Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/1-UXHsX6LFv8ee68r1bF2rJCJweY.roa
File: 1-UXHsX6LFv8ee68r1bF2rJCJweY.roa (raw, json)
Hash identifier: Rght4BZE4VrdEq7YhAi9WQbaHXO9HsoVxpg5wBXl/jQ=
Subject key identifier: F9:45:C7:B1:7E:8B:16:FF:1E:7B:AF:2B:D5:B1:76:AC:90:89:C1:E6
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 018410A1FB45BC302672DA923DD337BC2A4D
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/1-UXHsX6LFv8ee68r1bF2rJCJweY.roa
Signing time: Tue 25 Oct 2022 19:32:41 +0000
ROA not before: Tue 25 Oct 2022 19:32:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 91.193.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:a1:fb:45:bc:30:26:72:da:92:3d:d3:37:bc:2a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Oct 25 19:32:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f945c7b17e8b16ff1e7baf2bd5b176ac9089c1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:b3:02:6d:76:89:b1:a1:3f:ab:c5:dc:67:
e9:8f:11:21:46:74:e0:34:f8:7c:3a:33:9c:54:cd:
13:2e:2a:9a:75:33:8e:ab:7d:bc:fd:c9:cc:c2:93:
25:82:fb:b7:6a:82:d1:b0:bb:9b:6b:0b:8a:7c:08:
6a:a7:1d:42:48:62:78:1b:04:3c:10:f2:bc:6f:e2:
b7:a1:05:65:77:88:50:29:3d:e4:50:ba:7d:c8:17:
da:f2:36:20:65:ea:9c:e9:e7:ba:77:d6:00:47:80:
61:e0:7d:7c:86:81:06:5b:4b:bc:26:d5:da:74:71:
1f:20:c4:96:19:41:dc:a3:b3:fc:f1:09:a3:8a:0a:
7e:94:63:70:7b:8f:76:57:7c:78:5e:05:39:40:5b:
ce:06:4a:c0:e7:6e:54:a4:2a:e7:c5:4d:8b:3b:00:
18:b5:bf:74:e2:ba:4f:08:88:98:fb:5c:53:1b:f0:
22:d8:7b:8a:13:70:44:94:96:91:75:f8:e4:09:05:
75:78:24:fa:b2:82:ee:5b:6c:86:bc:57:db:67:fc:
f0:0f:e7:85:b7:8c:40:0e:05:3a:6b:1e:79:ea:7c:
36:f8:a3:58:01:1a:71:36:20:bc:97:2e:a3:c3:7d:
ca:fe:7f:db:10:e8:74:6d:74:8a:df:07:f1:3c:85:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:C7:B1:7E:8B:16:FF:1E:7B:AF:2B:D5:B1:76:AC:90:89:C1:E6
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/1-UXHsX6LFv8ee68r1bF2rJCJweY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/24
Signature Algorithm: sha256WithRSAEncryption
72:27:c5:ec:d3:77:a1:20:65:fa:08:de:33:9e:c4:53:87:15:
87:33:aa:50:71:f0:d6:07:69:c1:83:82:97:48:cf:57:4d:c7:
22:07:10:7c:0b:8d:00:ce:7a:f1:0d:e2:40:af:54:7c:0d:2b:
71:37:18:10:60:5d:a2:e0:a4:2a:bc:35:6d:ef:bd:c7:a7:71:
22:9e:41:8d:bd:78:0e:db:29:46:1b:91:e7:4b:e5:a6:e8:48:
21:31:9a:06:39:42:63:03:fa:29:b1:91:72:97:b6:c9:98:ac:
ce:a6:fa:40:34:ca:6b:6c:d9:f6:ed:9a:3d:49:17:df:5b:2a:
30:21:f6:c4:08:19:2c:cc:e4:df:7f:b4:f2:09:9f:9a:76:43:
9f:92:c5:06:d6:51:d9:07:1b:b4:70:7e:fd:eb:f7:44:d2:48:
35:5d:1e:4c:ce:5e:cd:bc:26:ab:91:c0:ef:56:48:ee:fa:23:
a9:dd:d9:a6:ea:9d:45:24:3d:32:66:95:c2:bd:d1:44:66:3d:
2f:87:f0:6e:d1:92:a1:45:e5:f0:d9:01:44:9e:36:ce:99:eb:
a6:eb:e3:9c:8e:4d:fd:2c:00:2c:6c:2e:0b:9e:62:d4:b0:97:
b5:26:a8:2e:c2:f8:d3:b0:d8:de:e8:db:14:18:fa:89:39:08:
4c:b0:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:34 2025 by rpki-client