Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/1fACf-8RstZUTJjfnQCu3bC_4EM.roa
File: 1fACf-8RstZUTJjfnQCu3bC_4EM.roa (raw, json)
Hash identifier: y+Jyhi+AHKXvf5OSPohhDVxGrHaa58eOxr00zi1ZVhg=
Subject key identifier: D5:F0:02:7F:EF:11:B2:D6:54:4C:98:DF:9D:00:AE:DD:B0:BF:E0:43
Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial: 019424B37363292F38D5DD8B1511BD43F69F
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/1fACf-8RstZUTJjfnQCu3bC_4EM.roa
Signing time: Thu 02 Jan 2025 01:48:47 +0000
ROA not before: Thu 02 Jan 2025 01:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48003
IP address blocks: 91.208.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:73:63:29:2f:38:d5:dd:8b:15:11:bd:43:f6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5f0027fef11b2d6544c98df9d00aeddb0bfe043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:89:da:5a:5f:0f:49:1d:04:71:be:eb:c5:86:
f0:4d:c7:4d:bb:23:64:11:1e:cc:b3:eb:55:e9:32:
8d:78:a7:ce:9b:fb:06:08:fd:b7:68:e6:2f:43:8f:
cd:12:64:0c:8d:fb:ff:91:eb:bb:0c:84:68:2e:41:
59:53:bd:64:f2:5e:99:19:94:4e:ab:27:1b:dc:7c:
af:c8:bd:29:94:96:c7:ab:c3:a4:14:e4:01:94:64:
e0:05:8b:9b:f1:83:24:2b:ed:75:5f:93:7b:af:1e:
8f:f3:95:75:2f:68:54:5c:99:cd:38:c8:ae:6b:72:
f1:8a:a0:ea:5d:74:73:65:1e:58:7e:70:92:8e:64:
b8:31:24:11:b3:ea:b8:61:b3:cd:28:55:17:a6:22:
48:c2:6c:ba:7b:1b:aa:ac:af:77:3c:b4:1b:40:68:
d3:13:16:7c:e6:36:a7:a4:f0:a2:16:88:e4:56:1c:
f7:43:24:9c:f5:49:d2:82:33:6b:af:79:e0:1f:ce:
2f:96:73:cd:28:52:37:00:25:96:d2:e4:64:be:8d:
58:b6:4b:81:7b:2a:04:9d:58:69:a0:7a:c4:6b:57:
52:7f:18:37:28:c6:2b:e7:af:a7:99:f5:ec:a1:42:
e0:dd:9e:31:de:7c:9e:0c:a9:8e:b9:c3:45:ae:69:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:02:7F:EF:11:B2:D6:54:4C:98:DF:9D:00:AE:DD:B0:BF:E0:43
X509v3 Authority Key Identifier:
keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/1fACf-8RstZUTJjfnQCu3bC_4EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:09:08:0d:34:20:3e:88:6e:f4:5b:9e:df:d6:e8:4d:1a:8c:
69:67:77:f9:8b:1a:3e:28:54:f0:b4:4c:50:e4:69:a6:82:e8:
22:99:d9:82:3d:a5:1c:19:d1:c9:1c:b3:76:d3:f2:dc:2a:d3:
1c:81:60:06:86:7d:51:76:4c:09:31:68:80:68:cd:2e:a6:67:
7a:73:17:5f:ac:f1:87:55:3a:98:06:ec:7c:60:c8:6e:e6:a9:
3f:a4:30:4e:b0:dc:bb:e1:a4:ba:83:30:dc:ac:fd:4c:5e:74:
81:20:e5:07:d5:ef:e1:1f:f3:11:1e:92:36:4d:8a:46:ee:1e:
03:dd:b9:37:2a:28:b7:e7:9b:cf:5d:4d:6f:5a:0c:a0:57:30:
1c:d1:ef:ed:b7:3e:d1:b4:6f:9b:2d:e2:d5:fb:8c:5f:42:95:
69:46:37:97:1c:9f:a9:cc:30:8b:89:07:71:1b:49:45:f6:94:
0b:7f:5e:bf:42:f6:1e:8d:7c:80:7b:b5:5e:91:1d:16:42:27:
93:ff:3b:ea:ec:79:3b:99:f1:ec:cc:cd:41:1a:50:66:6e:5d:
29:ce:83:3f:f2:e8:63:7d:cc:12:2d:af:73:01:d8:da:2e:d4:
8e:10:75:40:c4:79:cc:b5:01:3e:47:19:50:96:a9:00:dd:3e:
c4:56:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:29 2025 by rpki-client