Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/63N_JkehymO1GxW_1BzUKgksYxU.roa
File: 63N_JkehymO1GxW_1BzUKgksYxU.roa (raw, json)
Hash identifier: ojyHgNbuoKnL4at4LD27fDrC3U4cQUqyWiSqi554DJ8=
Subject key identifier: EB:73:7F:26:47:A1:CA:63:B5:1B:15:BF:D4:1C:D4:2A:09:2C:63:15
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 01D7A552
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/63N_JkehymO1GxW_1BzUKgksYxU.roa
Signing time: Sat 01 Jan 2022 10:04:17 +0000
ROA not before: Sat 01 Jan 2022 10:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6876
IP address blocks: 91.194.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30909778 (0x1d7a552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Jan 1 10:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb737f2647a1ca63b51b15bfd41cd42a092c6315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:93:b5:4b:08:c1:16:b8:dd:d8:6d:90:f9:04:
71:f4:5f:75:fa:88:c0:13:72:0c:45:76:94:e0:e2:
6f:15:38:e6:18:0d:7f:12:0e:66:69:ab:bc:0b:ec:
c4:88:51:d4:75:2b:af:5e:da:5d:fc:55:ca:95:b4:
54:32:1a:8e:b7:2f:d3:d4:d9:19:3d:5b:79:fd:a5:
71:9f:1e:0c:4d:5d:70:fd:23:1e:21:7f:6a:65:3f:
92:05:e2:38:4c:15:93:d9:fd:e8:77:87:17:cf:ce:
9a:97:fd:8e:f6:ac:75:ec:ca:49:d4:59:ff:83:7a:
40:21:4b:74:a9:2f:2c:57:fb:dc:92:de:99:52:b5:
8c:bf:69:16:98:b0:e5:cc:13:1b:7d:1f:fb:91:96:
69:e9:b7:32:37:19:dc:ae:b4:15:23:31:18:67:7b:
33:9b:05:6c:6c:70:de:3d:10:cf:bc:5e:be:7b:36:
d0:2f:f0:f1:7b:a5:2b:13:8a:76:f2:56:26:24:2a:
db:45:5c:01:3d:7b:31:52:c2:fb:2b:ea:66:b3:f9:
ea:6a:eb:a8:4f:ee:e2:51:ba:96:04:29:a4:50:7b:
cb:a7:4c:d6:3d:88:bb:bc:fe:30:aa:f1:9f:7b:10:
2f:73:9f:f5:07:97:b3:c4:38:4f:54:f3:49:04:9b:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:73:7F:26:47:A1:CA:63:B5:1B:15:BF:D4:1C:D4:2A:09:2C:63:15
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/63N_JkehymO1GxW_1BzUKgksYxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.78.0/23
Signature Algorithm: sha256WithRSAEncryption
27:e0:95:c2:c7:b7:c9:06:e6:da:5e:49:fb:6d:61:cf:ad:e6:
6f:5b:ef:73:ab:88:db:63:60:1f:73:f7:5b:a6:d0:e4:a1:02:
bb:a3:e3:34:49:5c:59:73:3f:c1:05:fd:dc:39:43:0f:36:cc:
4f:8d:25:69:05:76:0e:28:b0:e5:39:ba:32:d7:7c:4c:8e:af:
cb:2f:a1:9a:0d:bf:48:62:f2:29:de:69:4f:e4:ab:04:c5:f5:
da:c5:9f:18:d9:f0:90:d5:ac:f7:65:e0:82:5a:68:36:24:3e:
64:5f:d8:3b:dc:56:c5:bb:32:fe:c8:82:36:22:9f:89:cc:fd:
3d:ee:80:12:00:db:c5:0e:6b:ab:4f:18:94:86:cc:3c:b5:50:
d2:af:1f:e9:bc:ef:08:3e:22:6b:f0:b3:46:b0:df:c0:a4:77:
bf:a5:65:94:b7:86:c8:5d:14:14:11:e4:1f:5a:6f:f4:2b:59:
35:ce:e6:e3:d3:54:e7:65:2b:68:63:4a:f5:89:c0:8a:b0:91:
18:c7:1d:dc:b7:ba:e6:c9:69:23:ef:e1:42:f7:21:d0:13:7b:
37:66:97:25:bb:8e:ba:fa:55:6d:3e:f2:fc:88:f7:e7:24:d3:
52:84:9f:ad:86:1f:7d:fa:0f:b2:64:0b:b3:fe:94:5f:cc:29:
9a:a9:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:04:36 2025 by rpki-client