Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/8wJ2W09R7tfmg_jL9ddNJTlqLqo.roa
File: 8wJ2W09R7tfmg_jL9ddNJTlqLqo.roa (raw, json)
Hash identifier: 2k6bNouWGg8pYRgRKPyGaONYQYEhVoRdMb8XTmApSgg=
Subject key identifier: F3:02:76:5B:4F:51:EE:D7:E6:83:F8:CB:F5:D7:4D:25:39:6A:2E:AA
Certificate issuer: /CN=711b4f3aa45dc4ec336d62e9a7e89d79b3efcab0
Certificate serial: 01856EAFA3D732774C85E2BD6D79A5C30FC3
Authority key identifier: 71:1B:4F:3A:A4:5D:C4:EC:33:6D:62:E9:A7:E8:9D:79:B3:EF:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRtPOqRdxOwzbWLpp-idebPvyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/8wJ2W09R7tfmg_jL9ddNJTlqLqo.roa
Signing time: Sun 01 Jan 2023 18:54:42 +0000
ROA not before: Sun 01 Jan 2023 18:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202470
IP address blocks: 91.238.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:a3:d7:32:77:4c:85:e2:bd:6d:79:a5:c3:0f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711b4f3aa45dc4ec336d62e9a7e89d79b3efcab0
Validity
Not Before: Jan 1 18:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f302765b4f51eed7e683f8cbf5d74d25396a2eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:2b:cb:16:c4:2d:d5:4e:e6:3b:e0:6f:3f:
42:98:2c:f1:6b:c4:1d:69:0f:ce:b4:b8:66:d1:f7:
af:70:6d:4c:ad:1a:d4:8f:b8:ca:b8:ce:56:5f:d9:
a6:4c:aa:ad:b3:e3:6c:62:fc:4f:5c:79:5a:b3:03:
4e:dd:81:7b:8e:63:86:ab:3d:06:9a:7d:c4:e3:d2:
23:d1:af:d9:42:8a:87:01:44:10:13:34:96:9e:5d:
8e:6d:e5:fb:ee:6a:de:64:42:ba:d7:c6:6a:39:28:
eb:d5:7f:8f:1b:df:63:4c:e5:56:b0:d9:8c:54:71:
b1:56:0f:ca:23:91:c2:2d:ff:2f:a9:67:b7:95:04:
9a:06:98:78:6c:0f:11:e2:34:13:df:a5:1a:8f:08:
1b:77:29:72:3a:2d:ce:f6:25:08:55:b9:5a:f7:db:
e9:77:ed:6b:e2:20:58:a6:bd:fe:ff:3d:d8:1e:5f:
1d:b0:30:f4:88:72:7e:f1:14:3f:50:c3:7b:82:7d:
6e:27:de:90:69:8b:16:ed:bf:2d:78:a3:8e:0a:bf:
ee:98:3e:8e:96:68:56:8b:b4:39:5b:82:09:0f:e1:
c5:81:a0:ac:23:e0:7e:eb:eb:89:dc:d0:f2:0b:7e:
98:46:9e:30:94:36:6e:e8:d7:51:6a:4c:99:1d:5e:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:76:5B:4F:51:EE:D7:E6:83:F8:CB:F5:D7:4D:25:39:6A:2E:AA
X509v3 Authority Key Identifier:
keyid:71:1B:4F:3A:A4:5D:C4:EC:33:6D:62:E9:A7:E8:9D:79:B3:EF:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRtPOqRdxOwzbWLpp-idebPvyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/8wJ2W09R7tfmg_jL9ddNJTlqLqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/cRtPOqRdxOwzbWLpp-idebPvyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.123.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ad:1d:48:dc:f0:18:db:ba:fc:cd:6e:e6:a4:50:ca:5f:2d:
bf:35:d1:02:09:38:2b:d7:d8:41:3d:f6:2d:75:52:00:6e:73:
36:8b:a1:0f:5a:70:a6:f4:b8:d6:c6:8e:e2:8f:45:6b:8b:2f:
54:ab:9c:af:e2:05:79:31:11:b1:79:d4:ad:cd:ed:d0:0a:58:
30:4c:89:82:da:2c:37:1c:89:14:2f:35:4f:99:f1:27:2b:98:
7c:14:64:04:69:50:e9:e6:93:b5:e9:0d:cd:af:4d:3f:20:f8:
44:4a:3a:47:86:27:05:9a:3d:62:07:45:44:8a:73:8a:d1:01:
60:fb:e9:29:9a:a6:1b:47:cd:fd:f8:ec:63:47:82:9d:57:35:
6a:67:f7:bd:ac:18:b7:32:2c:60:9a:41:54:df:67:4b:d5:c6:
d0:0c:ef:30:7f:9a:a4:55:4a:27:99:fe:9a:df:7c:01:24:99:
8f:0d:2b:94:59:dd:c6:bf:dc:10:3f:68:43:95:28:0b:f8:26:
57:8f:58:a5:85:26:8e:85:ae:cb:bf:4e:6d:df:36:e8:37:9c:
8c:cf:9e:c6:0b:51:9b:db:e6:8d:62:e2:7f:3c:32:64:cd:40:
97:85:d8:c1:06:de:ea:89:18:8f:ad:59:29:2a:45:e7:72:ee:
47:f4:eb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:35 2025 by rpki-client