Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa
File: B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa (raw, json)
Hash identifier: towVudD3ZHXUrLOMltR/8PyVnF7v/kv+y5JbOeuwBgs=
Subject key identifier: 07:F4:E4:DE:02:FE:A7:F6:83:30:6C:63:F2:61:50:5F:3E:E9:E8:85
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019442D0AACD1563D37EC5DC8B7A5C0490CE
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa
Signing time: Tue 07 Jan 2025 22:09:19 +0000
ROA not before: Tue 07 Jan 2025 22:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210574
IP address blocks: 91.151.90.0/24 maxlen: 24
91.151.93.0/24 maxlen: 24
213.142.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:d0:aa:cd:15:63:d3:7e:c5:dc:8b:7a:5c:04:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 7 22:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07f4e4de02fea7f683306c63f261505f3ee9e885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:40:97:0e:5f:8e:d5:48:a6:99:eb:bb:a1:
53:89:a7:9e:09:ce:7a:cf:f2:bc:fd:da:4d:74:31:
17:54:ac:ac:5b:04:f3:29:6a:32:21:3e:38:71:d9:
a7:41:37:06:f0:90:49:ca:a0:25:f2:aa:35:ad:5a:
1b:0b:74:c2:5c:2e:e3:0c:6d:f4:d8:8a:fd:dc:9b:
98:08:44:8b:b7:d5:54:fd:3b:70:a6:9b:3e:24:1a:
6b:04:bc:00:7f:fa:32:e7:25:27:c2:51:68:7e:4c:
1b:4c:11:10:ee:a6:70:f6:75:69:32:13:b9:c2:02:
64:35:32:fb:6b:8c:91:d1:e1:26:bd:96:85:2d:00:
aa:4a:1a:cc:f6:87:eb:31:48:4a:72:22:ca:3f:b5:
04:2b:01:54:b1:e1:4a:81:9f:bf:28:0b:f6:b1:b7:
4a:3f:c8:e1:d2:da:5c:ac:10:62:b5:b5:ef:37:54:
00:e3:e3:5a:34:39:bd:ef:27:b9:63:af:19:d1:ed:
71:c8:31:65:63:37:1f:3b:95:1b:85:39:69:5d:8c:
05:9d:82:d9:1e:11:39:d1:e8:d1:7a:34:1e:75:eb:
fb:8c:81:ae:4e:2f:1b:a9:4a:0b:f2:14:ed:e2:28:
fd:81:61:01:82:d5:3f:91:68:cf:f5:db:0e:3c:9b:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F4:E4:DE:02:FE:A7:F6:83:30:6C:63:F2:61:50:5F:3E:E9:E8:85
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.90.0/24
91.151.93.0/24
213.142.157.0/24
Signature Algorithm: sha256WithRSAEncryption
60:27:c5:65:58:fd:49:3d:90:86:60:a8:10:ca:c7:f7:45:68:
d4:c2:35:1d:7b:fc:55:84:9c:e1:97:4c:10:e6:7d:e6:6a:06:
1c:2c:13:f4:ee:59:3f:1d:10:a3:68:9a:c9:3c:da:d5:ac:f7:
c5:e9:c5:15:04:cf:4e:4c:6f:11:ae:07:4e:1c:0f:4d:02:53:
69:f2:db:76:a9:d1:d9:ec:7d:a0:4a:d1:16:f3:80:d6:b8:4a:
62:ec:6a:44:2f:f2:c3:0b:60:a7:05:c8:d6:19:79:18:70:36:
60:28:d0:ba:66:32:5e:a2:a4:9c:1c:08:e1:d8:4f:9e:99:9a:
f3:d8:7b:7a:49:51:15:ce:ea:49:6e:c2:8d:da:e0:b2:2b:0d:
0f:c3:ce:50:6c:2b:33:e2:d0:6a:5b:d4:90:cf:22:42:b6:39:
7c:bc:c3:db:6e:ed:cc:13:38:db:86:77:cd:d3:56:cc:60:6b:
f3:19:72:42:31:e5:2b:9e:a6:12:e9:b2:ce:be:ae:9c:16:8b:
c6:eb:c0:01:68:0b:3e:1d:18:35:9e:96:ee:2a:b7:25:cf:fb:
c6:42:8c:4b:c4:25:cc:7c:7e:4b:59:b5:14:08:7d:d0:6b:1b:
69:6d:9e:da:50:6b:f8:9b:9f:97:ce:58:66:e1:7b:d7:4a:ce:
c9:b6:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:44 2025 by rpki-client