Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/8ZbyflawwFLPqDg3BZZLbHwGOLc.roa
File: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (raw, json)
Hash identifier: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=
Subject key identifier: F1:96:F2:7E:56:B0:C0:52:CF:A8:38:37:05:96:4B:6C:7C:06:38:B7
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 0194274811C6578EDE159E91E043F9C5FB7F
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/8ZbyflawwFLPqDg3BZZLbHwGOLc.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49441
IP address blocks: 91.214.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:11:c6:57:8e:de:15:9e:91:e0:43:f9:c5:fb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f196f27e56b0c052cfa8383705964b6c7c0638b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:be:17:d7:1c:62:6a:10:6d:a9:51:e7:a8:
9f:a4:0d:c0:e6:2a:48:f2:30:82:cc:13:61:36:ca:
cc:fc:19:c5:02:b8:98:e8:96:98:2b:ff:e0:51:ef:
12:97:b0:6d:30:c7:9d:22:d1:a7:66:a1:a8:56:6c:
c0:83:04:8a:d1:c0:6b:a8:88:22:ae:5b:91:40:75:
db:41:f4:39:53:5f:71:53:e5:ed:cb:bf:5b:3a:ca:
c0:0f:ab:fd:3c:ef:cf:9c:7d:5e:97:b1:5c:2f:d6:
dc:73:30:ba:b0:5e:f2:86:7c:51:41:8e:11:5f:17:
cc:00:2d:88:be:c3:65:3c:de:f2:11:b0:f4:8c:57:
7d:b1:e4:a3:62:66:73:fe:07:7a:6f:e6:95:38:60:
f4:0d:3b:bb:73:a4:15:bc:d9:c3:6f:75:e7:c0:23:
4b:92:71:44:ab:16:76:8a:c0:54:67:e0:bc:36:4d:
e1:b1:34:0b:c8:5a:5e:0a:b4:37:1e:41:f1:35:3a:
66:01:03:67:d3:a1:aa:64:57:80:08:19:e2:45:bc:
b4:53:89:7c:0e:c7:97:fc:8b:68:55:88:0e:f1:aa:
0d:b0:9e:d0:f0:74:f4:bc:03:b3:82:f3:42:28:70:
fe:60:76:0c:27:b5:40:ac:4a:b1:79:f7:f2:12:98:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:96:F2:7E:56:B0:C0:52:CF:A8:38:37:05:96:4B:6C:7C:06:38:B7
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/8ZbyflawwFLPqDg3BZZLbHwGOLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:16:a7:7c:cc:23:f2:da:90:30:45:82:6d:30:17:bb:fd:dc:
88:92:81:9e:bb:81:1e:6d:ce:03:79:1f:27:1b:a4:44:61:01:
0c:28:28:0e:08:91:7e:4e:81:f1:dc:22:c5:a5:eb:00:32:4b:
2f:c0:9a:be:de:01:aa:d1:d8:42:7b:f0:8f:97:89:34:40:d5:
51:a7:5f:ee:d1:f5:e1:3b:80:7c:19:94:4e:65:84:df:1c:28:
ba:b7:65:c5:be:2e:15:58:98:81:63:c7:6f:f8:71:7c:0f:9e:
e0:d0:d0:db:6a:16:6a:c0:92:fc:24:d6:d2:92:04:81:fa:63:
da:9b:bb:49:36:12:54:0a:bd:e4:77:cf:6d:84:c4:b5:4a:29:
52:01:79:fc:c3:cf:2f:4f:1f:18:20:88:3c:94:1e:6b:e6:9a:
a3:a0:34:b1:fa:14:a3:9d:78:36:e8:ad:fd:b5:54:b2:cf:99:
2e:8a:33:cc:65:ad:f1:f8:23:1a:05:40:3c:28:36:27:a9:20:
f6:1d:aa:e3:e8:b8:5a:28:a5:e0:e2:bb:4b:6a:c3:47:4b:d5:
88:5b:9e:1d:3c:e6:5a:c2:56:77:52:41:2c:80:59:3a:ea:28:
72:65:c3:09:51:c4:ec:d4:c0:c4:65:e1:9d:2e:02:25:c4:26:
57:d5:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:03 2025 by rpki-client