Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/BYJkQrhPgfAEGhwGn3bCY6uP2ec.roa
File: BYJkQrhPgfAEGhwGn3bCY6uP2ec.roa (raw, json)
Hash identifier: BNx8YvumQhDSKJxWTcopaNHaEwnkt2J5P43opd1eq58=
Subject key identifier: 05:82:64:42:B8:4F:81:F0:04:1A:1C:06:9F:76:C2:63:AB:8F:D9:E7
Certificate issuer: /CN=92b9279622a0cd7d58aa2ba436fbe3f20b17eb3d
Certificate serial: 018849972E8BAF581A6E83135BCFF3E0599D
Authority key identifier: 92:B9:27:96:22:A0:CD:7D:58:AA:2B:A4:36:FB:E3:F2:0B:17:EB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krknliKgzX1YqiukNvvj8gsX6z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/BYJkQrhPgfAEGhwGn3bCY6uP2ec.roa
Signing time: Tue 23 May 2023 17:10:24 +0000
ROA not before: Tue 23 May 2023 17:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209428
IP address blocks: 91.206.229.0/24 maxlen: 24
2a09:5ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:97:2e:8b:af:58:1a:6e:83:13:5b:cf:f3:e0:59:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b9279622a0cd7d58aa2ba436fbe3f20b17eb3d
Validity
Not Before: May 23 17:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05826442b84f81f0041a1c069f76c263ab8fd9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:b1:81:23:2c:92:06:8f:24:b7:ef:27:41:
e4:18:cb:1a:66:ed:f6:1a:44:d0:ae:74:17:eb:b8:
8a:20:17:bb:27:66:3e:dc:44:c5:7a:ad:c7:43:92:
61:a8:19:e1:4e:ac:81:82:03:9a:f1:ef:54:d9:37:
c4:6d:fa:d6:07:85:8f:1a:92:1e:f1:a4:19:2b:f2:
05:df:60:89:40:78:c6:90:28:a5:73:69:36:f5:43:
cc:5b:ca:34:44:18:e6:6d:c2:67:2b:fb:82:04:77:
70:3e:4f:26:1c:07:87:cd:68:07:e7:22:d8:3b:9c:
89:49:92:7e:50:27:08:28:e7:cd:65:d2:01:cd:0d:
8b:c9:4f:06:a3:17:1d:84:d6:2e:30:8a:46:4d:2a:
eb:65:e0:b4:e3:0f:5d:0e:d6:b3:71:b0:a3:61:61:
22:ba:24:a4:6b:61:44:ef:38:40:b4:df:59:b8:94:
08:e5:d0:01:f4:b2:69:9c:95:0f:8a:fe:13:e6:28:
71:54:0f:8f:3d:a1:46:2b:ac:af:45:f9:e0:db:ad:
6c:56:86:b0:01:6b:0c:17:00:de:23:bd:cc:14:44:
d6:32:15:3d:de:ac:e1:42:72:2b:dd:62:17:96:ea:
7b:01:a0:05:68:c8:36:97:f8:68:90:14:d8:95:af:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:64:42:B8:4F:81:F0:04:1A:1C:06:9F:76:C2:63:AB:8F:D9:E7
X509v3 Authority Key Identifier:
keyid:92:B9:27:96:22:A0:CD:7D:58:AA:2B:A4:36:FB:E3:F2:0B:17:EB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krknliKgzX1YqiukNvvj8gsX6z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/BYJkQrhPgfAEGhwGn3bCY6uP2ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.229.0/24
IPv6:
2a09:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:b5:29:fb:6f:c5:22:9c:77:33:30:e8:80:bf:4e:6c:d8:23:
91:0d:2e:4a:cb:fd:e2:d4:a9:95:a7:de:66:7f:14:4d:3b:cc:
d2:19:a0:8a:88:48:78:87:b0:fc:57:cc:65:c6:95:a0:6b:a4:
b6:b2:ad:3e:25:04:8f:ee:8f:1d:66:49:66:32:51:9a:05:ac:
45:22:a0:ba:04:33:82:58:a1:26:10:48:41:a7:28:82:14:74:
92:b0:ee:b4:69:8e:86:3c:3d:dc:5c:ef:db:d5:f1:f8:a5:cd:
2d:1f:3c:26:4f:fb:8e:25:d4:ea:c8:45:01:f7:5a:a7:b3:3b:
a3:84:10:dd:a3:ce:46:14:3a:b6:7a:52:4e:09:c7:27:07:7f:
87:bf:36:ab:18:50:63:0f:90:85:78:ff:65:ca:fa:95:aa:f7:
17:eb:71:2c:a5:d4:96:9d:ff:b2:a3:cf:c8:f6:03:11:bc:d9:
2c:83:5a:6d:e3:fd:55:c4:a5:68:cd:92:59:38:94:ae:d7:8a:
41:25:8b:e3:b6:4e:a8:89:36:26:69:c1:cd:5b:31:b0:4e:12:
a0:73:70:c7:7c:9e:9d:c2:4f:33:b0:52:a3:c2:3d:ee:76:96:
da:62:93:55:0b:e2:32:78:e3:b8:55:4f:51:5f:c0:42:22:4b:
44:cd:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:05 2025 by rpki-client