Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/8VLL_VMrjsIODLfsE5tbaD5XbV4.roa
File: 8VLL_VMrjsIODLfsE5tbaD5XbV4.roa (raw, json)
Hash identifier: ADEPga1aePWBW6RQpWWkkczcGmRD2eM88SyLl73M7GQ=
Subject key identifier: F1:52:CB:FD:53:2B:8E:C2:0E:0C:B7:EC:13:9B:5B:68:3E:57:6D:5E
Certificate issuer: /CN=e7dcdf80f30734bd2162a57c1354ae5b1e746ee6
Certificate serial: 018606233E704DEA376F9077B4308970252F
Authority key identifier: E7:DC:DF:80:F3:07:34:BD:21:62:A5:7C:13:54:AE:5B:1E:74:6E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59zfgPMHNL0hYqV8E1SuWx50buY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/8VLL_VMrjsIODLfsE5tbaD5XbV4.roa
Signing time: Tue 31 Jan 2023 04:43:38 +0000
ROA not before: Tue 31 Jan 2023 04:43:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196688
IP address blocks: 91.215.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:23:3e:70:4d:ea:37:6f:90:77:b4:30:89:70:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7dcdf80f30734bd2162a57c1354ae5b1e746ee6
Validity
Not Before: Jan 31 04:43:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f152cbfd532b8ec20e0cb7ec139b5b683e576d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:e9:a8:32:46:2a:b3:3c:ab:e8:42:02:bd:
75:26:64:ff:4c:20:33:1d:12:44:05:ad:8b:fb:f1:
ae:6f:a3:61:ec:9a:22:d2:d6:cc:9e:46:50:1b:b5:
b9:28:6e:9e:0a:3d:c7:f4:23:4f:d1:6c:ac:bc:bf:
0f:0e:0c:53:ed:f9:c4:b3:f2:55:80:27:bd:48:e6:
1c:0d:72:84:4e:3c:cb:86:ae:e7:c0:7f:08:1b:7f:
60:2b:5f:72:30:39:fb:60:a2:cf:9e:16:00:87:a2:
d3:81:09:4a:0a:56:72:9b:fa:de:f3:86:62:1c:14:
ee:f8:3f:14:b2:15:d7:3a:24:8f:f6:36:51:8f:f0:
64:70:3b:67:c2:4e:17:c2:d4:b7:b2:a3:a8:ca:d0:
63:f6:b5:2e:53:bd:cc:58:42:c8:8e:f0:1a:d6:72:
fa:4d:a0:f4:41:74:3d:b9:3d:31:15:49:45:86:23:
41:38:15:89:37:49:c8:ff:b1:51:0c:8c:e7:cd:25:
2b:02:b6:73:2c:d0:78:35:10:80:03:2a:a5:c7:62:
f4:73:d7:68:a0:48:5f:01:4f:0d:1f:d5:f3:ce:c9:
69:64:b6:67:ff:df:d7:24:01:d9:cb:21:6d:45:c0:
87:db:0e:75:5d:56:bd:37:3c:b2:c3:ef:b4:7e:1e:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:52:CB:FD:53:2B:8E:C2:0E:0C:B7:EC:13:9B:5B:68:3E:57:6D:5E
X509v3 Authority Key Identifier:
keyid:E7:DC:DF:80:F3:07:34:BD:21:62:A5:7C:13:54:AE:5B:1E:74:6E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59zfgPMHNL0hYqV8E1SuWx50buY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/8VLL_VMrjsIODLfsE5tbaD5XbV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/59zfgPMHNL0hYqV8E1SuWx50buY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.204.0/22
Signature Algorithm: sha256WithRSAEncryption
22:8e:97:16:d7:26:a6:67:10:d0:30:81:18:47:20:24:44:ad:
41:5c:03:2d:8e:22:39:66:ac:2b:31:69:ad:f4:93:0b:af:db:
20:b3:ed:53:5a:5e:c3:74:63:3d:c1:ac:d6:cf:b6:42:00:aa:
9f:b4:b8:46:0f:63:bf:8f:69:c5:4b:0d:52:3a:63:4c:93:f9:
e6:9a:04:aa:de:6e:fe:9f:39:51:42:bb:a3:b3:e2:b3:d5:42:
65:4d:23:f3:48:6f:6c:24:02:68:be:34:92:2e:c3:ab:94:7b:
e0:20:45:21:7d:59:9b:1f:a7:f1:04:63:9a:ee:6c:a2:4d:4a:
46:d3:64:91:06:db:34:d7:e0:d6:ba:32:b2:db:2d:f2:97:18:
5b:f8:d6:95:b7:c1:2a:7d:50:81:ac:74:1e:5e:fb:19:77:1d:
9c:a0:59:ac:a5:3f:be:c6:df:f0:56:6d:fd:e2:d0:58:e4:5e:
07:39:c6:d4:23:a9:54:80:6e:65:e4:62:2f:7e:29:da:99:2f:
75:62:7e:da:be:34:06:6d:34:46:23:df:86:40:ff:19:2f:df:
82:5c:37:93:1d:6a:46:b2:e4:65:52:41:74:83:57:43:51:80:
9c:b7:05:dd:48:11:9e:75:1e:0c:75:7d:55:0d:de:ad:9b:78:
ff:a2:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:15 2025 by rpki-client