Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ymqhuCwkmdX0WRcmYF3vIzpEPtI.roa
File: ymqhuCwkmdX0WRcmYF3vIzpEPtI.roa (raw, json)
Hash identifier: VZIkav2K0x010uxAyIRzPZETkz2SGzLbE+LiheePNNQ=
Subject key identifier: CA:6A:A1:B8:2C:24:99:D5:F4:59:17:26:60:5D:EF:23:3A:44:3E:D2
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01927C834C89A5CB57DE90C3FD8DDA9C832E
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ymqhuCwkmdX0WRcmYF3vIzpEPtI.roa
Signing time: Fri 11 Oct 2024 16:57:12 +0000
ROA not before: Fri 11 Oct 2024 16:57:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.147.124.0/23 maxlen: 24
212.116.226.0/23 maxlen: 24
212.116.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7c:83:4c:89:a5:cb:57:de:90:c3:fd:8d:da:9c:83:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 11 16:57:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca6aa1b82c2499d5f4591726605def233a443ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:7f:25:c9:e8:66:15:da:d3:fd:b8:6b:34:
e6:ad:46:21:ef:09:76:70:de:d6:87:a4:49:02:c6:
7a:ef:cc:a3:24:7d:01:77:81:81:a4:ee:b1:4c:a8:
a3:b8:01:52:e5:f7:2d:e5:b4:71:79:09:df:6d:87:
80:4c:3f:f4:7c:27:0a:2f:04:64:62:c8:a2:9b:af:
e6:c9:19:d0:0d:f0:0b:5d:22:df:ad:46:4e:cf:40:
39:9e:63:66:10:2c:6e:d0:3e:28:c2:1c:27:5d:4f:
4f:85:9d:e5:ad:e9:8f:f9:5f:04:b2:2f:e4:1e:f7:
c8:61:e8:19:6d:49:67:dd:c5:be:15:0f:b2:fd:30:
a8:1e:b2:ec:53:dd:82:73:43:28:1f:7d:0e:24:f4:
38:b4:c1:bf:0f:59:93:1f:da:5f:2f:16:fa:0b:a6:
76:f5:4a:3f:68:2f:cf:b9:20:c6:03:ab:cd:26:73:
bf:41:b5:8e:b7:04:21:71:4a:b0:35:61:d6:2e:fe:
4c:75:6b:ab:51:2d:ec:02:b8:3a:a4:54:d6:95:0b:
c9:ef:e2:c1:3a:24:b2:b2:30:f8:86:bf:a1:61:dc:
bc:40:d8:13:7c:2e:96:40:c7:49:55:28:30:1e:2e:
ab:84:45:36:42:f4:7a:7f:20:25:76:a0:62:f8:15:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:A1:B8:2C:24:99:D5:F4:59:17:26:60:5D:EF:23:3A:44:3E:D2
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ymqhuCwkmdX0WRcmYF3vIzpEPtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e6:03:82:cd:d7:74:05:20:c7:6b:71:ba:82:20:b4:a6:ed:
cf:82:48:b5:9f:aa:2e:8f:7a:82:86:39:e3:01:ed:9c:18:44:
a2:3e:f0:63:7a:bd:34:77:e6:c8:c6:7f:d4:3d:27:c0:c6:79:
e8:61:ae:40:a0:8d:a1:e8:13:dd:e7:47:52:f3:6c:76:66:df:
17:2c:a9:a5:df:0e:f2:66:8c:45:d3:e0:8b:f7:d8:e6:6c:49:
18:4c:48:fc:f2:aa:7c:65:48:44:72:dc:61:9a:b0:36:d4:d8:
37:5f:94:fb:1e:47:62:9c:d7:09:52:1e:58:66:cd:73:c2:d2:
6a:21:1d:f8:04:a0:cc:c6:3e:2d:7b:c1:11:f7:84:1c:35:82:
7b:1a:9a:3c:5a:7b:bc:e6:0d:32:0a:71:8d:99:35:da:07:c9:
c5:e3:24:7a:1f:36:0e:cc:98:cf:d8:38:6d:08:26:f9:d6:89:
01:f7:6b:29:08:de:8f:56:4a:54:ab:24:75:e7:ea:dc:a5:86:
38:a5:3f:ec:f1:3a:4f:b7:41:25:dc:a6:0d:d4:2a:29:f6:96:
0d:ce:62:db:67:fe:e4:99:5d:75:23:92:47:e9:1e:fd:e3:c4:
b0:58:1e:5d:8a:35:a0:0f:84:dc:82:df:79:5b:8d:2b:14:a0:
65:18:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:11 2025 by rpki-client