Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d8b6cb-8ca8-405c-9662-b352f472fde3/1/7XX_AqHh-erB1S-UmKJVvQzvXMs.roa
File: 7XX_AqHh-erB1S-UmKJVvQzvXMs.roa (raw, json)
Hash identifier: jzJ5YvuPq0Fihg+I5SPq3v8O5JEZXzeADNr+2LdHEW0=
Subject key identifier: ED:75:FF:02:A1:E1:F9:EA:C1:D5:2F:94:98:A2:55:BD:0C:EF:5C:CB
Certificate issuer: /CN=37ba8e333936d2beb4068985f0b3f799d5478b0d
Certificate serial: 0185727A21E9CA368A4313C2ED78D2912E91
Authority key identifier: 37:BA:8E:33:39:36:D2:BE:B4:06:89:85:F0:B3:F7:99:D5:47:8B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7qOMzk20r60BomF8LP3mdVHiw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d8b6cb-8ca8-405c-9662-b352f472fde3/1/7XX_AqHh-erB1S-UmKJVvQzvXMs.roa
Signing time: Mon 02 Jan 2023 12:34:44 +0000
ROA not before: Mon 02 Jan 2023 12:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:21:e9:ca:36:8a:43:13:c2:ed:78:d2:91:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ba8e333936d2beb4068985f0b3f799d5478b0d
Validity
Not Before: Jan 2 12:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed75ff02a1e1f9eac1d52f9498a255bd0cef5ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:6e:5e:cd:44:76:bb:21:60:b8:af:52:74:
3c:d8:42:a0:e5:35:af:74:ea:e8:13:91:35:52:6d:
cb:8c:2c:bf:a8:ae:4f:77:cb:47:5d:98:bf:d9:3a:
21:c1:50:1a:1b:3f:5f:6a:66:ab:0c:a1:d2:20:38:
9e:05:bf:54:af:4d:4f:91:e2:e5:76:12:f4:03:53:
92:22:de:db:59:70:47:a6:ba:27:3d:91:34:ab:47:
51:00:55:2e:74:f0:87:72:26:ff:73:e0:08:b5:fe:
80:cf:11:f3:db:4e:69:de:e6:6e:d3:33:fc:0a:d0:
55:49:5a:c4:38:47:64:b7:53:59:8c:56:8b:10:b4:
50:cf:e9:3b:6a:5b:90:33:02:bc:e9:6e:e1:d7:ca:
96:cf:72:ed:06:d4:b2:bc:24:cc:f1:c8:a1:e5:d5:
0b:29:48:f8:66:fe:ea:6a:01:e3:1f:8b:3f:35:06:
1f:3e:c0:f4:db:24:7b:52:8f:ae:64:1d:ca:89:46:
48:7c:2b:13:a1:9d:15:e6:ee:8c:4b:cc:b9:de:c1:
32:45:d9:5a:d2:16:b5:ad:3d:a7:40:a5:90:3d:e1:
1a:6b:cd:40:0a:60:03:f6:ad:8c:5f:3d:6c:11:25:
26:df:67:96:8a:43:1b:92:3b:b0:d1:0f:8f:99:12:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:FF:02:A1:E1:F9:EA:C1:D5:2F:94:98:A2:55:BD:0C:EF:5C:CB
X509v3 Authority Key Identifier:
keyid:37:BA:8E:33:39:36:D2:BE:B4:06:89:85:F0:B3:F7:99:D5:47:8B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7qOMzk20r60BomF8LP3mdVHiw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d8b6cb-8ca8-405c-9662-b352f472fde3/1/7XX_AqHh-erB1S-UmKJVvQzvXMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d8b6cb-8ca8-405c-9662-b352f472fde3/1/N7qOMzk20r60BomF8LP3mdVHiw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.234.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e5:e4:68:36:cb:7c:d8:d1:65:16:16:df:c7:31:33:03:92:
30:b4:a9:79:93:be:ac:81:d9:5d:01:24:1b:c1:ba:61:17:b3:
ab:72:56:75:bc:3a:34:e5:b8:95:78:62:56:31:aa:f8:e7:e8:
c8:68:2b:e2:b6:7f:20:14:ab:f5:8d:46:3a:dc:81:0b:eb:6a:
bd:57:f2:25:4d:57:2a:0f:b6:43:a6:d0:a4:7f:97:f6:07:23:
32:5c:ed:d1:c0:46:cd:23:59:b3:ac:a4:67:f3:c4:06:2b:a3:
81:9e:59:4c:9a:58:70:96:8c:00:5b:3f:6c:70:a8:71:28:33:
a0:b2:a8:ef:c8:5d:19:de:aa:8f:bd:34:39:39:e2:06:c8:3f:
7f:ab:8d:ef:3e:96:94:19:e6:0c:57:4e:f3:69:c1:61:5b:f5:
b3:eb:45:67:58:b4:90:ef:ec:3c:2e:dd:d9:a4:1b:a7:a8:c2:
24:29:c2:ff:d2:6c:48:c7:5c:96:61:d9:e9:87:13:ef:cd:8e:
55:91:94:03:56:d1:09:cf:53:d9:d9:b6:a0:66:d5:b6:5a:26:
54:8c:90:a3:28:e0:ad:57:1a:8a:62:4a:90:b7:17:fc:b4:47:
d8:24:c5:d6:ec:e9:83:5f:4f:02:32:2c:d4:5c:c2:67:69:30:
91:07:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:28 2025 by rpki-client