Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/DWa8pqNCNrS_oPtta6rVXjQOmJw.roa
File: DWa8pqNCNrS_oPtta6rVXjQOmJw.roa (raw, json)
Hash identifier: FgfUBL/ErM1aidbkz7FbtVBroZijl8bkRXyt6rjRTQU=
Subject key identifier: 0D:66:BC:A6:A3:42:36:B4:BF:A0:FB:6D:6B:AA:D5:5E:34:0E:98:9C
Certificate issuer: /CN=d777a34d80dee7246a7578e537a404917ddcf409
Certificate serial: 01881EDFE4D829F4288D6AF62C86A382517F
Authority key identifier: D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/DWa8pqNCNrS_oPtta6rVXjQOmJw.roa
Signing time: Mon 15 May 2023 10:06:09 +0000
ROA not before: Mon 15 May 2023 10:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 91.247.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:df:e4:d8:29:f4:28:8d:6a:f6:2c:86:a3:82:51:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777a34d80dee7246a7578e537a404917ddcf409
Validity
Not Before: May 15 10:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d66bca6a34236b4bfa0fb6d6baad55e340e989c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:e4:11:53:35:a4:e4:59:51:89:c1:33:5f:
64:c2:f1:2b:8f:07:45:1a:c8:41:2d:9b:e1:ac:eb:
e0:26:a0:fa:99:9a:e0:fa:2d:2b:06:5a:35:af:46:
a7:f7:c6:4f:e5:38:90:64:57:99:c5:79:31:d4:84:
c4:85:1e:80:c0:8d:e2:a1:b0:95:85:1a:b8:fd:53:
43:2d:48:02:cb:77:4d:82:be:77:ab:fc:b5:91:fe:
3f:c1:a8:36:df:95:2e:cb:9d:7e:8e:c9:3a:db:b9:
fd:0a:97:78:9c:3e:ec:75:f0:42:22:1e:ce:63:d4:
94:d4:14:7b:c9:72:d0:1f:95:76:8c:19:2f:56:2e:
32:86:a8:13:35:6b:8d:f7:d5:dc:40:e3:60:c7:9a:
bb:6a:45:1d:97:73:a5:c3:9d:12:27:82:54:7c:93:
35:64:4c:66:48:bb:aa:17:20:16:f6:f6:7c:74:6b:
61:20:67:44:ba:04:42:3b:1d:f4:90:2b:af:bd:af:
a2:77:ed:90:8c:19:0f:9e:30:e3:92:49:ed:1c:89:
9a:e8:01:06:2b:45:f8:35:04:ce:2d:35:fe:3a:67:
7b:ee:e7:4a:bf:4d:8e:f6:86:17:e3:10:20:56:8f:
16:67:d1:a5:c7:44:81:23:b1:47:9e:7f:fb:9b:85:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:66:BC:A6:A3:42:36:B4:BF:A0:FB:6D:6B:AA:D5:5E:34:0E:98:9C
X509v3 Authority Key Identifier:
keyid:D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/DWa8pqNCNrS_oPtta6rVXjQOmJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4f:91:d8:7b:44:ac:fd:85:58:98:93:ee:0b:75:50:ca:a0:
12:f1:71:e4:94:2e:73:eb:7d:eb:fa:70:a7:8c:03:4b:08:96:
39:10:56:35:c4:fb:d3:c6:4c:17:00:60:9a:13:b2:50:f6:47:
2e:7c:2b:eb:73:48:e6:85:1c:03:f4:5c:53:44:b7:b4:38:23:
40:bf:76:1f:86:7f:6d:9b:e1:99:0c:cb:44:f4:50:42:b6:05:
0a:a1:d3:4a:f4:1a:d6:6b:66:a3:59:54:e1:23:96:8a:5b:9b:
e2:b1:17:dc:e6:79:60:d5:fd:2c:91:4f:87:4f:aa:43:25:09:
21:88:58:f2:5b:75:83:6d:e8:b5:40:8a:3a:c9:2b:f8:77:a0:
5f:a7:94:d1:24:fd:b0:fc:3c:64:fa:6e:38:78:b4:70:b2:bf:
30:cf:00:20:92:15:9e:9c:ae:6c:52:ef:68:ad:35:f0:13:9e:
98:9d:c2:49:88:87:28:e8:a5:d9:37:d8:2f:2f:bf:c8:c7:fe:
ff:ed:ae:f1:61:42:26:45:bb:62:4e:fa:80:f8:16:8a:54:85:
64:81:fd:3b:83:ea:5c:69:c8:a5:d4:b0:4d:8f:6d:34:3e:6c:
66:a5:c6:a4:2e:c3:54:fb:77:02:4b:94:8b:ea:0f:d4:98:f2:
1a:3b:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:34 2025 by rpki-client