dd:e4:c1:99:
51:95:7b:2d:1d:f0:2a:81:a5:58:25:96:92:72:f7:
61:8f:85:32:fc:a4:84:ff:8c:27:52:58:9c:c3:7d:
c5:3f:39:82:52:f7:c1:c8:86:5a:8a:ab:a2:54:fb:
a4:01:c5:00:83:96:8d:a3:6b:0d:0b:05:d6:18:e7:
fd:86:a4:f2:27:3b:57:f3:5b:b0:21:f2:fc:d1:53:
5b:a0:3b:81:30:1c:5b:0c:ff:af:e7:bf:49:20:52:
34:32:9e:56:f9:a9:21:f3:62:ca:74:88:b6:c8:3f:
ae:de:3c:6f:f6:c5:ea:f7:10:83:5e:ae:78:d9:fe:
84:11:ed:e2:26:3e:e5:88:21:87:bd:0c:66:ca:ad:
70:31:38:2c:f6:44:94:d3:66:ad:77:5e:ec:c7:c7:
ba:5f:f8:1c:1c:64:25:3a:24:ba:b4:f8:d8:44:29:
81:ca:8b:ce:3e:bd:ea:5e:a4:94:67:a1:41:94:51:
3b:6b:60:52:6f:82:54:f5:35:aa:69:e1:6e:8a:a7:
b0:9e:f7:22:70:ba:85:c8:ea:3f:d4:97:92:a3:cd:
cc:b6:37:0b:ee:a5:4c:56:41:36:dc:c7:0f:d6:74:
09:0f:b0:66:a4:58:55:16:87:22:18:d4:25:7a:7e:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:4A:F5:7C:C6:C8:C4:8C:48:98:6C:32:D0:AD:4F:99:AA:0C:44
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZGFK9XzGyMSMSJhsMtCtT5mqDEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
Signature Algorithm: sha256WithRSAEncryption
08:32:75:30:ea:f3:d5:f7:0f:db:f1:8f:0a:87:1a:77:8c:07:
83:db:da:0c:41:8f:66:ef:7f:4f:bf:b8:66:c3:c6:e1:a0:6b:
34:61:3c:8e:fa:59:62:6b:e9:63:95:05:a5:78:59:90:90:09:
8b:f3:19:14:6c:31:d0:78:7d:ea:9f:4d:c9:e4:f8:7e:9b:99:
ba:76:8b:8e:f0:e1:f3:43:f1:0c:fc:c8:40:52:ed:d7:47:3b:
78:20:ae:a1:14:e2:95:ee:6b:7e:54:7f:fa:ae:8f:96:a7:f2:
7f:96:ac:c5:19:83:c0:49:19:99:a9:12:33:ee:11:ac:65:d0:
46:bf:ae:50:d4:5a:eb:09:94:63:09:a8:76:a3:0d:26:d7:bc:
25:97:c1:fc:77:5f:96:aa:c1:34:3b:ce:57:e7:e6:21:45:09:
ed:09:04:71:78:54:1f:ab:ca:d8:33:ef:87:8e:8b:2a:78:4d:
1f:5c:4d:96:64:e8:84:78:5f:cb:41:9c:3b:33:99:d1:6d:f5:
53:c7:a8:e6:2c:af:50:b4:f0:0c:00:01:f3:35:78:ed:0d:eb:
60:cb:f1:e3:8a:bb:f7:1c:19:ac:03:77:b6:d5:0b:ee:66:90:
7f:f8:66:a4:29:71:c7:24:ea:b4:75:37:ba:a1:cc:2d:12:ab:
ad:16:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:23 2025 by rpki-client