Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/ib32Uv17-O_p9sLpFRb8KcRSueA.roa
File: ib32Uv17-O_p9sLpFRb8KcRSueA.roa (raw, json)
Hash identifier: wNMccw8Mgy+RkZRzxE2MlBmOJSqeKRJZ/o2ll3c60hY=
Subject key identifier: 89:BD:F6:52:FD:7B:F8:EF:E9:F6:C2:E9:15:16:FC:29:C4:52:B9:E0
Certificate issuer: /CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Certificate serial: CA3863
Authority key identifier: 34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/ib32Uv17-O_p9sLpFRb8KcRSueA.roa
Signing time: Tue 26 Apr 2022 14:45:35 +0000
ROA not before: Tue 26 Apr 2022 14:45:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 91.226.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13252707 (0xca3863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Validity
Not Before: Apr 26 14:45:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89bdf652fd7bf8efe9f6c2e91516fc29c452b9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:86:15:1e:26:fd:5e:f9:24:30:c0:59:f9:de:
78:0d:11:ce:0c:ce:de:33:77:af:52:72:18:77:45:
e0:6b:dc:27:fb:7b:b6:3f:b5:ed:8d:c0:39:12:ed:
74:66:c3:8d:9b:93:92:69:5b:5e:9b:33:a9:8c:b2:
55:e1:43:68:ac:88:c2:5d:a0:06:8e:e6:74:da:61:
c9:b2:f5:68:b0:a1:bb:3f:31:74:54:7e:f6:c3:2f:
ee:c2:a9:72:dd:17:c4:0d:7b:5d:b2:08:c3:51:5b:
b7:d4:cf:f5:e4:8a:1f:5a:12:af:c0:47:25:c2:1d:
79:f3:16:1e:94:d8:1f:36:34:1e:0d:87:6f:de:46:
a8:4a:c4:6b:f7:06:9d:96:e0:57:fc:f1:99:82:89:
5b:96:0e:47:1b:60:1d:eb:f9:b7:e8:0b:d9:c3:ad:
16:a4:48:54:2c:c9:b1:60:91:bf:03:a9:81:ca:c5:
36:99:3b:f4:06:d2:3e:86:3a:c9:cb:97:dd:60:ae:
d0:27:88:43:fd:85:6a:d5:bb:a3:9a:c0:2b:43:6d:
66:91:a4:03:a1:0d:f4:81:0d:fb:48:89:e7:75:fc:
99:5c:23:60:76:9d:b3:fb:db:5e:a4:19:0a:37:12:
44:ab:b2:67:80:e7:fa:ee:c9:ef:b6:52:14:4c:7a:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BD:F6:52:FD:7B:F8:EF:E9:F6:C2:E9:15:16:FC:29:C4:52:B9:E0
X509v3 Authority Key Identifier:
keyid:34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/ib32Uv17-O_p9sLpFRb8KcRSueA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.247.0/24
Signature Algorithm: sha256WithRSAEncryption
12:07:01:91:76:e8:7a:fc:8c:67:ed:9b:9c:fa:96:aa:ac:10:
b0:01:11:71:33:56:e8:4a:97:c2:fa:62:41:4b:22:c2:b1:29:
92:e9:3c:a4:f2:a3:0a:08:8d:3d:d9:11:93:3d:a7:1b:19:fc:
ab:bf:1e:1b:7e:6c:30:ac:70:dc:00:ed:4f:8b:64:9e:d7:3d:
d4:73:44:82:30:47:2d:86:f1:be:04:79:30:d7:43:78:80:6e:
eb:00:23:61:10:73:ce:1d:cc:7d:e4:d6:51:76:4b:6b:2f:8a:
e3:a6:6e:65:2a:6b:69:2e:b1:3a:d4:2f:68:63:0d:a4:bd:30:
76:39:fb:05:91:b6:70:3f:f3:ed:01:54:35:c0:48:7b:f2:45:
49:6d:09:d8:11:9e:e0:ec:3c:69:93:f7:0b:e8:5f:da:c5:eb:
92:95:a4:53:86:02:52:e6:a8:06:f5:56:97:73:90:b2:a6:48:
77:e3:84:60:6f:f9:f7:ab:3b:6a:f6:08:e1:97:ad:b6:a3:00:
d3:8e:d9:de:ce:88:7b:4b:b3:f0:ad:cc:a2:0e:a8:9c:6d:9d:
03:42:1f:a4:4c:4d:96:75:44:3d:81:42:8f:45:b6:d5:80:e9:
bc:0f:d3:38:7b:e5:86:77:58:bd:ac:45:bf:70:a7:15:11:25:
2d:d2:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:39 2025 by rpki-client