Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/5HOhy1Y8cAYoXUhZYrgBbdI7P04.roa
File: 5HOhy1Y8cAYoXUhZYrgBbdI7P04.roa (raw, json)
Hash identifier: qajQabNA7uv3m3yw4y20NGMgChyVAFwDDY+gf8gDFG8=
Subject key identifier: E4:73:A1:CB:56:3C:70:06:28:5D:48:59:62:B8:01:6D:D2:3B:3F:4E
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 018570B09449DA776FFEAA86198750D6E0D9
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/5HOhy1Y8cAYoXUhZYrgBbdI7P04.roa
Signing time: Mon 02 Jan 2023 04:14:58 +0000
ROA not before: Mon 02 Jan 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58272
IP address blocks: 91.199.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:94:49:da:77:6f:fe:aa:86:19:87:50:d6:e0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Jan 2 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e473a1cb563c7006285d485962b8016dd23b3f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:f4:1b:97:b8:03:72:04:46:22:37:59:69:
6f:b1:ce:43:ad:78:6c:92:43:e0:e3:2c:2f:b7:ea:
ba:72:89:16:8a:d9:16:0a:a5:cb:31:08:7c:6e:cb:
ff:47:02:77:0f:81:15:8f:4a:0b:13:bd:c4:a4:f6:
b0:c8:10:22:b0:20:0b:e4:d2:89:da:1e:58:d0:3f:
26:bc:da:54:12:b8:90:6e:74:1a:fb:29:0c:32:7d:
5c:0b:36:f8:a3:07:4a:99:65:2f:88:30:4a:f8:ab:
0c:e1:e7:7a:de:9e:64:62:4e:3d:2a:53:ec:9d:10:
0c:2b:b9:e4:3e:a9:9a:f3:96:9b:ca:41:03:8e:00:
bf:5a:42:0a:87:c7:3d:5a:73:d0:99:8b:09:c3:c5:
2f:06:b6:72:e5:a2:fa:55:d0:19:8a:5a:e9:08:9e:
99:da:d2:23:2b:cc:44:1d:f8:5f:04:19:43:63:ba:
da:76:0b:08:36:7e:38:af:23:46:fe:d2:ae:4b:7c:
36:41:fa:83:97:43:a8:60:e6:5a:70:57:05:27:58:
ad:ce:a3:b6:fb:23:11:fc:d1:f8:02:c0:f5:6a:5b:
9d:c3:e8:bb:2e:ef:b9:9d:98:3b:98:14:be:18:0a:
87:65:1c:c5:07:f4:c0:f4:98:48:46:40:a3:3e:83:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:A1:CB:56:3C:70:06:28:5D:48:59:62:B8:01:6D:D2:3B:3F:4E
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/5HOhy1Y8cAYoXUhZYrgBbdI7P04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.171.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:7b:e4:db:17:37:e9:10:0a:c2:68:68:8f:9c:bb:47:f1:29:
15:96:e7:27:e6:d8:d1:9f:cc:8a:35:03:4d:86:97:e2:38:0c:
8b:72:5a:f9:68:18:e9:05:9d:e9:51:4c:41:1e:2b:97:12:4b:
6b:23:f7:92:0f:a1:be:d2:f9:75:22:dd:bd:dc:7c:68:8f:e3:
42:92:37:7b:b7:fa:fd:84:6e:ad:55:f8:61:b7:23:18:30:fe:
57:ba:64:ae:0e:c1:d2:81:fe:a2:4e:a3:b8:16:bc:f6:b8:43:
33:69:cf:22:fb:47:c3:d7:96:35:a7:2f:48:d8:29:08:dc:6f:
f4:23:14:c7:73:30:e7:5f:ce:19:5b:e1:75:3c:61:60:36:63:
30:26:5a:aa:52:07:44:40:83:40:91:65:01:ef:82:ca:0a:b8:
7e:91:6f:f4:3d:08:13:9d:08:b5:1c:ce:18:ee:79:0a:d5:20:
1e:33:2a:0e:23:ce:7b:d6:54:7c:7c:bc:d3:e5:9b:d7:01:4f:
ee:27:a6:1f:79:f2:8b:a4:e7:01:e1:a5:37:6f:13:15:aa:e6:
67:95:fd:12:34:6b:0a:e3:1d:5e:5a:ad:3d:b8:fd:15:2d:d0:
60:e7:a5:b7:60:ef:1b:19:64:ab:91:e8:39:8d:9a:59:89:7f:
8a:f8:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:39 2025 by rpki-client