Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/6vflPkcFNotBIGSfCCvvH-BEh_M.roa
File: 6vflPkcFNotBIGSfCCvvH-BEh_M.roa (raw, json)
Hash identifier: OMEPjBynXI9hQwtnHqAfKkpISBObb0jJod/mhOotVEo=
Subject key identifier: EA:F7:E5:3E:47:05:36:8B:41:20:64:9F:08:2B:EF:1F:E0:44:87:F3
Certificate issuer: /CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Certificate serial: 01942144432AB3CACB840FD9EB285EBF649D
Authority key identifier: 83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/6vflPkcFNotBIGSfCCvvH-BEh_M.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 91.217.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:43:2a:b3:ca:cb:84:0f:d9:eb:28:5e:bf:64:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf7e53e4705368b4120649f082bef1fe04487f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:9c:cd:01:d8:aa:bb:99:49:f1:dd:ae:7d:
cc:04:bc:0e:72:a1:8c:79:27:3a:ab:79:44:4e:18:
b6:0f:6f:0b:08:52:94:84:6a:78:62:0e:81:dd:60:
91:4d:fa:10:27:36:ee:55:a3:21:19:24:b0:61:18:
a6:1a:33:74:4d:f0:44:36:53:a1:53:a3:9d:04:46:
16:06:c6:c8:61:e5:d1:09:a4:fa:c5:df:01:7c:db:
52:be:f2:90:cd:f1:cd:6c:70:f5:c0:33:1f:25:82:
2c:5e:84:c8:d6:36:6b:be:eb:11:69:47:10:0a:d0:
fd:69:ff:fe:a2:d4:55:e5:21:e8:d6:81:db:70:ac:
c8:e2:f0:12:8a:90:de:d4:a9:8b:5c:f8:a5:f1:71:
84:0f:76:a3:4b:2c:3f:fa:f2:46:6f:e7:b7:4c:39:
2d:28:2d:65:1e:83:48:8c:77:1e:76:c0:cd:d2:39:
98:7a:f5:97:32:34:ee:93:bb:46:e7:03:61:19:70:
4f:13:8e:64:a4:a5:ed:c0:98:76:6d:f4:92:fe:e1:
7e:ff:18:37:d2:aa:85:01:8e:89:ea:1d:22:a8:70:
20:43:e4:2e:0c:98:a3:26:17:82:08:68:82:58:48:
e4:0d:c4:45:b7:8c:c0:5f:0d:ee:53:1e:49:0d:17:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:E5:3E:47:05:36:8B:41:20:64:9F:08:2B:EF:1F:E0:44:87:F3
X509v3 Authority Key Identifier:
keyid:83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/6vflPkcFNotBIGSfCCvvH-BEh_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3e:32:1c:87:19:78:ff:00:79:be:cc:71:f2:d5:77:50:8c:
8a:18:20:66:57:eb:d5:7d:84:e9:76:ed:a2:10:cd:6d:c4:4f:
d0:ce:46:35:8d:f2:6b:64:db:cc:2a:79:46:52:56:e8:3a:40:
62:96:a1:6f:01:7a:f4:b8:1f:e4:59:1b:d0:fc:5c:b2:d3:27:
fa:4b:65:e6:a2:a7:8c:2a:bf:a5:40:fa:b8:7e:54:41:2c:6a:
6c:61:40:fb:6a:48:59:ec:9a:2b:63:d9:e3:f1:55:b3:67:69:
74:6b:7f:09:8b:3a:22:0f:7e:cf:16:ea:ae:72:39:28:d3:01:
f7:99:a0:f3:92:5b:93:1c:44:45:3d:62:43:de:fb:d3:75:6b:
79:01:65:86:c8:76:52:e2:ae:04:5d:8e:14:2c:6f:33:f7:a9:
cb:e2:b4:a8:21:9f:1e:5f:02:15:4a:98:02:8b:26:7a:67:9b:
02:c3:52:03:06:50:16:55:32:09:2f:75:a6:86:95:c7:a5:82:
d1:79:8c:79:ea:cb:79:5f:93:35:48:18:68:fc:19:34:c7:ec:
99:51:0b:64:3b:9d:e5:b5:a0:15:ca:f0:d6:4c:cf:77:c4:63:
f3:48:04:1d:ed:07:17:1d:b9:62:a4:61:a4:31:4b:91:ea:8d:
eb:cf:16:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:30 2025 by rpki-client