Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4RqOSEqq6LU96QcJNrpcbcIPDzE.roa
File: 4RqOSEqq6LU96QcJNrpcbcIPDzE.roa (raw, json)
Hash identifier: QyOrOlxNGALVr0qoTde03vJidV3TE4/YZpz0KKdl+kE=
Subject key identifier: E1:1A:8E:48:4A:AA:E8:B5:3D:E9:07:09:36:BA:5C:6D:C2:0F:0F:31
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 99214E
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4RqOSEqq6LU96QcJNrpcbcIPDzE.roa
Signing time: Thu 24 Mar 2022 07:16:57 +0000
ROA not before: Thu 24 Mar 2022 07:16:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 91.231.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10035534 (0x99214e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Mar 24 07:16:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e11a8e484aaae8b53de9070936ba5c6dc20f0f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:c7:ef:53:8f:ba:51:d0:b0:93:84:af:22:
8c:d0:09:5c:ee:48:0b:0a:7a:45:7a:aa:bb:3b:a5:
1c:e5:1f:ea:ea:bc:3b:f7:f3:d1:6d:67:6b:a2:ae:
5c:a6:38:82:da:f3:96:67:57:e1:2f:07:05:c3:b5:
fe:8a:9c:2f:f0:d5:8d:3c:5c:18:20:0a:4c:5c:be:
30:7b:e8:fd:8c:d3:65:7c:84:26:4a:e4:81:35:5f:
24:77:fb:c0:6e:29:54:fb:1e:bb:ad:99:2e:55:d5:
01:3c:40:e9:0f:38:cb:59:57:88:8a:c0:61:fd:09:
67:46:8f:6c:bf:b4:66:84:80:75:8b:a8:c8:b9:54:
f7:f1:e8:3b:d9:3e:16:ef:b1:28:83:de:73:b5:e1:
c5:7d:5e:6f:a3:1b:66:de:00:f3:ad:39:8a:53:cb:
a8:26:9f:4d:79:53:6e:fd:db:6d:de:bb:12:d1:a9:
d2:28:b0:e7:66:ec:de:c8:25:4b:a1:a8:4d:81:52:
55:01:08:be:8a:98:b5:81:3e:16:e1:45:5e:fb:9c:
5b:e7:ba:30:df:6c:5d:b7:44:1c:7d:97:8f:f2:a1:
1e:ce:d0:c5:20:d4:30:36:cb:f0:e2:d9:ee:0e:12:
5c:df:c0:86:7d:00:c8:b2:66:f7:70:94:59:eb:7b:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1A:8E:48:4A:AA:E8:B5:3D:E9:07:09:36:BA:5C:6D:C2:0F:0F:31
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4RqOSEqq6LU96QcJNrpcbcIPDzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b4:ff:ec:68:b7:72:3b:b3:5f:67:84:75:0a:30:21:2f:b2:
74:e9:d4:c8:11:73:db:2e:e2:b3:9d:4c:f3:fc:42:11:b9:e0:
4c:c3:3b:b4:7e:50:ac:ce:c8:1d:ab:98:fc:15:fd:c7:b2:07:
bf:40:df:10:d4:79:5b:a8:84:8d:56:2d:a5:65:f3:3b:db:3c:
bc:f4:52:f7:42:e5:cf:14:c2:5f:de:83:20:8a:12:ba:d5:5e:
d8:b1:ac:0c:4c:f6:ba:88:30:89:1b:cf:07:3a:e7:a8:23:71:
e5:87:46:37:f4:e6:34:e2:1e:b9:15:7d:ad:0b:2e:b9:bc:f2:
69:a1:db:c7:32:dd:0c:5b:01:bc:24:2e:e7:82:83:66:7d:5f:
89:6a:41:64:8e:98:58:c9:8d:dc:71:56:c6:59:8b:a4:6b:b8:
01:23:d4:2b:21:f6:d3:f6:13:55:51:f6:81:1e:fa:ad:42:bb:
44:7f:6d:67:3d:68:c0:ab:95:c8:1e:f6:3b:9d:68:bc:15:66:
26:ed:a1:bf:c2:c5:d1:5f:be:4d:7c:ab:0f:e1:54:62:e8:f2:
9e:07:94:01:48:b9:d6:76:b7:55:4c:df:82:2e:5f:4e:f8:79:
55:33:03:ab:ed:fa:97:a8:4e:7d:0b:62:a3:28:e6:e2:a3:a6:
d4:9a:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:07 2025 by rpki-client