Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/k7MczvcwzJnIwGX4GenXqhZ6Py8.roa
File: k7MczvcwzJnIwGX4GenXqhZ6Py8.roa (raw, json)
Hash identifier: rRwSSNRX32ndqRuBrOVGseIzJpT+b7xELrJvfrhvjB0=
Subject key identifier: 93:B3:1C:CE:F7:30:CC:99:C8:C0:65:F8:19:E9:D7:AA:16:7A:3F:2F
Certificate issuer: /CN=b8b82200a1332e9995437f9c647ea24b416198af
Certificate serial: 99DEA9
Authority key identifier: B8:B8:22:00:A1:33:2E:99:95:43:7F:9C:64:7E:A2:4B:41:61:98:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/k7MczvcwzJnIwGX4GenXqhZ6Py8.roa
Signing time: Sat 01 Jan 2022 07:56:55 +0000
ROA not before: Sat 01 Jan 2022 07:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.242.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10084009 (0x99dea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b82200a1332e9995437f9c647ea24b416198af
Validity
Not Before: Jan 1 07:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93b31ccef730cc99c8c065f819e9d7aa167a3f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:24:ef:c9:cf:82:01:a7:0e:f4:06:6b:a8:
2c:cd:e8:95:9d:3b:a4:16:22:1a:55:b3:02:48:b7:
7d:87:3a:f4:14:d1:0f:8e:ff:9d:a2:4c:e0:00:43:
ee:0e:da:2e:25:ed:6d:07:70:10:55:fa:63:3a:78:
3a:a2:13:e4:78:7c:99:f2:a4:97:78:13:f1:9c:33:
c6:ef:e2:66:b7:be:b9:31:2a:d2:61:8e:8e:75:0d:
d7:6d:ad:ac:bb:97:31:13:35:bf:66:6d:73:57:ac:
dd:b1:99:94:2f:bc:b3:a1:42:a6:2a:4b:59:9d:ba:
f7:9a:ad:5a:01:95:29:c3:c4:3b:0d:95:39:fc:6c:
f6:fe:ab:b0:90:29:2b:cf:4b:b8:a9:e2:c7:d1:37:
b1:48:91:10:f2:ff:e7:86:9c:d6:4b:4a:4d:a9:7e:
1d:5e:c4:13:60:56:6d:26:f7:3a:cc:00:56:65:7f:
5c:1f:28:80:9e:3c:38:16:b3:54:18:ba:40:12:a8:
62:6d:6f:1e:f9:4a:ca:c5:a2:3a:99:6d:7e:33:5d:
b1:73:79:c0:80:a4:48:d1:a5:58:5a:42:4d:11:d2:
ef:90:62:8f:34:2d:65:0b:f2:d4:96:c4:a8:03:29:
03:ef:68:e6:6f:a9:3c:a4:48:9e:77:c4:79:f6:93:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B3:1C:CE:F7:30:CC:99:C8:C0:65:F8:19:E9:D7:AA:16:7A:3F:2F
X509v3 Authority Key Identifier:
keyid:B8:B8:22:00:A1:33:2E:99:95:43:7F:9C:64:7E:A2:4B:41:61:98:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/k7MczvcwzJnIwGX4GenXqhZ6Py8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.252.0/24
Signature Algorithm: sha256WithRSAEncryption
18:98:63:97:64:13:f5:d7:f2:b6:80:b6:8a:74:c2:70:9b:53:
68:e5:7d:9a:62:52:35:52:9c:6e:bb:da:ec:1a:dc:a8:19:53:
6a:f2:0e:24:d6:3b:1b:11:d9:e5:92:05:9b:6b:b7:6f:a3:b5:
17:08:70:37:d5:44:6a:a2:e7:98:36:b5:e5:91:fe:c7:a8:a3:
2d:44:b1:37:a5:70:c6:31:db:5f:38:de:fb:57:ea:d8:b1:5f:
11:d7:fd:e8:ac:13:18:ba:b1:6e:ea:16:56:c5:7f:69:77:ed:
3a:9d:99:6c:5e:97:bf:f7:db:02:69:c2:e0:97:c7:c5:e4:c4:
06:b0:76:cf:64:62:1f:2f:fa:28:4c:c5:26:1d:04:42:f3:f8:
62:1a:94:2b:2c:d3:f2:c9:ec:98:09:6a:e0:18:47:9a:a7:09:
b7:66:e9:d5:55:9a:a7:75:01:69:3b:8d:53:40:0c:60:ff:01:
22:6f:8d:b8:d8:28:74:2b:f2:19:98:d3:90:a3:1b:6e:bc:ae:
43:01:86:c8:cb:76:11:10:62:ff:7e:45:ad:1e:00:70:a1:8d:
18:a2:2d:18:a0:93:51:c8:4b:8d:8d:d0:a2:64:c0:e6:5e:45:
c2:64:fa:bc:64:b5:b0:31:37:a4:31:88:1d:e1:61:64:de:80:
82:a9:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:23 2025 by rpki-client