Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/RTzAK-iwiIqG-H2a98frscEhBzc.roa
File: RTzAK-iwiIqG-H2a98frscEhBzc.roa (raw, json)
Hash identifier: NKpzR4VZn30Ine9kHNznrW7umibm3SYf8ZTBQpKSCVQ=
Subject key identifier: 45:3C:C0:2B:E8:B0:88:8A:86:F8:7D:9A:F7:C7:EB:B1:C1:21:07:37
Certificate issuer: /CN=d777a34d80dee7246a7578e537a404917ddcf409
Certificate serial: 018571276B182E091C5CAFC8C6142929E8B3
Authority key identifier: D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/RTzAK-iwiIqG-H2a98frscEhBzc.roa
Signing time: Mon 02 Jan 2023 06:24:46 +0000
ROA not before: Mon 02 Jan 2023 06:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.247.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:6b:18:2e:09:1c:5c:af:c8:c6:14:29:29:e8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777a34d80dee7246a7578e537a404917ddcf409
Validity
Not Before: Jan 2 06:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453cc02be8b0888a86f87d9af7c7ebb1c1210737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:04:8c:2e:ab:91:36:63:6e:45:30:aa:99:
60:a4:74:f4:46:8b:0e:66:2d:eb:3d:31:28:83:e2:
be:c2:2d:98:a1:72:5f:a0:0e:21:9e:2a:27:b9:1c:
1e:83:37:0f:f6:66:0b:28:a3:90:4c:6e:33:39:80:
43:0f:94:68:f6:2c:37:6b:f0:ac:4c:a3:58:9f:43:
0d:50:dc:bd:25:bd:fc:77:c3:f5:22:6e:97:50:22:
4c:3d:6a:aa:a0:2a:fe:35:8a:6f:6a:47:43:5e:6f:
9c:89:6c:fe:44:d8:3c:ee:c8:e7:f1:1d:81:1c:a2:
be:c3:cb:56:1d:31:47:cc:88:ad:fe:af:24:8b:e1:
72:a8:03:e6:f9:f4:d5:9d:ab:82:a4:28:8c:ff:7c:
f4:20:29:31:c7:8b:f8:6a:a5:83:eb:d6:dc:53:db:
fa:3e:c6:57:3e:c4:00:fc:d1:46:54:10:03:ee:15:
b9:40:20:53:d6:7b:ac:6d:d6:04:61:a3:1e:b9:ea:
96:41:dd:b1:8e:70:3e:95:36:b3:dc:07:2c:bf:97:
76:b3:80:ca:63:0c:37:4b:d8:d6:7c:43:ee:63:ed:
c4:60:6d:4b:db:e3:15:7c:0c:c8:5c:1c:dc:30:d0:
38:f2:6f:30:16:59:cf:f6:4c:12:48:e3:31:6a:0e:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3C:C0:2B:E8:B0:88:8A:86:F8:7D:9A:F7:C7:EB:B1:C1:21:07:37
X509v3 Authority Key Identifier:
keyid:D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/RTzAK-iwiIqG-H2a98frscEhBzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:78:6e:e3:28:f2:34:74:b9:48:4e:86:b4:6a:05:07:a2:74:
af:be:b9:2c:a1:95:d7:ea:46:d2:9b:aa:4c:dc:32:4b:c9:da:
bc:ec:94:b6:b5:0c:3f:83:f5:72:84:43:20:8e:5d:6b:a5:77:
b4:2e:68:df:41:a3:c1:8c:9b:94:74:b1:d9:59:22:4e:ab:9d:
d1:df:2c:5e:0e:d7:6e:3e:51:37:1a:ac:28:1e:21:f3:34:85:
26:b6:7c:cc:53:fd:92:d7:f2:fb:d2:b7:b1:63:f7:4d:52:9d:
26:05:87:1a:a4:c6:d6:be:8f:68:8f:47:1e:09:c7:5e:fa:62:
57:15:3d:49:f6:a3:06:e4:38:66:86:ec:e2:59:1c:62:2f:85:
5e:ff:3a:a0:f0:d1:db:33:3a:1b:7d:94:37:85:cc:e1:ec:36:
5f:f0:34:07:1d:8f:30:3f:03:de:d0:71:88:19:e1:33:c1:58:
d7:bf:41:18:a1:4f:3d:4c:45:62:b8:7a:c5:b9:b6:6d:22:91:
28:98:aa:fa:03:bb:5c:91:5b:36:96:5a:79:f1:65:9f:34:21:
17:f0:a9:94:e5:2a:20:33:ff:a8:3f:90:0c:1a:d9:e3:8c:c9:
1d:39:23:37:a9:72:45:4c:16:2b:1a:f4:ad:b2:3d:85:09:ea:
4e:1a:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:17 2025 by rpki-client