Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/Tifi5fG_RCIlXLsNDa_JDeyJJ-g.roa
File: Tifi5fG_RCIlXLsNDa_JDeyJJ-g.roa (raw, json)
Hash identifier: 8KbstjDP3Rqhhwh+jFE1XCMiqW1w5iwX/1zCXzaTn1c=
Subject key identifier: 4E:27:E2:E5:F1:BF:44:22:25:5C:BB:0D:0D:AF:C9:0D:EC:89:27:E8
Certificate issuer: /CN=29998b0e2dbbda028e4c3fd6a7cb67c78a302e79
Certificate serial: 0183B364F68E76837D6082E22F0DE1C794A7
Authority key identifier: 29:99:8B:0E:2D:BB:DA:02:8E:4C:3F:D6:A7:CB:67:C7:8A:30:2E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZmLDi272gKOTD_Wp8tnx4owLnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/Tifi5fG_RCIlXLsNDa_JDeyJJ-g.roa
Signing time: Fri 07 Oct 2022 17:01:21 +0000
ROA not before: Fri 07 Oct 2022 17:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202470
IP address blocks: 91.242.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:64:f6:8e:76:83:7d:60:82:e2:2f:0d:e1:c7:94:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29998b0e2dbbda028e4c3fd6a7cb67c78a302e79
Validity
Not Before: Oct 7 17:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e27e2e5f1bf4422255cbb0d0dafc90dec8927e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:11:63:c2:55:4a:b0:b4:6d:79:74:b5:f4:
a2:49:2c:d0:c5:9c:3c:c5:14:23:7f:33:5e:47:af:
92:3d:91:b0:37:af:c8:49:a9:d5:98:f3:95:ad:31:
44:eb:0f:e3:1f:30:d3:c7:15:bd:c0:71:10:ac:26:
a1:9a:d0:70:c6:e0:f4:4a:40:89:e7:d0:c4:a5:78:
1f:54:26:02:d1:40:2e:28:3e:88:2c:72:ce:ce:b2:
50:20:e0:15:42:6a:18:c0:19:b7:b3:68:13:3d:87:
8f:b9:c5:91:b8:c6:c3:2e:3e:a8:c2:28:31:1b:e2:
ee:17:b1:52:76:ec:e3:c9:82:0a:2c:8f:94:f8:6a:
93:59:0b:cd:54:70:cf:a8:7a:1a:cd:73:39:98:50:
74:6a:28:58:f8:c9:f8:1e:2b:2f:25:18:1c:59:1e:
97:85:31:67:55:ba:a6:7a:5e:24:18:39:c9:ac:30:
d4:54:fa:43:17:58:6f:fb:4b:be:bd:a7:44:6d:27:
94:78:3d:ff:67:a7:a1:a6:fb:66:28:95:bc:e3:8c:
2f:7d:2d:6d:d8:b1:c1:1f:05:ec:93:03:41:bd:52:
b9:17:36:0e:a5:83:be:46:cf:36:21:dd:c7:e9:16:
c5:4e:7a:61:89:87:90:b7:60:6c:78:88:2c:86:93:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:27:E2:E5:F1:BF:44:22:25:5C:BB:0D:0D:AF:C9:0D:EC:89:27:E8
X509v3 Authority Key Identifier:
keyid:29:99:8B:0E:2D:BB:DA:02:8E:4C:3F:D6:A7:CB:67:C7:8A:30:2E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZmLDi272gKOTD_Wp8tnx4owLnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/Tifi5fG_RCIlXLsNDa_JDeyJJ-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/KZmLDi272gKOTD_Wp8tnx4owLnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.231.0/24
Signature Algorithm: sha256WithRSAEncryption
16:74:39:32:32:74:9a:4d:fd:5e:1f:dd:86:92:42:75:d9:1d:
c8:40:a2:58:fa:e4:37:25:a6:39:d3:e5:e1:00:da:c8:6f:f3:
17:9e:f7:c6:9f:78:8e:63:6a:85:42:16:7d:ae:cf:d3:25:dd:
f6:d9:e0:71:62:49:36:0c:80:d0:ad:e7:3a:2a:79:65:c0:32:
37:b0:fb:db:73:a7:9e:fc:65:f2:69:04:ac:60:bb:b0:0d:6f:
a4:31:ac:31:7b:f0:6e:27:cf:2c:40:ff:1e:d5:ba:88:e5:88:
56:4e:c3:3d:63:4e:ab:f5:1c:19:e9:d5:9e:23:e3:63:54:f6:
fc:fd:44:c3:95:ec:32:67:c6:7f:1b:14:be:c5:10:0d:25:d0:
c6:31:33:7c:75:c5:9a:f8:76:b5:95:91:f0:71:06:33:d2:ed:
ca:80:40:cb:7c:11:f4:f9:fc:eb:e9:49:82:85:80:ef:d8:ec:
59:29:44:c4:62:1e:8d:30:ed:73:1c:bf:9f:d4:4c:9e:7d:46:
47:1c:92:44:e2:49:2a:c4:f9:83:7f:19:17:6d:d4:18:4c:23:
3c:fe:82:00:d0:32:7b:97:61:37:a7:4a:cb:82:57:05:dd:3b:
1d:6e:ef:c2:c4:8c:29:61:03:d5:35:66:76:fc:ba:5e:5c:ca:
97:38:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:07 2025 by rpki-client