Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/vlR8nKaATk_z_r9H0ES_iscFHs4.roa
File: vlR8nKaATk_z_r9H0ES_iscFHs4.roa (raw, json)
Hash identifier: ED9K9xqYedBzpjELbl6txrapano9jZMXiYBkMZragcs=
Subject key identifier: BE:54:7C:9C:A6:80:4E:4F:F3:FE:BF:47:D0:44:BF:8A:C7:05:1E:CE
Certificate issuer: /CN=22fa1c7ae2e69de5769c3969b0b0f8f525b5ab05
Certificate serial: 018CC94E5693FD63A2C2F4A51869B8BD1920
Authority key identifier: 22:FA:1C:7A:E2:E6:9D:E5:76:9C:39:69:B0:B0:F8:F5:25:B5:AB:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvoceuLmneV2nDlpsLD49SW1qwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/vlR8nKaATk_z_r9H0ES_iscFHs4.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 91.239.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:56:93:fd:63:a2:c2:f4:a5:18:69:b8:bd:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fa1c7ae2e69de5769c3969b0b0f8f525b5ab05
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be547c9ca6804e4ff3febf47d044bf8ac7051ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:1d:5f:d8:52:42:00:79:41:f8:81:b1:19:
d6:c3:e7:47:87:dd:2b:3f:9a:d9:cf:08:97:fd:06:
33:c0:dd:26:34:da:b6:c5:f8:50:01:59:03:c3:68:
d7:5a:e4:60:8a:78:a5:59:6d:30:4b:f3:d5:7a:db:
b6:e8:bd:96:8a:c4:df:99:d4:af:70:83:be:58:49:
68:59:04:5a:bd:fa:b9:28:7b:1e:4c:e6:24:0b:61:
4b:1d:ad:ea:71:2a:35:5d:8a:53:95:c9:8d:d9:0f:
0e:8d:c3:18:f1:60:dd:b1:33:78:d5:9b:5e:5c:44:
3c:b7:87:c5:d2:0c:ab:06:84:75:b0:f0:bf:64:d1:
bc:1d:cb:9e:15:a2:01:fc:10:fa:8b:41:ad:3c:c0:
71:e5:f3:4c:17:04:17:1b:b4:d9:3d:ff:8f:a0:6e:
58:4e:16:01:68:52:36:ad:e4:a9:2c:97:6c:62:61:
4c:c8:d3:32:99:f8:ab:57:d9:ce:68:ef:5b:de:8e:
b4:71:1e:b3:80:1e:39:54:ad:42:3c:c8:21:90:bb:
f8:f8:10:30:93:af:40:1e:e3:14:ba:9b:01:24:31:
04:53:39:34:55:0f:6c:9b:b4:14:a6:96:95:31:2f:
c4:51:7b:3b:8c:2c:a5:cd:39:b3:41:3d:f6:35:60:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:7C:9C:A6:80:4E:4F:F3:FE:BF:47:D0:44:BF:8A:C7:05:1E:CE
X509v3 Authority Key Identifier:
keyid:22:FA:1C:7A:E2:E6:9D:E5:76:9C:39:69:B0:B0:F8:F5:25:B5:AB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvoceuLmneV2nDlpsLD49SW1qwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/vlR8nKaATk_z_r9H0ES_iscFHs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.212.0/24
Signature Algorithm: sha256WithRSAEncryption
14:57:f6:30:b3:f6:b9:3e:c8:f7:8f:fa:d8:3e:4f:44:8e:d4:
ff:05:06:eb:14:a6:80:c6:24:04:b9:10:eb:cf:04:f4:df:5b:
bb:93:f6:01:a8:af:ce:4b:43:46:2f:52:fa:6e:81:c4:eb:2b:
c2:7e:2f:62:40:2f:d3:dc:0f:c2:87:06:27:02:f8:61:11:58:
28:c5:53:4d:71:72:3c:7b:b1:23:6e:20:12:d0:06:4d:c8:1c:
a2:18:f6:24:29:73:0a:14:26:49:99:d4:52:0e:fe:91:3c:95:
7f:98:65:ad:23:5c:89:73:25:a2:7f:5f:00:ed:5b:d6:04:d1:
de:c8:7a:fe:37:53:a3:83:c0:86:42:16:95:53:89:5b:c1:a3:
58:50:bf:7e:72:cf:0a:27:7a:c7:93:7c:cd:a5:47:e7:18:7a:
43:d0:a4:9a:7a:1c:10:ed:4a:6f:09:73:e6:cd:dd:3b:52:f1:
f5:22:2b:85:a5:6a:53:a6:23:c1:16:68:95:79:cb:67:29:b6:
79:67:5c:77:aa:c5:a9:04:cb:8e:8e:6a:d6:c1:fc:8b:f4:fa:
82:3b:38:e3:f1:b2:4c:85:c1:c8:62:f3:b4:29:dc:57:40:dc:
19:a8:6f:51:8a:99:52:7c:b4:ec:2a:6c:43:d6:50:ca:aa:7a:
dc:c1:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:36 2025 by rpki-client