Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/68CSgb09ryvFKZG8IfW98yUexp4.roa
File: 68CSgb09ryvFKZG8IfW98yUexp4.roa (raw, json)
Hash identifier: VKj7G+5Vv7y+zYd/db+K0lWOLgsZEE2rNeYEsUHdLc0=
Subject key identifier: EB:C0:92:81:BD:3D:AF:2B:C5:29:91:BC:21:F5:BD:F3:25:1E:C6:9E
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 01928EFEE5D7DAAB130A80CAB9B78B520889
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/68CSgb09ryvFKZG8IfW98yUexp4.roa
Signing time: Tue 15 Oct 2024 07:05:22 +0000
ROA not before: Tue 15 Oct 2024 07:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.199.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8e:fe:e5:d7:da:ab:13:0a:80:ca:b9:b7:8b:52:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Oct 15 07:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebc09281bd3daf2bc52991bc21f5bdf3251ec69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:44:9b:65:fe:76:b2:59:d1:9b:38:62:50:
48:fa:8f:25:0e:39:6c:56:7e:22:92:17:45:a1:19:
8a:77:5d:7e:89:b4:10:9d:76:fe:ea:01:6f:95:67:
b1:2e:82:d9:af:ca:ee:15:11:b4:78:b8:31:a5:9c:
45:03:c9:81:07:d3:23:ac:1f:94:70:c6:03:a0:58:
c2:19:8c:12:cc:86:3c:67:81:a3:8d:cb:08:2a:4e:
04:a0:ad:4b:6e:d3:1c:be:e8:d6:d0:f4:fe:2f:ac:
3d:3d:6e:a1:94:c0:97:6b:4d:79:5e:38:14:ea:9a:
89:48:6d:0b:46:24:fd:0d:3e:52:45:03:c2:50:46:
a2:44:f8:dc:a9:60:8f:c7:92:87:f3:54:45:da:b2:
46:6d:24:30:a3:d3:1d:b1:cb:71:ac:60:be:35:9d:
82:d7:d7:e7:8f:5c:de:e7:8c:b1:88:1a:7f:0e:7f:
28:9b:5e:3f:51:11:0c:4a:b1:d3:21:2c:1c:e7:14:
4f:5b:22:bd:f6:e5:cd:46:3c:74:e5:c8:69:d6:71:
73:f9:a9:3b:8c:06:57:7d:be:0a:4b:c2:84:3b:54:
5e:52:1a:da:12:c8:b6:3b:26:21:6d:c1:cf:2b:78:
2b:6b:ff:b8:ab:7f:bb:54:85:be:06:1c:04:3a:dd:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:92:81:BD:3D:AF:2B:C5:29:91:BC:21:F5:BD:F3:25:1E:C6:9E
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/68CSgb09ryvFKZG8IfW98yUexp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8c:b6:d6:00:ed:4c:03:47:62:48:be:c9:aa:30:04:34:fe:
05:88:03:df:9f:8d:c6:5b:38:a1:e1:7d:57:19:9f:1c:d3:aa:
ac:cf:7e:b5:76:5f:c0:0a:e0:75:c8:3d:82:e3:be:1c:76:a2:
d4:d3:d1:a5:ed:c8:a1:55:17:91:ed:a4:de:3f:f9:ab:5a:e2:
3c:56:6c:3d:22:53:a8:2f:a3:92:cc:c7:f1:ea:ad:7e:ff:3c:
08:c6:8e:f6:77:61:94:14:ee:45:5c:55:9e:50:e3:db:b3:b5:
82:14:da:fc:67:bf:7e:79:e6:dd:32:16:1b:a4:6e:46:47:d0:
5b:fb:7d:54:a7:f5:c8:4e:1a:23:e1:43:e6:db:e5:2b:e7:de:
48:de:9d:88:36:08:af:76:da:86:92:cd:47:6f:19:fd:60:49:
c1:54:bb:98:7e:4f:57:31:bd:55:c0:6f:92:bc:85:4b:c2:eb:
34:cb:f5:6f:7e:4a:f1:1d:7d:d7:f6:ac:75:19:59:49:89:87:
b3:52:93:b9:68:20:ab:35:80:6c:b6:8f:77:d9:d8:6d:3b:ba:
47:9f:56:d2:70:a8:2a:05:09:42:da:7c:d6:5e:8a:e9:d6:03:
5e:e2:30:d7:6f:fb:21:af:65:29:dd:9f:f6:3f:32:5b:7f:ea:
43:65:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:27:43 2025 by rpki-client