Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/7laOcEKE593obtr7DBi8ddxOENU.roa
File: 7laOcEKE593obtr7DBi8ddxOENU.roa (raw, json)
Hash identifier: JptQgH+a2V1n9RF6xeswU3K/2VxEMdzbXcsU9NRy1zE=
Subject key identifier: EE:56:8E:70:42:84:E7:DD:E8:6E:DA:FB:0C:18:BC:75:DC:4E:10:D5
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 01877BC5EC8F2BE2EAE5788798E7DBC84D51
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/7laOcEKE593obtr7DBi8ddxOENU.roa
Signing time: Thu 13 Apr 2023 17:59:41 +0000
ROA not before: Thu 13 Apr 2023 17:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 91.232.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:c5:ec:8f:2b:e2:ea:e5:78:87:98:e7:db:c8:4d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Apr 13 17:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee568e704284e7dde86edafb0c18bc75dc4e10d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:fd:bc:0f:04:76:95:f0:65:53:8f:80:2b:
a6:ec:30:24:1c:8e:5d:46:61:d7:04:f1:48:6a:98:
b7:79:db:28:e9:d9:27:a6:6b:bc:5f:35:45:4a:97:
20:09:02:5b:9b:41:28:e9:13:01:db:6d:7a:94:9b:
a9:19:08:fb:a2:9c:3a:f8:23:1b:9d:d5:3d:6c:4a:
d7:fe:e2:2f:b4:82:33:a9:53:48:71:5e:53:ce:4e:
d1:60:1a:5e:cc:5e:cb:8a:ee:64:70:10:91:42:85:
7b:0d:53:f4:6d:22:25:bb:67:da:dc:d9:b3:98:e4:
28:e9:dc:de:bf:96:ba:b5:26:22:f8:30:97:c0:64:
76:33:6c:fb:e9:84:e0:34:f7:0f:54:32:16:34:07:
34:31:ad:43:ed:80:84:88:57:47:4c:ff:e6:18:a2:
fc:ca:67:bc:02:85:c4:6a:78:a6:20:ee:e7:6e:03:
f9:32:b0:17:43:c2:6d:28:fe:bf:40:88:48:ec:00:
95:b1:53:e1:5b:c4:c5:d6:90:74:ad:c9:55:94:52:
28:4d:28:0e:be:c8:1d:59:bf:50:18:a4:a8:73:75:
7e:eb:83:d0:9e:b8:ac:25:50:59:45:fc:1b:d9:4b:
da:78:45:75:2d:ab:f7:fe:3e:47:42:73:a1:92:f5:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:56:8E:70:42:84:E7:DD:E8:6E:DA:FB:0C:18:BC:75:DC:4E:10:D5
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/7laOcEKE593obtr7DBi8ddxOENU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8f:35:42:88:88:70:76:9c:4f:9b:f9:61:17:f2:1d:5e:dc:
5d:aa:80:e5:4b:36:25:c5:ac:aa:aa:75:a2:20:8f:75:d1:a0:
e1:06:97:d4:c2:57:b1:39:61:3d:b8:69:f1:a9:d9:b6:c8:cc:
d3:54:6b:e6:17:d6:42:08:4e:99:c9:b4:ae:7f:9d:69:cd:30:
76:62:32:5e:06:3d:5e:2d:fa:7f:3c:c3:eb:8e:de:c3:4c:4a:
55:34:74:c6:ce:18:74:f5:9d:71:98:47:3e:77:af:ae:ef:b7:
98:a8:16:4a:46:c1:54:7f:9d:e1:fb:b1:c9:55:09:76:00:5d:
cf:9d:00:c0:c0:38:52:d7:4c:59:c0:d5:58:3f:92:96:87:af:
89:ad:69:a9:99:a2:5e:ce:85:01:a5:9f:ee:db:fb:b2:32:3e:
fe:e7:e1:0c:e7:c3:51:2a:a7:6b:64:73:83:32:fa:01:d7:b5:
b7:32:2f:8f:b0:dd:22:61:24:1e:a1:7e:bf:dd:c4:53:86:f8:
d5:4d:23:d3:9d:a7:33:6a:64:75:a3:77:3e:c7:08:83:c5:fa:
e9:f4:b2:12:33:76:ba:e2:4f:f4:27:9c:56:57:0f:2d:59:18:
2e:a6:19:9b:eb:4f:df:30:96:bf:45:4d:5a:8b:79:3b:e4:9c:
5a:12:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:36 2025 by rpki-client