Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/L-ODfRgIsG7JK6sN64DFTzaGcmA.roa
File: L-ODfRgIsG7JK6sN64DFTzaGcmA.roa (raw, json)
Hash identifier: 6xX9n9NydzjzwGfVjlppGit+Hbwm61f795LYyM8IT4E=
Subject key identifier: 2F:E3:83:7D:18:08:B0:6E:C9:2B:AB:0D:EB:80:C5:4F:36:86:72:60
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 428D510E
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/L-ODfRgIsG7JK6sN64DFTzaGcmA.roa
Signing time: Tue 19 Apr 2022 11:56:56 +0000
ROA not before: Tue 19 Apr 2022 11:56:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 86.106.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116557582 (0x428d510e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 19 11:56:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fe3837d1808b06ec92bab0deb80c54f36867260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:49:32:98:67:50:75:a4:d1:33:0f:30:19:
81:88:10:b2:f2:1a:73:7a:76:63:9c:d2:17:bc:69:
7f:92:66:52:7e:62:b2:f6:a0:dd:fb:1e:b2:c0:ed:
31:7c:e8:f5:94:8a:d0:9a:b7:59:38:ce:18:69:60:
4c:6a:e6:63:e9:a4:a5:e0:c4:ef:48:8a:71:4d:5b:
0b:f8:44:49:c0:aa:58:83:50:c2:46:95:6c:06:7f:
ec:dc:eb:3b:96:b8:08:34:63:9e:ec:39:43:2d:1b:
7d:99:89:08:c9:53:45:1c:cc:bd:0d:ee:d1:03:d4:
8b:9b:fb:61:5e:e0:24:75:7e:56:ef:26:57:a0:f9:
a6:d0:c1:1e:3e:19:8d:b5:8c:b4:21:e8:57:99:f5:
5a:92:2f:74:42:65:35:21:82:cf:43:9f:57:a5:b1:
8b:b1:9c:78:be:a8:9f:9d:9e:c3:cb:4b:85:14:ab:
3e:a5:d6:4e:d6:01:dc:a6:e5:36:10:fe:48:b9:26:
74:d2:d6:bd:cc:67:2c:52:ea:5e:06:6c:ab:2b:ac:
6b:d1:0e:03:16:14:09:b0:4e:7a:f2:12:41:4f:fb:
1a:08:0f:33:5a:8a:32:34:3e:02:a2:6f:9d:e4:d1:
8b:0f:d8:5b:ad:6b:df:28:dc:08:68:6a:68:0c:6e:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:83:7D:18:08:B0:6E:C9:2B:AB:0D:EB:80:C5:4F:36:86:72:60
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/L-ODfRgIsG7JK6sN64DFTzaGcmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.113.0/24
Signature Algorithm: sha256WithRSAEncryption
72:44:57:6b:d2:10:f9:76:18:bf:9c:5d:9c:4a:d3:d3:63:8d:
9e:5f:bf:79:4c:43:55:af:02:03:ea:5c:10:60:fa:66:98:55:
df:58:d3:f5:74:7b:61:b4:f0:36:90:d1:c3:22:7b:d4:41:63:
ee:26:03:12:42:dd:79:66:f7:7c:c3:8c:45:90:41:6d:69:a9:
32:d1:f7:fb:6e:7d:b2:f0:ea:89:02:e6:a3:80:b2:a0:13:6c:
5f:d9:b5:aa:67:58:00:1d:5b:2c:f4:df:6e:7f:0b:11:35:83:
36:9b:a1:56:67:9d:9b:27:4e:5b:2d:ec:e6:a5:7d:81:cf:5d:
08:c2:d1:4c:89:50:ec:99:3f:2e:64:88:6f:ca:17:0f:64:9a:
2f:a1:cd:94:3c:0c:8c:da:ef:e2:75:4e:73:2c:fd:ee:cc:ae:
4e:f5:39:03:68:90:f7:64:13:ee:59:d8:51:87:17:ef:b2:09:
88:c1:89:e9:b7:ec:ea:64:e5:d2:30:3a:3b:30:92:d5:27:3e:
74:74:00:3d:a0:da:0d:e3:f0:4d:6d:de:62:a4:72:5c:96:94:
91:76:2f:ff:12:ad:4c:48:5d:7f:23:73:c0:61:e9:be:b6:e7:
0b:e8:77:72:78:7d:f4:38:1b:32:f4:1c:c5:98:d2:28:9a:21:
6d:af:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:58 2025 by rpki-client