Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/yJtLZesgawIRBlRecs1wuXfXOEI.roa
File: yJtLZesgawIRBlRecs1wuXfXOEI.roa (raw, json)
Hash identifier: X7LqrVSl9CcxCWKUFAnRn/McWbnPJ3NH352lrh6QJyE=
Subject key identifier: C8:9B:4B:65:EB:20:6B:02:11:06:54:5E:72:CD:70:B9:77:D7:38:42
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018B72220CEA8AFA982AC086FC8BFE8FD3A1
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/yJtLZesgawIRBlRecs1wuXfXOEI.roa
Signing time: Fri 27 Oct 2023 17:15:16 +0000
ROA not before: Fri 27 Oct 2023 17:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.243.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:22:0c:ea:8a:fa:98:2a:c0:86:fc:8b:fe:8f:d3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 27 17:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c89b4b65eb206b021106545e72cd70b977d73842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:27:b3:25:8f:64:95:5f:12:95:ad:54:7a:
e4:00:5f:8f:7c:92:81:c2:00:3e:80:f7:75:df:e2:
f5:3e:22:5c:51:94:08:c7:c7:9c:f9:1b:69:5e:6a:
68:02:ad:e0:e6:d1:3f:40:dd:c0:12:7c:66:9f:06:
ec:5e:97:5e:f9:31:89:26:2c:ad:eb:2f:c6:43:b6:
ae:1b:7a:50:74:95:75:fd:3f:42:9f:f0:3c:6d:99:
4e:f5:17:84:d0:4f:25:d8:41:92:b2:1c:e0:ca:03:
97:5c:7c:35:e0:ee:61:9f:76:36:fd:99:5d:7f:3a:
47:d6:4a:c3:4e:45:a4:0f:97:bc:4a:79:3f:6d:f8:
c1:07:df:35:f1:7e:c9:be:9c:69:f9:14:87:00:f7:
5e:fd:31:ca:9a:e9:4d:63:97:31:55:19:2b:82:1c:
67:0c:ad:28:e1:61:41:8c:d5:91:60:6e:fd:50:48:
8a:38:1c:4f:58:02:01:a4:91:96:8f:ca:31:91:26:
ee:b1:72:04:d4:0a:ee:50:58:cb:54:05:c8:61:e0:
77:3c:cc:6a:02:60:7c:73:88:05:26:ff:b4:cb:86:
43:b0:b1:f5:dc:25:7f:c0:27:0b:65:16:45:f2:e8:
9b:88:f9:94:af:af:7b:d1:50:89:ad:3e:72:d5:2c:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:4B:65:EB:20:6B:02:11:06:54:5E:72:CD:70:B9:77:D7:38:42
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/yJtLZesgawIRBlRecs1wuXfXOEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:44:ed:b6:47:19:c9:19:06:76:f9:75:16:25:c4:81:35:12:
46:a4:60:6c:67:8b:3a:19:41:1c:98:26:72:4e:91:c4:11:ff:
8b:36:dc:28:90:60:5b:86:9e:6c:e0:e7:e8:e2:15:ea:26:a9:
58:1e:29:9d:b4:e5:41:52:44:41:3b:1b:22:d2:02:25:ed:ab:
8d:da:2f:8e:9c:69:eb:d7:4d:71:ea:47:bf:aa:48:4a:11:ca:
a7:8d:52:3a:5a:57:d8:9d:ca:aa:1d:85:90:4a:1a:70:2d:0c:
fa:3e:8f:a2:f5:53:42:43:f7:f8:01:07:df:15:67:ba:4b:15:
72:60:86:77:51:a9:4e:42:62:cb:4e:56:6c:3b:f6:14:03:e4:
04:af:41:21:01:17:a2:d2:9a:88:74:d5:34:75:1b:1e:d3:08:
78:86:9b:4b:0b:38:57:49:40:6c:e3:2b:ac:83:89:60:8b:7a:
c4:43:7e:b9:4c:99:e7:8f:fb:71:75:18:0e:52:47:f4:10:21:
93:68:a8:01:97:e9:a1:ef:53:c7:7c:89:b6:df:fb:be:db:cf:
2e:cf:71:54:98:dd:47:bf:37:d8:76:a7:0e:b8:c2:26:cc:eb:
41:b4:f5:e3:dc:d6:8e:fb:99:2d:8b:ff:80:cb:e2:c9:9e:70:
71:72:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:57 2025 by rpki-client