Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/K47vel1x-9kuhdlAUc-EOZX43Lc.roa
File: K47vel1x-9kuhdlAUc-EOZX43Lc.roa (raw, json)
Hash identifier: WDkmYLQR5LabXwicZq95iA9ClBfWsAWV3/omV/pCsZI=
Subject key identifier: 2B:8E:EF:7A:5D:71:FB:D9:2E:85:D9:40:51:CF:84:39:95:F8:DC:B7
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018586AFBA89477C6A8F08A6B783B3C438CD
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/K47vel1x-9kuhdlAUc-EOZX43Lc.roa
Signing time: Fri 06 Jan 2023 10:45:41 +0000
ROA not before: Fri 06 Jan 2023 10:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:af:ba:89:47:7c:6a:8f:08:a6:b7:83:b3:c4:38:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Jan 6 10:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b8eef7a5d71fbd92e85d94051cf843995f8dcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:61:0d:89:6e:68:d7:d2:48:87:15:f2:4a:
17:be:42:df:b0:75:9c:f0:6f:ed:b2:40:d9:fd:7f:
4e:5f:95:dc:22:08:b6:c5:7d:6b:d9:56:27:55:ac:
39:02:9f:59:c2:2c:40:56:69:cb:7c:d8:89:fc:7d:
81:1d:06:e3:52:da:60:5d:99:d9:00:42:7d:9d:fb:
43:5d:3a:5d:b7:ae:32:7f:83:6f:51:11:fe:39:9d:
ae:fd:26:e7:9d:5f:0e:65:db:e2:26:9e:3b:8a:59:
d2:59:3b:1b:ee:2c:38:3f:eb:79:cd:e3:9d:e9:21:
55:d4:b8:c0:c2:ad:83:d9:cb:92:d4:cf:d4:61:52:
b2:ce:97:ec:6d:53:d7:c0:16:b9:76:83:90:74:0b:
2e:18:35:bb:53:20:fe:6b:2e:52:14:dd:93:6e:d8:
5b:c1:4c:cb:d4:28:08:dc:96:b4:07:39:47:a6:1f:
09:b3:d5:7e:d2:cf:7d:be:0d:0b:d1:66:be:b6:ce:
8b:ba:0f:07:76:e8:71:49:1e:f4:7f:5f:0a:f5:87:
47:af:ee:40:25:66:85:bb:78:6d:78:cc:a0:61:77:
40:32:1e:35:0d:d8:8f:06:79:f0:f9:79:e9:39:8e:
83:60:7c:60:fb:df:f6:58:0f:f2:d3:2d:fa:a3:13:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:EF:7A:5D:71:FB:D9:2E:85:D9:40:51:CF:84:39:95:F8:DC:B7
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/K47vel1x-9kuhdlAUc-EOZX43Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
43:6a:1d:20:c6:a1:2c:06:3a:27:d5:f5:a4:27:e2:f7:90:89:
62:7b:68:e5:e6:61:63:92:fb:47:81:dd:d6:9c:de:b0:c6:b6:
82:c7:71:ed:a3:b5:74:9b:89:7d:d9:9b:54:17:99:f7:6d:c0:
ad:91:b2:91:36:79:2a:8b:c1:e9:06:aa:1c:78:59:57:72:df:
32:73:20:95:0a:4e:eb:e4:c9:2a:a2:c6:76:6a:72:02:14:ef:
89:4a:91:58:ba:ee:71:a1:3d:15:2b:e0:fb:c0:a0:00:b8:5c:
cb:5c:77:1a:bf:cc:00:74:bc:94:46:d6:30:70:a0:5f:cd:6c:
af:cc:59:c4:65:19:fa:39:da:fb:0c:34:cd:ea:01:05:5d:17:
cc:a4:5c:a0:f6:1f:5c:10:7d:bf:d6:86:83:77:71:05:ba:93:
3a:4f:8f:9c:e2:2d:fb:a4:52:81:84:25:36:68:11:6c:2d:fd:
d8:37:9e:25:a2:2a:46:a3:5d:7e:f0:21:8a:f5:63:ca:27:7a:
45:d5:cf:bd:4f:ac:29:c3:0d:62:f9:47:72:3a:c4:47:7c:f8:
7e:4f:cb:60:45:3b:28:b7:10:8b:98:ee:a2:94:2c:ba:0d:4e:
e3:9d:e6:03:35:41:57:cc:53:42:e3:e8:b0:7a:ae:7e:0b:55:
02:f2:97:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:49 2025 by rpki-client