Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/H2QcDZGkbHZp9lQKZ49rMGv-5Dc.roa
File: H2QcDZGkbHZp9lQKZ49rMGv-5Dc.roa (raw, json)
Hash identifier: 46fepxsKk1gC5Sn20hCQlyy7JRG+tV2EVk7KCTzRd7I=
Subject key identifier: 1F:64:1C:0D:91:A4:6C:76:69:F6:54:0A:67:8F:6B:30:6B:FE:E4:37
Certificate issuer: /CN=9dd9ada6daa63cc6513b19ee887341a4986430fe
Certificate serial: 02D0A0
Authority key identifier: 9D:D9:AD:A6:DA:A6:3C:C6:51:3B:19:EE:88:73:41:A4:98:64:30:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndmtptqmPMZROxnuiHNBpJhkMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/H2QcDZGkbHZp9lQKZ49rMGv-5Dc.roa
Signing time: Thu 06 Jan 2022 04:10:18 +0000
ROA not before: Thu 06 Jan 2022 04:10:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206276
IP address blocks: 91.103.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184480 (0x2d0a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd9ada6daa63cc6513b19ee887341a4986430fe
Validity
Not Before: Jan 6 04:10:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f641c0d91a46c7669f6540a678f6b306bfee437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:81:47:f8:3f:9c:d1:64:9e:58:7f:f7:33:
3e:b3:82:a9:e3:df:67:0c:b6:dd:cf:04:61:9d:3a:
d7:2f:c6:db:11:67:43:a6:26:7d:3a:d6:4f:ce:da:
b7:a4:6b:96:4c:ac:e9:58:27:6c:d9:34:22:bc:c5:
f4:47:3c:46:89:0f:91:af:0e:f3:9e:f5:05:5f:f4:
15:2e:46:cf:d1:0d:9e:04:94:b3:2b:dc:ca:fc:94:
fc:dd:a7:f2:cb:d1:30:50:f4:3d:49:ee:9d:78:61:
12:8c:2c:80:dd:65:85:97:19:1b:36:57:3e:b1:c4:
79:86:87:23:fa:b1:82:3f:8d:df:a2:de:62:36:d0:
1c:93:4f:e6:7c:84:01:5b:8c:d3:30:10:a6:89:1b:
91:67:80:c3:bd:e8:02:5f:58:e9:43:b2:3f:0d:a7:
bf:20:67:9c:4d:1e:e7:f1:4a:69:27:77:ee:b5:f7:
8a:6e:a6:28:77:30:fd:d9:c7:0e:16:02:25:36:c9:
51:37:84:ae:a4:1a:26:27:86:7c:63:06:62:e9:4e:
53:37:2c:00:e7:a9:e2:05:58:4c:6b:d8:f4:5e:22:
93:90:57:5a:d1:c8:1e:b0:54:bb:f2:bd:78:16:08:
a8:ad:f2:d2:98:a5:6e:d5:8a:fb:81:63:67:b6:5b:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:64:1C:0D:91:A4:6C:76:69:F6:54:0A:67:8F:6B:30:6B:FE:E4:37
X509v3 Authority Key Identifier:
keyid:9D:D9:AD:A6:DA:A6:3C:C6:51:3B:19:EE:88:73:41:A4:98:64:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmtptqmPMZROxnuiHNBpJhkMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/H2QcDZGkbHZp9lQKZ49rMGv-5Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/ndmtptqmPMZROxnuiHNBpJhkMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.151.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:73:84:93:51:81:b6:0a:36:53:e6:b2:2f:92:69:80:eb:3e:
11:04:c5:78:a2:04:9b:3f:9c:41:96:77:38:f3:b9:e3:ee:8b:
54:8d:ef:e0:08:41:90:5c:3c:64:57:c0:09:cb:d1:07:7d:fd:
5d:57:58:87:f4:c0:ad:b0:38:21:4c:a1:0a:8d:45:ec:ca:b2:
8e:8a:51:f6:61:6d:0b:69:71:f4:46:62:5a:2d:ae:72:3e:e2:
41:23:1e:47:ef:34:9a:99:5b:53:9d:b7:c8:f8:e7:0b:3f:00:
85:dd:04:ab:1c:a7:32:87:23:7b:30:d5:6e:c2:b7:58:4f:ad:
97:bb:42:d0:f0:0a:69:c4:ce:3f:89:7c:8d:d6:43:f0:8f:f6:
09:77:bf:93:18:36:81:b2:7a:44:e1:ca:61:06:f8:56:96:c1:
1a:f8:07:6d:14:2b:7f:ff:5b:ac:4d:94:38:c6:3f:d8:5d:43:
06:3d:72:ca:61:77:3f:a9:24:0a:27:f4:8c:17:c8:53:c4:c2:
c2:7f:57:07:43:9a:89:56:48:ef:1e:5f:e3:d4:a7:b4:72:24:
45:da:13:ad:62:44:ec:cb:93:64:86:05:29:b9:6b:20:5f:6e:
19:b0:e9:ab:80:d1:5f:ad:72:8b:05:cc:92:e7:df:fb:43:c0:
a5:6e:bd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:46 2025 by rpki-client