Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bb6001-402e-43b7-b794-c6150b8f2489/1/NBiU0ogUlKQkFfWGC7slWiVXAZc.roa
File: NBiU0ogUlKQkFfWGC7slWiVXAZc.roa (raw, json)
Hash identifier: rcKGIMXUad4vg4nF75Zgaha4mgaHhE5MghFdT+qkToY=
Subject key identifier: 34:18:94:D2:88:14:94:A4:24:15:F5:86:0B:BB:25:5A:25:57:01:97
Certificate issuer: /CN=619429d3c447e4301a9a411440aa9a164f0cba47
Certificate serial: 0752331C
Authority key identifier: 61:94:29:D3:C4:47:E4:30:1A:9A:41:14:40:AA:9A:16:4F:0C:BA:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZQp08RH5DAamkEUQKqaFk8Mukc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bb6001-402e-43b7-b794-c6150b8f2489/1/NBiU0ogUlKQkFfWGC7slWiVXAZc.roa
Signing time: Sat 01 Jan 2022 02:56:50 +0000
ROA not before: Sat 01 Jan 2022 02:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43414
IP address blocks: 91.198.170.0/23 maxlen: 23
91.199.184.0/23 maxlen: 23
2a0f:8f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122827548 (0x752331c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619429d3c447e4301a9a411440aa9a164f0cba47
Validity
Not Before: Jan 1 02:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=341894d2881494a42415f5860bbb255a25570197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:65:d1:09:8a:08:09:04:39:fa:0f:07:a2:
46:d2:ca:44:c8:71:82:86:b5:be:03:92:50:8e:ea:
f0:0f:18:c5:ec:5f:98:71:7f:72:c8:e9:ee:4e:9f:
51:4c:5c:28:96:db:e6:a3:9c:74:54:61:f4:19:5b:
c9:d2:ae:a8:3b:36:cd:1d:51:86:0b:05:04:fe:49:
9a:1b:dc:a8:8d:e6:21:f9:66:03:38:ba:31:e4:17:
28:b3:3a:69:e5:fc:fa:68:e9:86:6e:61:e5:e1:45:
71:9b:e6:97:9b:0e:62:49:37:8a:cb:a2:bb:82:ff:
18:93:4e:8c:96:e9:8b:1a:2d:63:00:b3:02:de:90:
e7:a2:3d:eb:10:9e:9e:70:fe:81:82:20:6d:71:9c:
67:93:f1:86:0a:18:74:c6:41:3a:a4:6f:83:e2:d0:
ca:57:33:40:97:b3:98:3c:a0:37:7b:fb:61:e5:b5:
57:44:b2:3c:0f:54:50:92:98:49:48:03:d5:2d:89:
92:da:e9:19:80:92:d8:45:fd:79:a5:18:70:05:c9:
1d:2d:19:75:b5:a6:6d:4c:84:a3:1d:92:13:cb:60:
5c:74:d8:d5:7a:f7:1d:b5:d8:79:2c:73:aa:46:c3:
2b:e8:ad:3c:28:ff:9e:70:83:92:7b:3b:37:f8:30:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:94:D2:88:14:94:A4:24:15:F5:86:0B:BB:25:5A:25:57:01:97
X509v3 Authority Key Identifier:
keyid:61:94:29:D3:C4:47:E4:30:1A:9A:41:14:40:AA:9A:16:4F:0C:BA:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZQp08RH5DAamkEUQKqaFk8Mukc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bb6001-402e-43b7-b794-c6150b8f2489/1/NBiU0ogUlKQkFfWGC7slWiVXAZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bb6001-402e-43b7-b794-c6150b8f2489/1/YZQp08RH5DAamkEUQKqaFk8Mukc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.170.0/23
91.199.184.0/23
IPv6:
2a0f:8f80::/29
Signature Algorithm: sha256WithRSAEncryption
17:17:97:1c:4c:b2:7c:c0:e4:a7:06:4c:7d:e3:f7:da:a6:12:
c4:05:b9:d6:f8:0d:f3:4e:f3:93:49:fa:28:44:1f:61:b7:4f:
8d:12:5d:7c:9f:bf:fc:20:4f:a0:56:3c:8b:4d:49:58:2c:f3:
55:14:8b:54:a9:a3:97:63:c8:29:92:d1:fa:c8:cf:36:2f:ab:
97:ae:37:56:a7:b5:fd:4e:1a:a1:5e:2e:a0:2e:cb:06:c0:f2:
65:e0:60:8c:fa:42:05:b6:9a:d5:f5:c0:57:b3:f7:45:e4:08:
c6:46:c6:31:d7:06:71:78:ab:2b:ae:59:fe:bd:f6:db:04:ae:
25:23:ce:6b:e6:d1:67:8c:a1:20:68:63:57:df:ea:9c:14:96:
6c:ab:dc:87:0e:56:c6:9d:c7:a8:76:9a:79:98:23:c3:3d:e6:
43:1e:98:66:be:83:f1:9f:e9:61:46:16:71:75:a9:53:52:b2:
e0:6a:26:ec:fd:40:4d:9f:c4:e0:b8:8a:8e:bd:39:ea:f8:30:
87:ba:e0:4e:e9:eb:90:78:97:c9:81:0c:a0:1e:d2:12:07:c0:
60:41:e0:d6:bc:a1:89:c3:f3:95:1f:a7:54:8f:c1:eb:3c:9d:
07:cb:d7:09:69:9e:f6:38:88:2f:b6:51:3c:b3:8f:5a:84:42:
68:fe:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:54 2025 by rpki-client