Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kfTUCfdOoZHF0kOrCseSzt2x39E.roa
File: kfTUCfdOoZHF0kOrCseSzt2x39E.roa (raw, json)
Hash identifier: F1ZYoaHw/8+qty43pOWl+aD0NpISu4Q/lFNTzdzS7UM=
Subject key identifier: 91:F4:D4:09:F7:4E:A1:91:C5:D2:43:AB:0A:C7:92:CE:DD:B1:DF:D1
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182CFD1499EC0B20A20C7151EB79D0DADA1
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kfTUCfdOoZHF0kOrCseSzt2x39E.roa
Signing time: Wed 24 Aug 2022 12:26:15 +0000
ROA not before: Wed 24 Aug 2022 12:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 89.116.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:d1:49:9e:c0:b2:0a:20:c7:15:1e:b7:9d:0d:ad:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 24 12:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91f4d409f74ea191c5d243ab0ac792ceddb1dfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:9a:e2:25:93:f4:ce:85:ba:7c:a7:80:f2:
c1:40:3e:2a:51:9f:e3:b5:da:de:5e:7c:45:ed:6d:
5c:68:f2:08:c4:a7:34:29:e4:cb:8c:8a:32:ab:78:
81:02:f8:2f:63:b7:55:b5:5d:64:b9:b3:c7:3a:b8:
a5:1d:cb:83:29:ed:1c:9c:f3:ff:a5:be:9e:f3:9c:
ac:86:85:59:3a:ec:a9:2c:35:e7:c4:26:f1:fc:f1:
f9:56:8b:87:a4:7b:be:89:a9:ea:b5:87:1c:cb:e3:
dc:50:71:62:41:69:46:ca:56:fb:88:5b:40:9e:7b:
1b:99:27:83:f2:f5:e8:17:a8:f0:a0:5b:6e:da:a3:
fe:ac:fe:55:1c:00:c8:c1:37:30:bb:c6:c5:2c:d9:
19:23:f6:ac:2f:56:0c:74:21:39:5b:ec:63:d0:8b:
95:8e:32:fb:9d:71:fc:64:24:0e:15:dd:40:93:90:
8f:9f:4e:2a:62:da:90:a5:07:a0:33:ac:95:ae:7b:
18:cc:47:d8:78:ba:1e:59:91:1d:fc:0f:0e:5a:bd:
a7:c1:73:26:eb:ee:bc:42:5a:c3:90:13:17:b2:5f:
eb:db:b1:c5:57:5a:9e:42:42:0a:5e:5f:d3:5e:9c:
a2:c4:1f:a7:ba:79:1f:8c:65:8c:71:0c:8b:16:e5:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F4:D4:09:F7:4E:A1:91:C5:D2:43:AB:0A:C7:92:CE:DD:B1:DF:D1
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kfTUCfdOoZHF0kOrCseSzt2x39E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fe:a0:a1:4a:04:db:10:f7:43:16:e8:a0:57:05:92:24:8d:
6a:83:f5:37:67:63:f8:4a:73:36:be:5d:29:94:d7:8a:5b:34:
cc:ff:fe:87:23:90:e7:c6:17:6b:ae:ac:a9:bc:f0:f8:a9:e3:
ef:a0:2d:33:72:94:76:94:02:76:c0:e2:d1:c8:b0:be:a9:b6:
4a:2b:89:d8:f5:f3:23:e6:1e:52:e4:4e:aa:5a:f1:05:88:8e:
b4:2b:3e:a2:8f:62:ce:f9:83:d1:31:cf:ee:e6:48:44:80:28:
94:23:e6:22:4d:16:a9:f2:58:0b:1c:33:73:af:d7:c3:0e:6b:
61:34:ed:b7:67:18:9c:c0:c3:4d:19:0c:db:79:ba:09:2a:b9:
fe:a4:fc:2e:25:71:55:8c:b5:35:45:6f:19:00:40:56:1b:75:
1d:14:3d:d2:ff:b0:39:7c:69:00:a6:6a:6e:c0:f6:c5:e5:44:
fe:e8:f9:13:87:e3:fc:bd:46:44:04:5b:1a:c5:37:db:fd:ed:
7e:43:eb:bb:fa:08:97:cc:78:af:1f:17:db:4c:99:b6:b3:04:
b5:46:f5:14:e5:6c:79:62:12:11:52:69:9f:88:f1:4c:ae:3f:
80:3a:56:9d:5a:66:2e:af:7c:f1:c0:92:fa:b3:99:b2:69:3b:
41:33:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:49 2025 by rpki-client