Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/S5DETDLLet6VFxrCpPXLtk-ZBuY.roa
File: S5DETDLLet6VFxrCpPXLtk-ZBuY.roa (raw, json)
Hash identifier: fUKIijvua0Ahsn9+GmtctEl7a6HCX5D1RtOkAKWXhNo=
Subject key identifier: 4B:90:C4:4C:32:CB:7A:DE:95:17:1A:C2:A4:F5:CB:B6:4F:99:06:E6
Certificate issuer: /CN=d777a34d80dee7246a7578e537a404917ddcf409
Certificate serial: 8DAD0A
Authority key identifier: D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/S5DETDLLet6VFxrCpPXLtk-ZBuY.roa
Signing time: Sat 01 Jan 2022 04:01:01 +0000
ROA not before: Sat 01 Jan 2022 04:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.247.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9284874 (0x8dad0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777a34d80dee7246a7578e537a404917ddcf409
Validity
Not Before: Jan 1 04:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b90c44c32cb7ade95171ac2a4f5cbb64f9906e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:3a:04:c2:95:2a:5a:fc:85:f8:bc:85:77:
0f:6f:a6:87:5c:c6:ef:11:64:4f:ab:e8:78:4d:79:
25:7e:28:74:18:19:9a:8c:a4:fe:de:9f:f5:4e:f1:
dd:ec:d6:e8:72:dc:e8:0f:cc:73:6e:a2:87:58:8f:
ca:60:52:8f:05:e8:51:f0:ba:10:7d:98:1b:87:68:
f4:17:ca:95:e1:1c:94:c3:21:61:48:d1:3f:c1:3c:
26:e9:2f:3b:78:f9:32:fc:61:e9:19:b1:d4:9e:e1:
2e:ec:a7:30:7b:00:32:8b:d0:f3:1f:34:cf:77:ea:
97:2f:bc:35:f3:e4:75:b9:22:99:07:ad:39:9b:09:
32:96:cf:b1:6d:4a:18:bb:62:e1:b3:d5:fe:a8:16:
40:e8:f0:a9:2f:41:49:e8:b4:c2:db:ef:84:47:bf:
82:b9:cc:29:3d:57:f9:2e:0f:4c:27:ed:dc:79:e7:
ee:01:92:2f:c4:d3:89:ee:99:b1:b5:ae:c6:09:94:
3d:12:e9:92:b6:b2:89:63:b4:c6:fd:49:ba:a3:b2:
64:54:81:a8:14:a2:0f:80:07:15:05:18:16:b2:a1:
ae:8c:f2:65:09:7c:91:2c:40:f3:5b:28:d1:68:9a:
ff:a2:94:1d:bf:b0:89:71:9f:96:a1:33:25:83:c4:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:C4:4C:32:CB:7A:DE:95:17:1A:C2:A4:F5:CB:B6:4F:99:06:E6
X509v3 Authority Key Identifier:
keyid:D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/S5DETDLLet6VFxrCpPXLtk-ZBuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b6:ea:70:66:08:72:22:68:63:48:38:06:af:b7:e7:ec:81:
23:dc:23:67:e1:78:b5:67:7c:11:9d:c2:76:41:a7:47:f3:14:
3c:fc:35:e8:3e:a7:c2:f9:b9:16:1e:e3:30:4d:a8:a3:77:83:
36:78:84:cd:62:b8:78:82:5c:72:5c:46:1f:05:ca:04:7b:82:
4f:18:16:ef:75:d2:bb:f3:59:53:41:0b:d3:e2:25:4e:a0:f2:
df:58:c8:99:7d:09:6b:be:56:4c:74:a6:47:e1:eb:12:57:6a:
aa:c9:84:8f:13:80:a4:a1:95:78:6d:88:10:0c:0f:b2:25:3e:
42:af:f3:e9:a0:61:60:0e:d0:53:cb:06:63:21:67:8b:12:02:
f3:2a:55:93:db:bc:69:a5:15:d9:83:a5:a5:9a:3d:b8:cd:47:
70:99:79:11:4d:d9:87:7f:28:08:d0:37:a2:fb:70:ff:1c:ca:
93:18:2c:7d:84:ad:d9:c3:09:11:cf:07:59:66:25:79:03:49:
9f:3a:b9:a8:26:10:c8:24:1e:ad:da:80:b4:44:aa:fc:ec:19:
86:fd:2d:3b:22:34:c4:1d:22:8d:f5:f3:91:8e:92:6f:bc:36:
c1:01:50:9e:c4:06:5e:12:85:ff:53:c4:23:e8:f4:12:76:44:
29:32:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:14 2025 by rpki-client