Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/j8TPrkeeDn4HaZTXgsSxckAnc_0.roa
File: j8TPrkeeDn4HaZTXgsSxckAnc_0.roa (raw, json)
Hash identifier: QKwzMYLchr66GnixQTjTNWZAxiKHDqXuW96Si9/TD+I=
Subject key identifier: 8F:C4:CF:AE:47:9E:0E:7E:07:69:94:D7:82:C4:B1:72:40:27:73:FD
Certificate issuer: /CN=52fda220239aebdd4ab44c7c4fc25eca81d015fb
Certificate serial: 0185710C02120ABA97258E16C3FCD27C9B19
Authority key identifier: 52:FD:A2:20:23:9A:EB:DD:4A:B4:4C:7C:4F:C2:5E:CA:81:D0:15:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uv2iICOa691KtEx8T8JeyoHQFfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/j8TPrkeeDn4HaZTXgsSxckAnc_0.roa
Signing time: Mon 02 Jan 2023 05:54:50 +0000
ROA not before: Mon 02 Jan 2023 05:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:02:12:0a:ba:97:25:8e:16:c3:fc:d2:7c:9b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52fda220239aebdd4ab44c7c4fc25eca81d015fb
Validity
Not Before: Jan 2 05:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fc4cfae479e0e7e076994d782c4b172402773fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:6d:bf:45:c6:d4:7b:17:93:23:df:67:f8:
bd:ef:07:cb:44:e1:04:3a:f7:45:4b:ac:2f:37:cf:
68:34:68:49:19:94:7f:13:d1:ed:df:cd:d7:9a:4b:
57:23:8e:ce:53:e1:01:0d:4c:47:30:84:fe:69:ae:
d8:7f:58:cb:24:a8:c1:80:70:e5:d2:11:52:ee:3f:
e9:6e:83:79:6f:f2:27:11:cd:1e:8a:05:94:4a:97:
85:fd:63:02:42:6f:09:ad:75:53:80:a6:13:c3:f6:
28:37:40:03:0b:7d:34:c2:ec:b7:1b:13:d5:dd:f0:
79:f9:02:53:5d:d2:d3:b8:ad:00:a5:47:c5:78:d1:
23:e6:f5:61:5e:f1:f6:bb:40:c4:33:11:9a:d9:18:
5a:22:9b:4a:ba:54:df:36:a7:03:ce:85:d5:fb:fb:
92:9e:c0:f6:9d:47:d1:07:0e:57:2c:50:e9:bf:d2:
07:42:a0:04:58:f2:20:c7:74:03:7f:ec:6a:0c:f8:
ac:a8:7c:f2:72:96:1b:8d:54:29:fd:e7:0b:e0:2b:
79:2e:1a:62:b7:43:7f:dd:bd:0b:a9:9c:bf:c1:7a:
1b:50:23:bf:a0:be:57:ff:43:ab:87:11:73:6f:c6:
c0:42:2b:0e:26:a3:fd:7d:2e:7c:63:a4:dd:74:95:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C4:CF:AE:47:9E:0E:7E:07:69:94:D7:82:C4:B1:72:40:27:73:FD
X509v3 Authority Key Identifier:
keyid:52:FD:A2:20:23:9A:EB:DD:4A:B4:4C:7C:4F:C2:5E:CA:81:D0:15:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uv2iICOa691KtEx8T8JeyoHQFfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/j8TPrkeeDn4HaZTXgsSxckAnc_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/Uv2iICOa691KtEx8T8JeyoHQFfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.166.0/24
Signature Algorithm: sha256WithRSAEncryption
23:33:45:26:42:00:be:1c:40:02:4f:79:cc:85:89:87:f9:eb:
55:8c:09:ec:e2:15:d2:e7:5a:56:37:82:65:d8:52:b8:49:b5:
0f:d3:48:62:51:a3:d0:59:ca:01:f2:e9:57:0d:7d:f6:bb:89:
3b:98:5c:a0:67:2d:ab:8a:12:b0:66:9e:39:d8:12:32:ad:e0:
24:b6:d5:91:42:54:9a:a4:96:d0:53:9b:44:ac:78:c5:c4:32:
5e:a1:d5:36:ba:e4:ae:86:ee:53:05:6f:d8:4e:8d:1d:47:5e:
2a:b1:c9:be:b1:66:cb:ae:cb:ec:4f:41:c8:4b:e8:11:78:40:
8d:96:86:02:49:19:19:a7:c7:77:b3:ce:c6:c4:ea:e8:43:f8:
cd:30:b8:2d:95:d0:f1:4e:b7:29:95:a0:c9:fb:9e:55:f6:eb:
32:be:07:36:fb:02:38:5c:cb:f1:ea:bb:89:2d:e1:95:a2:70:
20:e4:2d:35:89:19:01:b2:09:aa:78:a5:97:92:2f:bf:bf:a4:
ef:5b:a0:b2:8e:19:90:71:b9:70:d3:7c:a0:d1:2c:a7:4c:8f:
c8:39:b9:93:3f:a2:59:23:53:84:30:e4:b4:3e:4d:48:61:20:
2c:f9:e3:a7:d1:f4:7a:4e:da:d4:f7:50:83:95:c7:ba:e3:50:
63:15:23:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:13 2025 by rpki-client