Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ihVwn4j1TRW0vLyvmlBYLsE2gbk.roa
File: ihVwn4j1TRW0vLyvmlBYLsE2gbk.roa (raw, json)
Hash identifier: wh+mvu1qWFSqnO2k9smFMOa7jcWHBuIoYTowngww9X4=
Subject key identifier: 8A:15:70:9F:88:F5:4D:15:B4:BC:BC:AF:9A:50:58:2E:C1:36:81:B9
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018B80D04AEACCBB0F1F9012834481D1C6CC
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ihVwn4j1TRW0vLyvmlBYLsE2gbk.roa
Signing time: Mon 30 Oct 2023 13:40:16 +0000
ROA not before: Mon 30 Oct 2023 13:40:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 91.246.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:d0:4a:ea:cc:bb:0f:1f:90:12:83:44:81:d1:c6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Oct 30 13:40:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a15709f88f54d15b4bcbcaf9a50582ec13681b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:b0:96:d7:ef:38:e1:d7:fe:e4:b0:2f:53:
3e:31:4d:23:b0:a4:e5:f0:5d:fb:66:5e:88:82:bf:
33:bc:43:82:1e:f2:74:31:35:4f:c2:66:11:10:95:
cf:1c:cc:9a:df:98:9d:12:8f:39:05:4a:cf:a1:d3:
ba:1e:14:2f:e9:2a:61:77:3d:94:b1:09:b1:40:6e:
ef:ea:b7:77:e7:69:43:78:cc:40:cf:aa:e5:53:bc:
dd:99:ad:f2:5e:8a:11:f7:0f:d3:c8:60:c8:c5:34:
32:7e:23:9e:b1:1f:4d:93:11:24:8d:96:a5:a2:82:
a3:0a:fa:1d:ab:34:e6:48:9e:7d:d3:58:e0:a7:66:
75:5a:7b:d6:6d:6a:0e:4b:0b:f1:c9:35:2c:04:f3:
eb:6f:d1:07:a7:01:bd:00:87:53:64:0c:6e:69:32:
7a:e9:09:a6:d3:e2:2b:07:09:93:ee:13:7e:c8:c6:
87:b3:89:0b:e0:a1:cb:c0:a2:e5:2b:31:93:f5:e8:
5a:25:d1:eb:b7:c7:43:ea:e0:e9:ed:60:ed:2e:0a:
c3:81:e1:64:1c:52:fd:09:37:05:96:d5:dc:4e:6b:
85:cd:34:19:a0:fa:53:b3:bf:4c:3a:31:9a:d0:4f:
0b:38:52:e4:b1:c5:95:e1:2d:0f:c4:20:db:5b:96:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:15:70:9F:88:F5:4D:15:B4:BC:BC:AF:9A:50:58:2E:C1:36:81:B9
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ihVwn4j1TRW0vLyvmlBYLsE2gbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9a:27:e9:95:cd:78:3c:8c:7a:64:c3:08:01:d4:34:fb:7d:
e6:7c:57:41:8c:fe:11:d2:44:5e:b1:36:80:d4:91:a4:5d:c5:
21:cf:28:7d:ff:61:2a:6f:6d:af:c2:30:17:51:30:6b:80:2b:
64:1a:27:ba:0a:f6:6b:80:6e:0b:20:13:a5:2d:a0:cf:09:6d:
60:45:79:8c:f1:c5:cb:2c:a0:8c:19:87:ef:e9:0f:01:65:4d:
67:9a:07:c1:03:6a:57:21:a0:cd:3c:80:58:f1:8f:2d:f9:fd:
c0:0d:6a:aa:c9:ff:f1:1b:66:fc:ae:dd:a2:81:c2:01:28:64:
bc:99:9f:f9:74:6a:65:7c:39:69:30:fe:48:c7:34:57:74:d0:
18:f6:40:f4:9a:bb:63:85:d8:d6:29:d8:c0:cf:32:91:43:6b:
d8:82:36:1b:95:6a:60:b3:ea:67:b3:b4:1d:87:7a:48:f0:ad:
c3:46:73:11:6c:d1:a3:a1:18:a6:a9:c2:16:0c:76:9d:93:9b:
d4:f9:33:e7:7b:7b:ea:3a:6c:ee:71:0d:38:f6:ed:4a:cc:6a:
78:92:66:df:a3:99:62:6c:f6:47:3b:c4:75:59:94:d3:d2:83:
64:94:46:9e:f4:10:c7:ef:0d:5f:a2:42:f2:1a:ea:33:88:6c:
fd:ca:06:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:40 2025 by rpki-client