Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/zIlQMFuagbBjI_dKlyipVgVF3vA.roa
File: zIlQMFuagbBjI_dKlyipVgVF3vA.roa (raw, json)
Hash identifier: HLrBRlZ3PhiMQ+w71OhLlIDkdl6vmVkw1R0TmX934QI=
Subject key identifier: CC:89:50:30:5B:9A:81:B0:63:23:F7:4A:97:28:A9:56:05:45:DE:F0
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 082015DA
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/zIlQMFuagbBjI_dKlyipVgVF3vA.roa
Signing time: Sat 01 Jan 2022 03:52:26 +0000
ROA not before: Sat 01 Jan 2022 03:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7922
IP address blocks: 91.149.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136320474 (0x82015da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Jan 1 03:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc8950305b9a81b06323f74a9728a9560545def0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:f5:66:94:64:e3:1e:f0:d8:6b:65:52:d4:
7e:80:a8:d8:81:94:48:2e:f2:49:61:09:dc:07:05:
d7:49:43:b7:0c:b6:55:e3:8e:ec:c3:a7:c2:b1:6e:
9f:a0:ed:0d:58:ff:bb:1e:de:0e:c1:16:6b:f6:eb:
0b:03:e0:28:02:af:ca:10:9f:6f:60:2a:69:70:b6:
a9:40:bb:68:91:6a:06:69:28:64:d4:58:40:0a:ac:
25:0f:6f:bf:0b:4c:ca:f8:2f:26:50:15:cb:df:1e:
e1:d1:b6:39:af:d6:f5:65:36:65:b9:6b:12:71:4f:
26:26:7d:cf:e3:76:5f:c8:66:e9:a7:e1:56:fe:7e:
a1:8e:95:53:7a:e5:0f:06:10:00:88:c0:35:5a:a5:
5b:f3:27:a1:bd:4a:a9:8f:2d:77:ec:50:cd:2f:f9:
7a:a9:8d:12:14:82:46:c7:d6:19:c3:65:e4:75:a1:
0f:bd:3e:6b:cc:3d:ef:7e:c7:93:f5:06:ba:53:66:
ff:cc:f3:45:a3:42:29:99:46:cb:d9:de:87:d7:89:
6a:ea:97:cf:fd:18:c0:cf:a4:6e:b2:86:27:91:e5:
bd:c1:01:33:a6:df:f8:34:14:7f:be:4c:e9:2a:68:
07:c2:6b:f4:8d:82:5d:b3:e5:64:28:23:16:31:07:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:50:30:5B:9A:81:B0:63:23:F7:4A:97:28:A9:56:05:45:DE:F0
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/zIlQMFuagbBjI_dKlyipVgVF3vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:00:94:a1:72:40:0c:a8:06:f5:15:7a:85:fe:14:0e:c3:d4:
80:11:d1:4d:9d:1e:e2:6e:ba:66:c1:b1:d4:ba:33:8e:39:88:
ba:ff:08:98:8d:ac:77:23:15:87:c8:38:02:9b:ce:65:83:fa:
14:dd:64:5c:ad:a2:3d:98:3d:92:0d:3d:3b:ee:33:f0:8a:30:
cb:b6:23:62:3e:b5:af:93:d3:11:07:c7:e4:03:0b:c0:ed:28:
8c:5c:e7:b4:eb:f0:ae:39:d6:cd:26:4f:8f:57:1b:47:da:67:
8b:b6:d4:96:f5:57:d3:36:a4:24:8f:3b:26:08:a3:50:cd:44:
96:b2:07:8e:3f:8d:ce:b5:ea:6c:4b:23:5e:61:85:b2:e8:f4:
d3:51:0f:72:29:2d:14:80:bb:7d:93:81:32:5d:21:1a:59:f3:
cc:d6:d3:5b:71:2d:4f:7f:eb:a5:fa:8a:07:5a:ce:e1:1e:b3:
47:4e:47:2b:75:c8:2c:a6:58:c4:96:3a:77:b7:10:47:ca:b3:
e6:ac:6b:d8:a0:cb:72:e5:de:41:96:f7:6f:9a:41:40:3c:46:
53:c9:b8:d7:2d:e3:2a:63:78:02:bc:18:dc:d9:64:57:31:26:
d5:5e:ed:ed:61:92:aa:30:84:57:7a:27:4f:e4:99:fe:7f:1a:
fe:ae:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:52 2025 by rpki-client