Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/bEgVe-ofYadc598A_T1LLMS2fAY.roa
File: bEgVe-ofYadc598A_T1LLMS2fAY.roa (raw, json)
Hash identifier: +IU1ovwG3QUpV+Ek3W8r9mLqjwMjjZrJi+i+9Dom6OA=
Subject key identifier: 6C:48:15:7B:EA:1F:61:A7:5C:E7:DF:00:FD:3D:4B:2C:C4:B6:7C:06
Certificate issuer: /CN=da79b2d92c19cedaa2db42357f854da6588e1993
Certificate serial: 018572B42B3E8E676DEEA97CCBC2A40180AD
Authority key identifier: DA:79:B2:D9:2C:19:CE:DA:A2:DB:42:35:7F:85:4D:A6:58:8E:19:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nmy2SwZztqi20I1f4VNpliOGZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/bEgVe-ofYadc598A_T1LLMS2fAY.roa
Signing time: Mon 02 Jan 2023 13:38:08 +0000
ROA not before: Mon 02 Jan 2023 13:38:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:2b:3e:8e:67:6d:ee:a9:7c:cb:c2:a4:01:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da79b2d92c19cedaa2db42357f854da6588e1993
Validity
Not Before: Jan 2 13:38:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c48157bea1f61a75ce7df00fd3d4b2cc4b67c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:cc:58:90:71:07:63:01:b4:d8:3f:7e:26:
13:41:a8:3d:b3:5e:47:9e:ef:2e:8e:c7:a0:0a:72:
f1:7e:57:5a:94:4b:09:75:58:d8:eb:69:6c:62:e2:
4b:33:fa:cc:65:3b:4a:79:95:5c:28:99:4d:2a:bc:
31:88:8a:8d:ed:ec:c0:ce:35:2b:60:40:36:c1:54:
44:25:aa:87:17:df:ab:5c:9c:e0:25:79:ec:9e:c3:
2d:c1:f3:07:f4:bb:6d:8b:51:02:96:cf:85:9b:cb:
8e:2d:7a:e5:23:81:22:f5:46:e3:bd:71:47:6f:5e:
d8:4e:a1:9d:01:75:52:1e:f1:8a:52:67:37:bb:d8:
07:85:e2:02:d6:e8:42:ee:41:35:50:33:7e:7a:5e:
f9:b7:0f:54:b7:6e:7e:b6:95:2c:34:43:e3:ae:06:
cc:4a:0b:bd:9e:7d:7f:d9:88:d9:99:5f:77:f8:ce:
05:63:d7:60:55:15:54:fc:c5:0b:e8:9f:30:6c:80:
11:b4:fa:db:9c:5d:1d:8c:36:e5:6f:63:68:77:f4:
b6:d8:b7:52:0a:27:f1:40:a4:3e:85:df:cb:16:a4:
ef:59:b6:0c:42:85:3c:2b:d2:e7:9f:3d:96:a9:41:
26:3a:f7:50:cb:00:f4:67:4d:96:62:b5:8c:31:4e:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:48:15:7B:EA:1F:61:A7:5C:E7:DF:00:FD:3D:4B:2C:C4:B6:7C:06
X509v3 Authority Key Identifier:
keyid:DA:79:B2:D9:2C:19:CE:DA:A2:DB:42:35:7F:85:4D:A6:58:8E:19:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nmy2SwZztqi20I1f4VNpliOGZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/bEgVe-ofYadc598A_T1LLMS2fAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bd:1f:e7:a7:05:d5:be:11:e3:94:6c:3d:7c:a1:7b:99:cd:
3a:37:61:9d:da:1f:59:a5:31:2c:ed:ae:cf:4a:03:b7:0e:25:
21:82:5c:08:c7:11:48:8a:0c:cd:2e:94:6c:33:01:c3:d3:20:
75:9d:87:32:63:76:ea:3c:dc:72:34:da:3d:b3:bd:fc:90:af:
29:8c:a4:8e:ee:46:cc:30:d2:24:93:a6:ce:5f:9d:1a:44:fe:
16:05:b2:23:ed:6a:52:6a:fc:86:2f:25:2d:2d:f0:65:fd:17:
5b:1b:15:ee:95:18:18:74:d7:90:53:ea:c6:b2:87:68:a9:11:
44:70:57:37:62:b0:c1:60:56:ba:86:10:67:67:05:58:f6:c1:
10:67:db:ad:08:e8:68:85:70:08:36:0b:bf:89:96:66:d2:34:
dc:32:68:31:44:b6:09:36:84:36:c1:70:80:29:36:07:8f:89:
6c:fa:d7:39:bc:5f:ed:45:77:2b:63:4e:dd:04:88:b5:ba:bd:
7c:78:10:e1:55:31:ca:ca:ad:ac:6c:71:36:c0:6d:b4:af:0d:
1f:58:86:f7:32:ae:52:e6:99:ed:0d:da:a4:99:47:74:a1:4d:
26:fd:5d:5a:a8:ac:43:cc:4d:db:2c:ba:a4:7b:c8:4b:8c:7e:
f2:81:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:09 2025 by rpki-client