Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/24ed14-4e41-4ec5-b068-1747232a6890/1/f8Yxl5Ud3MPLX7UiDkB7P8cybZk.roa
File: f8Yxl5Ud3MPLX7UiDkB7P8cybZk.roa (raw, json)
Hash identifier: Dsa52l7uLFxAj/PsdRU7fjcmUGCBvGsjOcVrRE3Os3s=
Subject key identifier: 7F:C6:31:97:95:1D:DC:C3:CB:5F:B5:22:0E:40:7B:3F:C7:32:6D:99
Certificate issuer: /CN=83f55d03350064c10216c3f0119a027ec389ff7f
Certificate serial: 01857039660AE384E74B1B156674A2EAB641
Authority key identifier: 83:F5:5D:03:35:00:64:C1:02:16:C3:F0:11:9A:02:7E:C3:89:FF:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_VdAzUAZMECFsPwEZoCfsOJ_38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/24ed14-4e41-4ec5-b068-1747232a6890/1/f8Yxl5Ud3MPLX7UiDkB7P8cybZk.roa
Signing time: Mon 02 Jan 2023 02:04:47 +0000
ROA not before: Mon 02 Jan 2023 02:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 91.190.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:66:0a:e3:84:e7:4b:1b:15:66:74:a2:ea:b6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f55d03350064c10216c3f0119a027ec389ff7f
Validity
Not Before: Jan 2 02:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc63197951ddcc3cb5fb5220e407b3fc7326d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:d2:b7:57:2f:98:ac:fc:0e:0b:75:21:bc:
60:97:ef:43:73:0b:09:f2:89:99:d8:5b:af:75:15:
a0:10:3f:89:8b:41:45:e1:7f:e3:48:78:65:e9:47:
03:e1:6c:47:f8:00:7e:95:5b:89:29:ac:74:bf:98:
13:b7:f1:3c:f1:84:3e:aa:16:ca:25:9b:72:e2:88:
dd:c4:3c:2d:41:59:c6:39:d7:4e:4c:9e:9d:41:0f:
e8:3b:67:d4:cb:56:04:7e:26:7e:ec:a3:e2:14:42:
a2:d7:4e:0f:37:24:39:69:e3:9c:35:f1:69:58:2a:
7e:cd:62:b9:b4:13:f8:20:3f:9b:5a:1a:8c:78:f9:
5f:4f:b4:0e:9f:52:0b:14:c8:6c:35:d2:0a:7a:5f:
06:3a:d0:c3:b1:30:88:40:88:97:9e:70:56:8d:14:
f3:d8:bd:ed:18:b7:64:6b:86:e9:4e:32:76:30:1c:
f4:f1:da:7d:09:39:7a:e3:aa:a2:45:ee:ce:9c:7f:
db:69:95:a8:1c:01:01:86:40:4b:4d:d6:cc:9d:c4:
ba:07:de:7e:8b:60:2e:ff:fa:68:d0:8f:15:db:4f:
c6:37:0e:e6:02:4e:e1:e6:11:ec:6b:32:a3:19:ef:
85:85:45:37:38:78:a9:2e:ec:66:48:a4:72:2d:22:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:31:97:95:1D:DC:C3:CB:5F:B5:22:0E:40:7B:3F:C7:32:6D:99
X509v3 Authority Key Identifier:
keyid:83:F5:5D:03:35:00:64:C1:02:16:C3:F0:11:9A:02:7E:C3:89:FF:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_VdAzUAZMECFsPwEZoCfsOJ_38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/24ed14-4e41-4ec5-b068-1747232a6890/1/f8Yxl5Ud3MPLX7UiDkB7P8cybZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/24ed14-4e41-4ec5-b068-1747232a6890/1/g_VdAzUAZMECFsPwEZoCfsOJ_38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.155.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2d:16:87:b0:6f:4e:74:3d:d9:d2:3a:77:8f:e2:ae:2a:f0:
84:2c:34:bf:a8:3e:45:80:62:29:82:9a:0b:ae:90:c7:e2:a3:
fe:6d:53:05:d4:e1:a5:9d:b4:a7:70:ab:80:98:ac:34:3c:7c:
ca:a5:d4:e6:ea:9d:c3:5f:cb:78:52:6e:76:92:db:4e:24:40:
dd:ee:39:a0:66:b0:e8:0f:f0:a6:64:06:91:b7:b2:fe:09:1e:
28:e0:b9:f6:b4:e7:77:40:fe:ef:b3:1f:3d:08:53:99:f2:1a:
ab:6b:ef:d8:25:8a:86:49:76:be:5d:43:df:48:e9:76:43:4c:
a0:eb:9a:bb:a6:d0:58:60:86:a6:86:19:ff:21:8f:69:a0:3e:
37:07:3b:c7:71:fe:58:39:88:bb:85:cf:b8:d8:4d:9c:89:dc:
d7:eb:24:1d:d0:9f:77:0f:0c:a8:4a:26:6e:88:e3:ce:cf:27:
da:96:b1:b3:a2:eb:d0:d2:16:38:13:cd:a7:9b:f2:ff:48:57:
d4:3f:9c:d0:a5:9e:ef:eb:06:36:5a:c8:dd:81:b4:0e:79:db:
18:58:2e:2e:9b:d7:24:03:4a:f6:bd:c6:d3:c1:e5:b8:e9:7c:
81:94:a4:58:02:96:37:18:d6:67:92:77:93:f7:dc:41:54:c4:
4a:a2:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:04 2025 by rpki-client