Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/8zTP6bF-8Ig21O-GNkBs9OXORp0.roa
File: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (raw, json)
Hash identifier: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=
Subject key identifier: F3:34:CF:E9:B1:7E:F0:88:36:D4:EF:86:36:40:6C:F4:E5:CE:46:9D
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 019423D73DAFE49FD9609567F1BC5EBA2F97
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/8zTP6bF-8Ig21O-GNkBs9OXORp0.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8304
IP address blocks: 91.223.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3d:af:e4:9f:d9:60:95:67:f1:bc:5e:ba:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f334cfe9b17ef08836d4ef8636406cf4e5ce469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:f6:6e:48:ff:6f:5c:0f:d6:11:a7:10:ab:
b7:ce:31:24:95:83:de:a9:91:93:fa:ec:2a:c2:c2:
ed:5d:36:95:3f:ab:8b:71:a8:71:fe:fa:b2:f2:67:
a4:84:64:a6:3d:87:02:34:d3:02:5e:a4:b3:49:7e:
45:bd:2d:a5:20:c3:07:ba:67:93:b1:8b:ec:a5:0d:
69:66:60:6d:1c:1c:df:2b:57:0c:26:88:85:98:e7:
a4:3a:6e:49:f8:88:cc:26:8c:1a:51:78:55:c7:e6:
1d:fa:52:ee:86:b5:ab:34:68:ad:3f:25:6c:4a:9d:
4c:51:1f:53:28:fc:da:1a:16:01:5f:a8:29:c8:58:
af:93:c4:b1:40:f6:44:4b:55:29:90:bd:42:9b:09:
58:51:2d:0a:34:1f:7e:17:0c:62:a2:cf:4b:70:68:
80:6f:e6:d4:51:59:51:ce:da:e0:61:2c:d8:b8:45:
5d:8a:c4:77:48:75:e4:36:3d:f6:43:97:7d:dc:e6:
e6:8f:99:b7:f3:fa:d3:9a:b2:d5:b0:76:65:a5:5d:
63:91:db:c1:95:5b:96:d4:d3:7d:52:d2:d6:c7:92:
f6:7e:4b:55:5d:e0:6f:0d:11:fe:8c:33:58:8b:8d:
8b:90:14:e3:43:c5:93:f4:f3:74:a9:c1:f7:78:f2:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:34:CF:E9:B1:7E:F0:88:36:D4:EF:86:36:40:6C:F4:E5:CE:46:9D
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/8zTP6bF-8Ig21O-GNkBs9OXORp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:26:59:7d:9e:c8:55:56:e9:08:69:aa:ec:7d:59:3b:ff:6c:
34:d2:58:2e:25:ae:df:69:44:29:91:79:ed:eb:6d:8d:db:5e:
b1:b1:a8:37:83:b0:6d:c2:55:e5:01:50:58:7e:b2:39:d6:88:
25:42:f1:aa:9b:80:19:91:a4:a9:62:5d:65:d6:4b:f3:94:eb:
28:73:de:06:54:00:bb:f0:cb:e5:b9:2b:c0:e0:71:04:de:36:
1c:2f:61:3b:1c:92:72:dd:f2:56:1e:48:46:be:ff:47:28:ee:
86:f2:2f:5d:6e:6e:8f:f1:dc:2a:bf:6a:29:18:a0:8c:6b:fa:
15:c8:b4:74:ba:f6:35:3f:fc:9e:4b:bf:c4:c7:3e:31:b5:63:
3e:5b:d3:e0:bd:fb:e4:1c:7e:65:bc:c5:1a:cd:93:a9:72:27:
60:43:d7:70:dd:f4:7a:6a:00:16:b8:db:d1:6f:39:ae:24:a4:
cc:e1:4f:3a:be:2f:b1:28:ef:6f:67:b5:cb:de:85:82:7e:94:
7c:b7:de:0a:0d:2d:0f:c5:aa:3c:18:fa:f9:ca:17:1e:d7:18:
94:72:6b:1b:da:b3:2f:7c:c2:b5:07:ff:a5:c2:18:40:cd:fc:
a8:ca:7b:fa:cc:5e:2e:c3:32:15:5b:14:d5:12:b4:3e:1f:37:
dd:a3:52:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:51 2025 by rpki-client