Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/xamtctmYR9WyvxeQX3SVzJFIgi0.roa
File: xamtctmYR9WyvxeQX3SVzJFIgi0.roa (raw, json)
Hash identifier: gjqqxNByTuUq8SGq/GtXb4RNSk/cy4Tc6s3svW1X31A=
Subject key identifier: C5:A9:AD:72:D9:98:47:D5:B2:BF:17:90:5F:74:95:CC:91:48:82:2D
Certificate issuer: /CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Certificate serial: 0184D8864426FAFFB3EEA650CD4583BAF215
Authority key identifier: EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/xamtctmYR9WyvxeQX3SVzJFIgi0.roa
Signing time: Sat 03 Dec 2022 15:06:28 +0000
ROA not before: Sat 03 Dec 2022 15:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 91.212.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:86:44:26:fa:ff:b3:ee:a6:50:cd:45:83:ba:f2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Validity
Not Before: Dec 3 15:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5a9ad72d99847d5b2bf17905f7495cc9148822d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:29:76:9e:15:ea:85:a0:93:bb:f7:44:34:
60:c6:be:40:0f:86:33:38:cd:51:54:07:b2:02:db:
5a:d5:5c:ba:91:be:2f:27:99:38:29:88:01:ef:7d:
cc:8f:0a:cf:89:5f:c5:6f:eb:05:be:56:e0:36:68:
c6:c6:30:6f:7a:8b:5f:e1:d8:82:8f:2e:ef:41:1a:
64:92:be:82:bf:40:9d:ac:dd:10:90:42:3c:0d:75:
26:ef:6d:f1:b9:c8:4f:3a:16:b1:d3:1e:c4:69:af:
77:a0:07:a8:82:7f:58:cb:8b:76:94:e3:63:ce:60:
84:54:cd:cc:92:49:c1:91:70:ca:d8:99:cc:e6:6f:
12:23:0c:9b:be:06:5a:9e:b4:c3:84:36:90:d8:64:
a5:71:39:3f:2b:06:84:ef:b1:2e:60:1a:f8:dd:00:
84:7d:73:58:be:fa:a4:68:a9:b1:62:70:fd:c9:96:
a1:6f:4c:e5:15:87:0e:7f:11:5e:bf:a4:44:d7:1a:
90:a9:de:d6:4d:d7:5f:90:56:02:e3:37:57:8d:81:
47:88:62:8e:2f:ae:be:81:3d:00:9d:9b:b2:9e:f9:
0c:ab:51:9f:b6:62:3b:5f:83:48:35:c6:8c:d7:bf:
e1:82:fa:9a:25:57:79:9f:0f:51:00:d8:e0:1c:f1:
62:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:AD:72:D9:98:47:D5:B2:BF:17:90:5F:74:95:CC:91:48:82:2D
X509v3 Authority Key Identifier:
keyid:EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/xamtctmYR9WyvxeQX3SVzJFIgi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.216.0/24
Signature Algorithm: sha256WithRSAEncryption
87:69:bb:4d:eb:92:8d:a6:0c:0e:24:8e:04:9d:e5:74:d2:52:
fd:7b:8f:9b:d3:b6:05:15:2b:e6:27:96:93:be:ea:74:03:e9:
92:6e:87:d1:ed:e5:fe:3a:39:5a:0d:1b:d4:39:df:a1:38:92:
ca:dd:25:17:4a:b1:d6:83:84:da:4e:b1:f8:41:38:5b:cf:0a:
79:05:7c:90:9f:1b:13:ee:9a:0c:c7:5e:97:25:cc:2d:47:e1:
61:6d:51:3c:66:ac:a9:f3:77:6e:7c:fb:6d:78:ac:aa:bb:29:
d1:b4:d8:f4:09:3e:29:c7:6d:58:ae:f9:0f:84:af:75:21:40:
8a:96:3a:ea:0b:79:22:6b:4e:78:99:db:fc:85:bb:92:e9:c7:
3c:a0:e2:22:96:09:02:d7:b9:64:cd:ff:fa:c0:06:5a:b9:e7:
f8:08:7a:66:64:9c:a9:cc:c3:3a:9d:be:d8:b6:27:ed:3e:34:
29:aa:85:c8:b9:8d:f9:8f:94:8b:31:b5:8d:5d:63:4c:cf:99:
bd:c7:43:ab:2f:0c:07:29:82:95:de:d9:0d:0d:a8:0e:6a:8b:
9f:65:e9:45:3a:5f:87:04:3c:f6:b3:a6:f6:7e:63:38:66:c4:
fc:1c:f7:00:ad:1e:cf:71:97:8e:9a:60:01:28:c1:7c:4e:28:
e3:33:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:40 2025 by rpki-client