Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/datlk6UzYMBgyF1Pa6kvLKNH91A.roa
File: datlk6UzYMBgyF1Pa6kvLKNH91A.roa (raw, json)
Hash identifier: gMDbhQ0THpj9og9fGQ1qSWSgwJrczqlxm0ayaAk56x4=
Subject key identifier: 75:AB:65:93:A5:33:60:C0:60:C8:5D:4F:6B:A9:2F:2C:A3:47:F7:50
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01857169AABC36FD3409A6D2DBB7696B24BD
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/datlk6UzYMBgyF1Pa6kvLKNH91A.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 87.238.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:aa:bc:36:fd:34:09:a6:d2:db:b7:69:6b:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75ab6593a53360c060c85d4f6ba92f2ca347f750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:0b:1c:65:18:5e:c8:ef:7f:62:fc:1a:ba:
f9:6c:02:b0:2c:1e:b4:d5:b1:7a:ca:e6:94:39:2d:
65:82:dd:fb:ca:3c:02:dc:80:92:70:56:ad:76:2e:
e3:a7:00:4d:aa:30:8f:02:e4:da:2f:61:e3:96:61:
cc:a3:62:f4:4a:4c:31:79:8a:df:c8:1e:90:c8:cb:
61:10:59:82:00:fe:ef:e7:29:91:4f:e9:e0:cc:17:
45:71:0e:2f:c2:f0:df:cd:09:0f:25:7f:5e:f0:8c:
ea:3b:43:2c:e9:23:f6:04:de:49:7d:af:20:f9:50:
73:05:04:bd:9b:a3:8b:13:44:5a:74:4c:9d:25:57:
d3:a2:1f:36:05:21:6f:88:8d:27:c9:89:b6:01:f3:
f7:d6:24:90:5c:db:fe:ec:2c:e9:fe:b7:7e:c9:a2:
4e:57:d1:9f:34:1f:d2:af:ba:da:e1:2c:2b:84:bc:
93:b3:40:c3:fc:fe:5e:65:0e:5c:9d:1e:3d:34:99:
a4:b3:d2:09:0c:e4:1b:2f:15:51:e6:26:af:de:85:
97:ed:f3:6a:6b:fe:da:5c:52:4d:28:ab:cf:c9:38:
08:34:35:bb:81:3a:11:d7:90:35:9e:ec:a1:fc:7d:
3d:b7:94:b7:86:78:6a:15:5f:4d:9a:3f:e9:1e:f2:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:65:93:A5:33:60:C0:60:C8:5D:4F:6B:A9:2F:2C:A3:47:F7:50
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/datlk6UzYMBgyF1Pa6kvLKNH91A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:2b:65:59:1f:2b:c7:fe:91:7b:b9:fa:54:ab:cc:ba:55:6f:
fc:0a:72:91:90:71:bf:1b:19:7a:e2:90:d3:13:1b:7a:06:fc:
6f:4f:12:9b:34:6e:dd:9a:b7:4b:ed:7b:ed:d6:23:03:e9:80:
80:40:fc:10:48:5a:53:93:63:e9:0e:b8:81:b5:4f:e5:06:13:
ec:b7:0e:c5:cd:68:ac:71:2d:e9:b3:0e:cd:3e:f9:58:65:fc:
62:a0:78:d3:cc:5a:ad:db:8c:ec:2c:88:e2:e5:72:3e:e9:56:
ca:15:a9:24:d8:e2:e5:f0:18:2a:0a:a9:d5:dc:85:62:0f:68:
24:22:7f:03:9d:3d:f4:c1:93:f5:90:db:12:c6:83:23:58:51:
19:98:11:1d:36:86:98:77:63:a1:97:1c:ca:5b:aa:54:71:88:
6d:fc:23:bf:f5:19:b2:7c:64:56:db:3c:df:b2:6f:fc:b5:32:
ed:2d:16:58:08:69:5c:01:cc:39:f3:d7:0b:a4:06:4f:e6:90:
d1:d1:1c:a5:e8:0d:81:62:00:d8:5f:b7:e9:76:ad:ac:6b:2b:
38:da:06:cb:24:8e:88:61:bc:7c:6b:9b:a2:6e:67:ad:62:4d:
5c:99:05:28:87:fb:0d:e2:9a:c4:07:e2:27:46:e5:8a:53:c1:
93:10:d0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:09 2025 by rpki-client