Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa
File: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (raw, json)
Hash identifier: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=
Subject key identifier: 67:A0:00:5E:E5:D5:9C:10:B4:3E:70:9A:2C:67:55:08:90:C6:B6:5A
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 019423D6AAC027BF37997DAAB7EF98771DC2
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57586
IP address blocks: 91.233.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:aa:c0:27:bf:37:99:7d:aa:b7:ef:98:77:1d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67a0005ee5d59c10b43e709a2c67550890c6b65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:56:22:20:a9:54:3f:08:69:20:d7:0e:60:
06:8a:b7:62:2b:6e:b9:f3:fd:2b:b7:93:70:68:b0:
1e:3e:2c:08:04:11:cc:37:3a:1b:69:af:d4:39:16:
8d:61:74:42:42:83:15:1c:3a:0c:8b:48:65:92:65:
d9:cf:11:22:18:1a:25:35:96:3e:35:a7:07:9a:fb:
1b:d3:2c:ea:31:7d:7d:80:4e:2e:d4:f0:72:d2:b0:
2c:26:0e:70:7b:98:88:dc:6a:9f:ce:85:e6:51:c5:
f9:e3:93:0e:25:5a:8c:e4:05:be:0c:e4:36:33:87:
72:00:3e:d2:d5:85:7f:cd:68:f2:21:b8:cf:8d:78:
3a:c6:c5:47:de:e6:84:65:21:52:20:79:b6:ac:0f:
c2:99:fe:90:92:1e:4c:f6:c3:4b:ce:b0:a3:85:9d:
f8:fe:5d:2d:4d:d3:c7:70:03:13:dd:41:5f:6a:fc:
f7:09:c9:a0:3e:df:03:4e:b1:d4:b0:a1:85:ad:04:
ed:da:e2:d4:75:1f:d1:60:13:dd:04:ab:35:bc:a8:
7f:06:8a:40:5b:b4:aa:b3:6d:b7:af:93:fd:c6:0c:
5f:92:55:59:13:21:cb:71:ae:74:04:00:cb:e4:ae:
59:73:98:64:25:08:22:5f:b8:a7:17:f9:1a:89:1e:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:00:5E:E5:D5:9C:10:B4:3E:70:9A:2C:67:55:08:90:C6:B6:5A
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:86:3d:8f:aa:d1:44:ee:bf:f1:9a:35:78:01:f5:55:a5:7f:
64:35:65:bd:f2:49:e8:29:da:b9:db:34:93:97:06:d4:a9:dc:
45:17:33:e3:92:4d:cd:45:71:54:8a:1e:d6:08:1d:52:86:91:
f4:51:0a:51:0a:43:37:bf:83:3d:33:b6:5b:64:f1:a4:24:02:
5a:6e:3b:c1:ed:cf:af:9a:29:c9:09:b8:94:94:2f:fa:2a:0b:
2d:40:76:5d:0e:a2:95:b3:3c:64:6f:c8:2d:23:fd:ac:09:aa:
2d:16:78:5b:2d:52:4b:f0:44:39:10:34:e3:70:ad:cb:09:55:
92:98:20:e7:09:c0:44:8f:db:14:71:06:69:0f:f3:61:1c:9d:
f8:60:c8:4b:de:00:3b:cc:d0:5d:5c:84:67:d8:97:3c:90:2a:
ff:c0:14:84:2e:22:aa:ba:d6:55:70:36:1d:cc:46:d5:11:1c:
db:86:f8:e7:80:a2:ca:45:98:3f:ed:10:d5:2f:d4:a8:94:6d:
d6:ea:9b:1d:bd:b2:7d:a4:28:8b:18:6c:f6:3d:99:a9:df:78:
c4:86:68:d7:bb:4c:11:d5:90:a4:df:07:32:b4:40:e2:21:33:
71:54:2d:c5:b5:15:e8:d6:59:9e:d2:35:b4:a0:8d:a1:6e:b0:
d2:9b:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:18 2025 by rpki-client