Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/gQyARNPz8hHBabPHuVPr-cQVIRE.roa
File: gQyARNPz8hHBabPHuVPr-cQVIRE.roa (raw, json)
Hash identifier: 2GBEZVOu5qfQ9O5g+oMf5wWBX953bMFal8aDDkEmaJY=
Subject key identifier: 81:0C:80:44:D3:F3:F2:11:C1:69:B3:C7:B9:53:EB:F9:C4:15:21:11
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0193C6FC97531B4F8B75D9FB772141C35437
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/gQyARNPz8hHBabPHuVPr-cQVIRE.roa
Signing time: Sat 14 Dec 2024 21:04:22 +0000
ROA not before: Sat 14 Dec 2024 21:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 91.147.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:fc:97:53:1b:4f:8b:75:d9:fb:77:21:41:c3:54:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Dec 14 21:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=810c8044d3f3f211c169b3c7b953ebf9c4152111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:c5:ef:e9:59:d1:a4:a7:7a:4e:6a:f0:10:
d7:39:91:f4:2b:bf:2d:35:85:65:ad:34:2d:db:ed:
c1:f1:0a:f5:84:69:dc:87:b6:ca:21:b2:6a:43:a5:
e7:17:c7:dc:76:29:14:3b:78:af:eb:7d:ed:b7:f1:
70:ce:c7:91:db:8d:c0:f0:a2:ff:b8:5c:5c:d6:2b:
15:c8:05:fb:cd:1b:fa:e6:b3:61:fd:87:ac:b5:c1:
0f:96:74:c9:cb:b1:0c:f1:95:20:8a:44:82:3e:9f:
7a:f0:32:0d:cf:aa:e7:49:e9:5b:55:d3:8d:09:5b:
48:20:f1:0e:33:d7:94:48:62:5a:9a:3f:35:c0:28:
95:bb:8a:ef:13:58:8b:9c:68:a1:50:38:cc:c9:3b:
24:24:90:42:49:77:e6:c2:99:67:bc:1a:23:68:fc:
a7:44:60:8a:12:c3:8c:71:8e:44:a8:75:af:36:f4:
58:6f:25:b4:42:4c:b4:fc:85:b7:c1:57:e7:13:da:
39:21:cf:a5:e3:85:96:8f:e1:13:57:c3:ef:f4:f1:
31:dc:33:6c:81:7f:1b:da:8a:53:85:6c:76:ac:62:
7d:e7:50:58:39:69:9d:d6:b2:45:96:d5:ff:6f:8b:
f9:eb:96:1b:9b:e6:dc:15:b7:c9:fa:72:65:27:f4:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:80:44:D3:F3:F2:11:C1:69:B3:C7:B9:53:EB:F9:C4:15:21:11
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/gQyARNPz8hHBabPHuVPr-cQVIRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
Signature Algorithm: sha256WithRSAEncryption
af:9c:65:e3:f6:a8:cf:b1:8a:b8:bb:b0:0a:e2:70:b2:66:10:
72:9f:68:89:80:9f:53:a1:28:a6:6a:2f:5a:d1:9c:08:46:8e:
62:82:4d:1a:8f:bd:d8:e6:36:e5:fd:97:70:46:16:40:9c:bc:
c5:4b:ca:d6:b2:08:08:9a:f7:1a:4f:e0:22:80:4c:3c:fe:b2:
5d:29:38:48:11:58:cc:36:aa:ea:bb:ad:f1:09:66:23:44:25:
00:df:02:b6:d0:12:18:80:0f:ba:9c:25:d7:cf:a8:a0:bd:39:
ae:46:b1:cb:a1:d3:aa:45:c9:fd:66:07:8f:6c:1c:11:38:62:
48:e6:56:04:1d:2c:35:96:a7:4a:b2:f6:5f:28:3e:12:b8:c1:
cc:2b:bf:41:4e:da:00:7c:d9:82:a7:36:70:dd:da:1e:75:55:
7f:fc:f3:59:3a:8d:de:76:1d:38:c0:4e:f9:04:8b:d4:dd:e7:
88:34:fc:88:25:b4:b4:dc:b6:7f:74:da:27:e2:63:0c:9c:77:
f0:91:68:48:7b:86:08:df:43:b3:0b:ef:bc:b6:4c:d7:69:fe:
db:65:15:44:8d:9d:6b:74:fe:d5:0e:67:99:d4:2f:a2:e2:22:
ad:55:41:b3:9d:79:a5:c0:e9:6a:3c:4c:47:d8:6a:d8:81:a9:
7d:af:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:32 2025 by rpki-client