Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/i6KKj8_ALTYk48cinPzbteL_OSw.roa
File: i6KKj8_ALTYk48cinPzbteL_OSw.roa (raw, json)
Hash identifier: xTvjtiaHh+ru4Av2LAbD4RDJ3BZKR0UN3qj2lN/gS/8=
Subject key identifier: 8B:A2:8A:8F:CF:C0:2D:36:24:E3:C7:22:9C:FC:DB:B5:E2:FF:39:2C
Certificate issuer: /CN=29a79f3c68bff45d216032f99272908f4eb8ec60
Certificate serial: 01882086B00D602EAC3125FE8887D00070EE
Authority key identifier: 29:A7:9F:3C:68:BF:F4:5D:21:60:32:F9:92:72:90:8F:4E:B8:EC:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaefPGi_9F0hYDL5knKQj0647GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/i6KKj8_ALTYk48cinPzbteL_OSw.roa
Signing time: Mon 15 May 2023 17:47:57 +0000
ROA not before: Mon 15 May 2023 17:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 91.246.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b0:0d:60:2e:ac:31:25:fe:88:87:d0:00:70:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a79f3c68bff45d216032f99272908f4eb8ec60
Validity
Not Before: May 15 17:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba28a8fcfc02d3624e3c7229cfcdbb5e2ff392c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:09:56:5d:78:15:3a:57:f0:56:61:24:e1:
6a:f8:c0:aa:e9:46:fa:f8:bc:56:9d:65:db:69:4e:
e8:e3:15:0a:db:94:e8:61:de:61:8a:93:20:15:9b:
75:18:86:a6:3a:ed:96:d5:af:b7:87:0b:37:a2:4c:
fd:a5:aa:0f:ab:ea:bb:36:d0:a4:0f:e9:53:04:7c:
53:48:f0:58:b7:b6:0c:cc:a4:c9:6e:97:da:40:b3:
7f:1f:8d:b1:71:a4:dc:6f:96:8e:3b:05:0c:85:76:
3a:ef:d0:47:4e:3c:dc:bd:4f:c9:d9:6d:8f:9a:f2:
85:79:aa:27:8d:f8:c5:30:00:77:98:af:91:b8:46:
23:5d:11:70:25:af:bd:94:8d:29:a2:16:cd:29:a9:
e6:65:f4:a6:e5:d1:09:2a:4c:c7:c7:5a:50:62:30:
e6:9a:32:09:a2:9e:2c:4d:63:b2:01:b7:43:f1:34:
68:23:10:a5:c3:b2:e7:26:f5:4e:1c:30:d3:7f:b8:
4f:6f:82:5f:8e:b6:7f:c0:31:83:73:6b:05:db:f3:
a3:4c:e7:e3:69:4f:8c:b8:d4:04:66:e9:4e:b6:12:
f6:c1:82:c2:73:6e:5d:4c:a4:fb:f9:b9:31:df:72:
6a:a3:f6:93:33:47:7a:57:7a:19:14:7a:bf:a5:2e:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:8A:8F:CF:C0:2D:36:24:E3:C7:22:9C:FC:DB:B5:E2:FF:39:2C
X509v3 Authority Key Identifier:
keyid:29:A7:9F:3C:68:BF:F4:5D:21:60:32:F9:92:72:90:8F:4E:B8:EC:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaefPGi_9F0hYDL5knKQj0647GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/i6KKj8_ALTYk48cinPzbteL_OSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/KaefPGi_9F0hYDL5knKQj0647GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.57.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3d:a3:b8:4b:a8:3f:ad:62:a2:60:c9:6c:97:89:6d:0b:a9:
da:cb:a1:b2:aa:d6:c9:18:de:c7:3e:53:a2:89:47:93:b6:59:
a1:b9:a9:53:99:89:3f:ff:d3:8e:0c:14:6e:84:72:06:09:4d:
2c:df:c1:41:0f:e2:b9:d1:b1:99:a9:3f:ce:73:c4:92:c6:79:
26:bb:a6:55:75:ff:39:47:23:73:48:25:fb:06:30:ff:37:f8:
c6:15:40:1f:9e:92:25:3f:37:62:ec:7e:38:b5:bf:a6:72:2b:
96:3b:b4:b6:31:1f:b2:3b:c6:a4:ba:9c:bd:a5:69:5e:c6:f7:
50:53:94:a2:82:73:1c:1c:7d:91:4e:a0:9e:b5:8a:40:1e:0a:
8b:c6:0e:53:d8:6d:4e:4b:b9:42:96:ca:9d:06:b4:41:7f:40:
f4:80:12:69:39:4f:51:a0:60:3c:eb:b9:c8:13:e1:bb:cc:61:
e0:8b:de:bc:d6:4a:a2:3e:59:06:c0:19:7e:1b:5b:94:59:8b:
51:13:dd:ee:ad:21:de:dd:6e:d7:a4:c5:d0:4a:10:6c:93:6b:
7a:5e:0e:93:f5:47:3f:e2:84:4b:98:a0:d6:22:0f:2c:10:38:
e2:c8:96:79:85:8c:07:52:e5:56:1b:74:31:d6:c5:a9:87:fe:
37:29:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:04 2025 by rpki-client