Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a380fb-dc03-4868-86b2-991b6e88f57a/1/g8dOf8YdTgMF3N3B9mtRD5HtigA.roa
File: g8dOf8YdTgMF3N3B9mtRD5HtigA.roa (raw, json)
Hash identifier: lMLL5wcYRnw0HlLlQ0lX3v5bNu4XfnUQYAPAB+hTjEI=
Subject key identifier: 83:C7:4E:7F:C6:1D:4E:03:05:DC:DD:C1:F6:6B:51:0F:91:ED:8A:00
Certificate issuer: /CN=a1aa2bd0b6f62239b125841f8200f8ba2dbe0c89
Certificate serial: 018ACF33DD30CC89ACA5570014064CF592B2
Authority key identifier: A1:AA:2B:D0:B6:F6:22:39:B1:25:84:1F:82:00:F8:BA:2D:BE:0C:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaor0Lb2IjmxJYQfggD4ui2-DIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a380fb-dc03-4868-86b2-991b6e88f57a/1/g8dOf8YdTgMF3N3B9mtRD5HtigA.roa
Signing time: Tue 26 Sep 2023 01:56:37 +0000
ROA not before: Tue 26 Sep 2023 01:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 91.247.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:33:dd:30:cc:89:ac:a5:57:00:14:06:4c:f5:92:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1aa2bd0b6f62239b125841f8200f8ba2dbe0c89
Validity
Not Before: Sep 26 01:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83c74e7fc61d4e0305dcddc1f66b510f91ed8a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:60:8b:22:7a:c7:d3:39:b3:19:bd:55:06:
14:77:7b:7a:d5:58:92:cf:9c:33:2f:29:53:6b:c9:
2a:ce:1c:d8:16:a4:f4:8e:df:c4:ae:83:5e:b7:8a:
6a:bf:6a:72:84:8d:3b:0c:60:2a:ea:a8:f6:fb:c7:
44:a0:05:8a:c5:53:62:ec:3b:10:c8:8c:73:bd:81:
db:fb:c0:bb:c6:94:5b:40:b7:f6:1a:a4:a5:1a:32:
8f:90:8f:32:e9:c7:88:09:83:cd:9d:31:5a:4b:bb:
12:68:be:ac:56:d4:62:68:ae:76:b1:f9:cc:88:fc:
27:c5:07:e2:75:36:01:e1:5e:d7:14:74:54:fe:07:
54:22:47:7d:83:eb:8f:88:9d:83:ce:40:05:13:4f:
48:c2:03:0a:b0:af:48:a5:ab:3b:c2:e6:ab:b2:7b:
ae:c3:f4:89:4b:34:35:0f:66:ad:78:3d:6e:32:6c:
6d:75:e3:91:7f:a9:a0:b9:c6:e0:e9:c9:26:52:b9:
1b:9d:f6:97:64:62:c0:38:d1:49:21:c3:d5:2d:21:
ec:92:4e:c6:10:7e:1d:58:bb:12:c1:f5:5d:ca:6b:
c3:68:62:da:eb:f2:fb:2f:7a:dc:35:b3:46:04:b0:
f3:17:3c:b9:81:10:a9:0c:ff:ed:4b:5d:a8:bb:1b:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:4E:7F:C6:1D:4E:03:05:DC:DD:C1:F6:6B:51:0F:91:ED:8A:00
X509v3 Authority Key Identifier:
keyid:A1:AA:2B:D0:B6:F6:22:39:B1:25:84:1F:82:00:F8:BA:2D:BE:0C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaor0Lb2IjmxJYQfggD4ui2-DIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a380fb-dc03-4868-86b2-991b6e88f57a/1/g8dOf8YdTgMF3N3B9mtRD5HtigA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a380fb-dc03-4868-86b2-991b6e88f57a/1/oaor0Lb2IjmxJYQfggD4ui2-DIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.190.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9a:fe:d5:93:1f:49:21:6c:bd:fc:85:dc:21:c6:41:23:15:
8a:bb:b9:36:95:6a:7d:dc:08:9b:26:c9:f7:cd:e7:e0:f5:c5:
2c:5b:db:9d:99:81:99:2a:88:39:0a:d7:77:2e:91:49:7b:62:
87:04:e4:07:92:d1:f6:9a:21:11:2c:77:ea:74:95:10:c6:a8:
0b:c5:7c:d4:3e:c5:7a:00:50:69:e7:a8:d0:3e:5f:54:81:2d:
bd:d7:c4:82:0c:60:67:75:de:70:62:6e:59:88:8c:1f:73:f1:
32:98:67:3b:67:29:dc:56:67:0b:8d:3a:57:ed:34:5d:fb:a6:
f0:c0:7f:04:9e:01:b3:81:49:25:f0:bf:90:4c:51:ed:27:b3:
16:88:7e:52:ac:f5:7b:12:2d:55:da:c1:9d:a8:1c:0b:6f:06:
e4:08:89:bd:ca:e7:91:cc:e8:62:9a:1c:60:0c:44:7e:0a:8a:
67:ae:b2:2d:a3:eb:7b:da:a5:f1:1d:80:31:83:aa:cb:ab:40:
ed:8e:fa:e0:e8:6c:ba:97:6e:ac:46:dd:85:b3:24:09:94:69:
ae:c9:70:ca:3c:29:1b:16:44:f0:a1:66:ce:c1:6e:d3:0b:50:
df:25:96:ba:ff:ec:23:cd:13:9a:0c:99:d9:79:44:38:6d:e6:
2c:2e:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:35 2025 by rpki-client