Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/p24fxJtC3yZfqB3ZY4Oj3-VR9YE.roa
File: p24fxJtC3yZfqB3ZY4Oj3-VR9YE.roa (raw, json)
Hash identifier: ukuGVpXHcdVQA7Gqk4FzpBlGPzBPQvoRVTM7tvWMnvQ=
Subject key identifier: A7:6E:1F:C4:9B:42:DF:26:5F:A8:1D:D9:63:83:A3:DF:E5:51:F5:81
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0188306C26EBD812C78C5BEFA16B04BF1FA6
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/p24fxJtC3yZfqB3ZY4Oj3-VR9YE.roa
Signing time: Thu 18 May 2023 19:52:54 +0000
ROA not before: Thu 18 May 2023 19:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.147.117.0/24 maxlen: 24
91.147.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:6c:26:eb:d8:12:c7:8c:5b:ef:a1:6b:04:bf:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: May 18 19:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a76e1fc49b42df265fa81dd96383a3dfe551f581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:64:c1:54:2b:c7:d1:64:bb:0b:5e:28:04:
60:2b:07:96:ac:3c:23:77:a3:9d:7a:ef:6c:7d:0a:
a5:6d:8d:4e:22:cf:b8:2f:79:87:f1:a5:40:7f:12:
4a:ea:56:a7:32:df:51:df:31:e7:cc:66:11:a8:09:
3d:ee:ef:cc:9d:55:45:bb:b5:53:ae:92:ee:43:ae:
05:1b:24:71:da:b8:e9:aa:00:97:b5:20:5e:69:90:
32:81:47:78:b1:e7:ee:5c:8f:e3:b0:42:83:49:c7:
32:15:4c:6a:dd:e0:a7:18:64:c8:ef:0d:79:45:ba:
6f:e7:31:1c:84:17:8b:62:ec:e7:48:d6:c1:65:f6:
01:fa:6f:76:8b:40:42:1d:4a:5f:f6:bc:ab:e2:60:
bb:6f:33:6b:ad:87:5e:a8:72:d9:cf:88:77:dc:06:
b0:8f:ce:f5:e3:7a:67:c7:ba:05:51:28:87:f3:1c:
e9:14:d6:c3:52:b7:1d:15:92:f2:21:c1:bf:0c:14:
e2:38:12:a3:28:80:b6:ab:ca:4b:db:78:3e:91:2a:
a1:ce:35:d8:1a:63:2c:9b:81:81:77:5c:bf:06:4a:
de:b4:63:33:93:0a:80:ea:e5:91:03:d7:22:ff:4c:
d3:84:cc:45:36:57:db:d5:5a:c6:6b:4f:53:5d:cf:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:1F:C4:9B:42:DF:26:5F:A8:1D:D9:63:83:A3:DF:E5:51:F5:81
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/p24fxJtC3yZfqB3ZY4Oj3-VR9YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.117.0-91.147.118.255
Signature Algorithm: sha256WithRSAEncryption
41:ff:b4:7d:ba:2d:13:86:fb:f1:9a:55:a5:1e:52:2c:b3:eb:
21:cf:7a:97:e5:05:06:89:b0:ec:41:2f:ae:a2:f2:4b:d0:3c:
2f:c8:cf:cf:4a:0e:3f:cc:4f:ce:52:12:ae:ab:a9:3a:bf:d0:
98:39:d7:6d:20:96:f9:0a:1e:ba:e9:cc:5d:2f:40:f0:72:76:
f6:10:e4:5e:04:90:84:69:63:19:9f:8d:ec:60:80:1f:d8:7a:
49:4b:38:ab:2d:48:59:55:71:d1:21:9c:55:96:49:dd:39:87:
e6:36:f8:c0:e2:66:dc:49:c8:e0:18:cf:d4:07:3d:51:a4:32:
d7:08:2c:35:01:ba:87:d4:c2:d8:b1:06:b1:66:0b:1f:65:df:
36:70:e8:79:1d:19:0d:00:34:0d:8a:4c:c5:1d:bd:a7:af:54:
57:29:cd:8f:80:8e:55:e6:07:dc:24:ed:de:90:fd:54:83:a6:
15:cc:03:27:24:51:25:2d:da:d9:40:ef:33:a5:d5:42:6f:c8:
74:83:ad:b2:5f:05:55:3a:30:c1:e6:c0:77:9d:4b:60:8b:cf:
44:56:c1:28:4b:54:50:9c:33:7b:79:c9:62:01:17:36:e3:c0:
51:f2:53:08:c9:05:4a:de:65:6c:e3:91:0a:05:7a:b8:04:3a:
e2:58:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:03 2025 by rpki-client