Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/dba9b0-4523-4c0d-8bb4-a646b34c1ee7/1/DhQJcBhY5O3QxkFrtP_IkNo_5uk.roa
File: DhQJcBhY5O3QxkFrtP_IkNo_5uk.roa (raw, json)
Hash identifier: p2/YSSL+RgGuc2zppuZFvwGIhE5xhg1lFUyunfH7/3c=
Subject key identifier: 0E:14:09:70:18:58:E4:ED:D0:C6:41:6B:B4:FF:C8:90:DA:3F:E6:E9
Certificate issuer: /CN=e94d8d5234bfaba392e37eaa1c5d87ea5fb682d3
Certificate serial: 0447830D
Authority key identifier: E9:4D:8D:52:34:BF:AB:A3:92:E3:7E:AA:1C:5D:87:EA:5F:B6:82:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6U2NUjS_q6OS436qHF2H6l-2gtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/dba9b0-4523-4c0d-8bb4-a646b34c1ee7/1/DhQJcBhY5O3QxkFrtP_IkNo_5uk.roa
Signing time: Sat 01 Jan 2022 07:01:21 +0000
ROA not before: Sat 01 Jan 2022 07:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51450
IP address blocks: 91.217.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71795469 (0x447830d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94d8d5234bfaba392e37eaa1c5d87ea5fb682d3
Validity
Not Before: Jan 1 07:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e1409701858e4edd0c6416bb4ffc890da3fe6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:3c:60:05:29:3f:e8:f2:d8:5c:b8:6a:a4:
62:9c:c4:49:f7:3d:21:88:df:06:1f:99:f4:dc:2d:
6f:0d:f7:19:d4:35:8f:ef:5f:c3:55:ad:0f:9d:1a:
7a:46:a9:49:ad:c1:8a:57:0d:a8:4c:77:e8:8e:6b:
79:56:26:0e:d0:4c:60:37:b4:0f:15:b1:cb:f8:43:
e2:42:e4:1e:6c:97:45:0e:97:4c:d9:ab:eb:f2:94:
70:29:90:fc:b6:7a:c2:dd:71:93:7d:1d:ee:7c:1a:
b2:ee:75:c7:af:30:b3:a9:63:ca:8b:79:5c:19:f5:
dc:9e:0b:37:ae:a4:6a:c1:c4:98:9b:74:cb:db:75:
31:de:ad:54:0a:84:f3:64:3e:91:6e:99:72:df:25:
13:d1:ee:b8:90:71:d0:b9:9e:7f:34:37:a4:22:7f:
d2:23:49:29:b1:1e:88:00:9c:41:a8:a6:47:da:c0:
8f:c2:56:a7:e7:80:4d:18:d1:a0:08:f2:7a:6e:1c:
92:d1:f9:28:04:1f:08:4c:b0:ee:8b:6d:8d:2e:e6:
b7:58:0b:8b:34:e1:40:aa:5a:fa:4b:f2:ce:ec:79:
8b:a5:d9:9f:e1:18:d3:0c:a0:5f:49:c4:9a:55:44:
1c:67:c5:ea:7e:99:96:9e:3e:0d:62:c4:54:93:9d:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:14:09:70:18:58:E4:ED:D0:C6:41:6B:B4:FF:C8:90:DA:3F:E6:E9
X509v3 Authority Key Identifier:
keyid:E9:4D:8D:52:34:BF:AB:A3:92:E3:7E:AA:1C:5D:87:EA:5F:B6:82:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6U2NUjS_q6OS436qHF2H6l-2gtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/dba9b0-4523-4c0d-8bb4-a646b34c1ee7/1/DhQJcBhY5O3QxkFrtP_IkNo_5uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/dba9b0-4523-4c0d-8bb4-a646b34c1ee7/1/6U2NUjS_q6OS436qHF2H6l-2gtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.170.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d0:96:73:d1:68:20:2d:5f:a7:09:17:c2:33:28:f6:c3:61:
7e:8c:b8:74:fb:40:ab:9c:68:78:da:73:af:a3:fc:13:be:aa:
be:09:d5:16:0e:cb:aa:ad:09:dd:c4:b0:4e:14:63:16:ff:de:
ff:63:a1:a9:6d:c2:9b:99:83:21:2f:f8:ac:46:85:49:6f:97:
29:b4:7b:b9:fd:33:16:fb:b9:1f:51:3d:9f:2f:03:c7:51:3a:
3c:34:31:9b:35:99:06:a6:95:3a:79:3b:9f:8f:f8:c3:6f:f6:
84:bd:29:a5:83:0e:5b:6f:ae:3b:94:13:50:1e:87:12:6d:63:
7f:fc:65:c9:89:64:a5:5d:a7:5a:32:f8:da:86:08:17:3a:c2:
a2:9e:35:4d:66:1f:a1:82:16:66:98:bd:17:5e:bf:d5:a7:0c:
f5:36:dc:34:30:89:86:3a:57:b8:6e:88:54:c8:c9:c0:43:f9:
0b:26:28:9a:a6:ad:fa:61:eb:17:f6:dc:26:03:10:77:18:dd:
9e:07:ea:2c:67:46:80:3f:85:43:a0:a2:bd:65:9e:92:f0:bc:
ca:6c:f9:dc:01:42:da:37:38:67:87:85:83:b2:08:8b:07:9e:
1b:c0:b5:f4:32:04:90:b7:b6:14:d1:1b:59:23:aa:1a:15:e3:
4d:f2:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:35 2025 by rpki-client