Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/clebOlYme53FP6KNzHCtuu1lZs0.roa
File: clebOlYme53FP6KNzHCtuu1lZs0.roa (raw, json)
Hash identifier: oDlbf6+QAnLKqLzijrlr/cIcJMlkfwJ18lC8gJGC7dU=
Subject key identifier: 72:57:9B:3A:56:26:7B:9D:C5:3F:A2:8D:CC:70:AD:BA:ED:65:66:CD
Certificate issuer: /CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Certificate serial: 01856D7896CB6506DA4A062ACD5E8C711BB3
Authority key identifier: 8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/clebOlYme53FP6KNzHCtuu1lZs0.roa
Signing time: Sun 01 Jan 2023 13:14:57 +0000
ROA not before: Sun 01 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43180
IP address blocks: 91.213.175.0/24 maxlen: 24
91.237.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:96:cb:65:06:da:4a:06:2a:cd:5e:8c:71:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Validity
Not Before: Jan 1 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72579b3a56267b9dc53fa28dcc70adbaed6566cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:d6:cf:2c:4b:bd:18:cd:39:b6:60:2a:ff:
c0:79:53:e3:67:7a:96:be:80:10:71:49:14:61:a7:
a0:89:1d:73:16:0f:60:2d:9d:37:88:eb:c8:50:54:
34:fc:27:6e:b3:3d:c5:8b:a4:1f:55:ef:f1:4b:15:
51:65:81:bd:17:b4:2f:ca:9e:b9:03:38:0b:46:c3:
53:7b:b2:e1:a5:a9:13:85:6f:c1:a9:10:31:7c:61:
b2:da:69:98:c8:2e:7d:53:34:9c:dd:ec:67:da:b7:
53:41:d6:c8:1f:4b:34:6a:68:7d:d4:d1:c0:bb:5b:
1f:c1:2a:45:67:5a:03:2a:fb:26:25:bd:21:79:b8:
be:3f:f5:31:16:d8:80:f6:76:af:56:52:d9:6c:df:
e9:80:d8:68:a5:32:dc:bf:97:e6:09:72:e4:d4:95:
f2:6c:be:67:39:91:b1:5a:47:c5:68:2d:26:03:22:
88:97:fe:a6:6d:82:a6:3a:43:7b:39:eb:35:3d:10:
a7:d5:b1:f6:b1:48:dc:d5:3f:5c:31:d1:f6:6e:b2:
78:69:7a:32:4c:55:8c:e5:85:35:56:50:69:96:19:
36:c6:56:0d:ab:6a:5b:df:df:a2:5e:3a:1a:61:b9:
3c:e4:86:c2:3b:f2:5b:63:5c:06:66:46:15:89:92:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:9B:3A:56:26:7B:9D:C5:3F:A2:8D:CC:70:AD:BA:ED:65:66:CD
X509v3 Authority Key Identifier:
keyid:8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/clebOlYme53FP6KNzHCtuu1lZs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.175.0/24
91.237.250.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ca:5c:51:ce:c6:a1:66:53:2c:f7:2b:1b:0b:8c:e6:c6:c7:
13:14:91:f9:66:ed:33:67:cd:2a:24:a5:90:11:a0:8d:f2:b8:
fd:d1:22:fd:fb:fd:cb:53:15:3e:db:19:0c:89:92:ca:f1:5c:
4f:53:9e:9e:65:a8:a8:ac:9a:2a:6c:ac:c1:2d:a5:82:d2:89:
64:78:aa:d5:87:39:20:ba:36:06:5e:1d:f6:b5:3e:d8:5d:a0:
ff:4a:de:2a:10:29:5c:42:3d:6e:40:40:bf:50:0f:7b:af:e8:
09:da:5d:48:9d:d2:ea:df:36:18:12:5a:c2:cb:ce:e1:6f:3d:
12:0b:30:24:32:f4:9c:97:00:f4:be:50:b7:3f:92:3c:1f:8c:
f5:41:b2:27:fe:86:69:08:f5:2d:52:f9:f6:6b:d1:4e:35:9a:
fb:1d:a2:16:6d:b5:da:a9:d5:6f:c2:76:80:fd:3d:a2:da:11:
c9:3e:0e:06:3d:3d:66:63:32:3e:42:0e:d7:e2:bd:8b:d0:10:
d7:59:eb:d9:9a:85:d5:7b:fa:61:9e:7c:8e:83:61:10:c5:77:
b0:3c:0d:83:66:87:46:db:85:b7:3b:7e:dc:2c:8c:0f:54:84:
0f:51:cb:4e:af:bd:00:5e:41:43:e9:ba:3b:8d:c8:4b:cf:f0:
02:01:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:36:47 2025 by rpki-client