Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa
File: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (raw, json)
Hash identifier: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=
Subject key identifier: 06:E8:0C:0F:4A:DF:65:34:F3:46:FF:5E:DD:87:3D:B3:50:B9:A8:CF
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019424449DC1643277D3325B3CDFDAECD8AC
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197735
IP address blocks: 91.226.26.0/23 maxlen: 23
91.226.26.0/24 maxlen: 24
91.226.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9d:c1:64:32:77:d3:32:5b:3c:df:da:ec:d8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06e80c0f4adf6534f346ff5edd873db350b9a8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:a0:96:32:fd:d6:ad:c5:da:f7:31:fc:50:
ee:49:b2:dd:17:52:b3:4c:e0:8c:9b:28:17:b2:c7:
58:f4:62:f4:2d:3d:df:4b:08:20:cd:0e:3a:f0:66:
28:53:7c:f4:d3:1b:86:a6:c0:db:6d:4d:06:c0:a9:
d7:bc:d5:7e:1f:ef:93:2a:de:b0:6c:18:e7:2a:2e:
9c:94:a3:fa:f6:46:38:65:db:59:e4:0a:00:99:0c:
f5:68:f5:74:f7:4d:ac:fd:04:59:96:d6:88:6c:f5:
70:25:ee:3f:ab:80:86:19:82:52:4b:ea:58:ed:ea:
4c:7d:f3:f8:76:6e:cf:23:fa:8e:33:43:87:81:09:
f5:58:f8:e1:29:a4:b7:9f:3a:6c:f6:ac:4f:72:a5:
50:ae:1f:7d:d9:bf:f4:06:b2:af:07:26:6a:06:60:
e4:e3:59:bf:01:7b:4f:81:99:4f:c5:ec:ac:87:5d:
72:62:d8:18:27:54:57:90:47:ee:0c:fb:1d:35:d6:
57:6f:0c:c0:e0:6c:05:b6:18:22:51:82:10:f8:2c:
66:c6:4b:62:58:3a:e1:a1:34:67:f0:ff:f6:e9:0a:
64:2f:41:15:31:8a:72:8a:88:d9:fc:76:7e:3e:16:
f7:ed:9c:cf:1d:0e:ce:1b:38:4c:77:84:55:6e:9b:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:0C:0F:4A:DF:65:34:F3:46:FF:5E:DD:87:3D:B3:50:B9:A8:CF
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.26.0/23
Signature Algorithm: sha256WithRSAEncryption
59:63:a0:0f:8c:e7:b6:4f:36:ad:8e:bd:3a:00:7e:3b:31:c9:
4c:eb:66:5f:fe:2c:e2:9c:10:1b:01:64:ef:c9:3f:5b:f0:b1:
aa:dc:da:dc:b6:c2:51:98:a7:07:81:32:57:fe:15:e8:44:cb:
f8:60:bd:05:5a:a2:03:9b:bc:f0:3c:77:81:10:77:b5:4c:43:
cd:f1:d5:b2:32:28:45:9e:f6:cb:f4:9e:41:8e:1c:c3:a2:6e:
fa:c2:e4:64:64:05:42:43:9d:69:7f:f1:36:b0:68:cc:6c:a1:
f5:f9:8d:79:82:24:3d:3e:97:90:de:64:b3:d2:ab:52:13:92:
d8:3a:3d:4e:1c:ec:c9:21:fb:6c:2e:25:4b:d2:de:64:29:97:
ba:a1:23:38:a1:a9:ac:ed:5b:f9:ba:73:55:96:ad:e2:e3:99:
30:97:dc:5f:d2:b5:84:1e:48:b5:6b:af:fb:b2:2c:1d:1c:34:
f6:94:d3:08:59:44:a2:fa:00:a4:7e:7f:77:73:a0:92:56:d5:
6d:00:05:77:54:f1:5d:8c:af:5e:d5:65:30:a9:80:e7:f6:14:
3b:b6:05:3c:85:d3:2c:60:4b:e7:c8:01:91:5e:f2:5e:dc:60:
77:93:91:f2:58:1a:ff:16:f2:31:0b:e5:5f:1f:62:b3:1c:fe:
84:a2:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:19 2025 by rpki-client