
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/uEzNWyvL5-zi2wG6wisIZYvIGW8.roa
File: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (raw, json)
Hash identifier: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=
Subject key identifier: B8:4C:CD:5B:2B:CB:E7:EC:E2:DB:01:BA:C2:2B:08:65:8B:C8:19:6F
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 019421443B51DA1C2161490C1FE883DEDD17
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/uEzNWyvL5-zi2wG6wisIZYvIGW8.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57533
IP address blocks: 91.231.97.0/24 maxlen: 24
2001:67c:568::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3b:51:da:1c:21:61:49:0c:1f:e8:83:de:dd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b84ccd5b2bcbe7ece2db01bac22b08658bc8196f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:e9:ff:c6:9a:c2:62:f0:5d:d2:ec:6f:ad:
a5:0c:8f:8a:c0:6b:d0:d5:60:f8:8d:25:34:60:38:
8c:e6:f9:64:9f:3a:35:5e:9f:95:91:14:83:df:67:
e5:fa:0b:1a:a6:32:07:5f:8b:72:03:80:c6:7a:25:
3d:65:f5:33:47:ae:85:8e:2f:8d:8a:95:b2:7e:5d:
df:3d:18:4d:09:94:be:89:14:55:04:bc:65:0e:7a:
87:b4:d1:a6:2e:08:63:a3:30:97:e7:de:50:69:02:
0f:79:4f:fa:5f:17:be:55:b5:00:4e:21:9c:b0:27:
6f:de:cb:8f:05:a3:2d:11:66:10:80:8d:ae:ff:1a:
a8:3c:e9:49:1d:a3:4d:ec:3c:b6:a2:b5:9d:fb:17:
c2:2f:04:ee:fb:6c:a9:0b:2e:b0:7a:67:17:3f:2f:
fb:e5:d4:18:19:c9:9d:e3:f8:53:4b:01:7d:b4:54:
16:93:e8:ed:03:d3:d0:27:ec:c0:fd:c0:9c:3c:c4:
c1:65:cf:23:0d:0b:eb:5a:a9:b5:b0:eb:ba:92:56:
98:a1:c5:3d:05:a8:ca:43:7d:ca:2f:f3:9c:30:d3:
34:9c:f7:18:a4:f5:fc:7f:80:eb:7e:35:90:64:1d:
be:35:23:f3:88:bf:07:66:44:f1:de:12:2b:0b:8c:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:CD:5B:2B:CB:E7:EC:E2:DB:01:BA:C2:2B:08:65:8B:C8:19:6F
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/uEzNWyvL5-zi2wG6wisIZYvIGW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.97.0/24
IPv6:
2001:67c:568::/48
Signature Algorithm: sha256WithRSAEncryption
4b:2f:67:81:a0:fd:d5:73:04:5f:35:0d:a4:a2:29:3c:b5:76:
0f:16:56:1c:3b:08:aa:55:19:b4:43:bd:32:9d:93:33:7b:4f:
37:31:3a:71:1f:75:4a:1c:07:96:cf:d1:fc:96:1d:0b:ef:5f:
58:73:ab:6c:23:3c:76:a0:ad:46:f5:4f:e5:81:e6:77:9d:ad:
d2:03:b1:1a:ec:a8:58:07:5c:07:28:41:f0:fe:e4:90:bf:66:
8f:ab:57:4c:41:03:2c:02:2a:2b:3d:9f:75:c0:56:05:97:87:
46:4b:9d:2c:ff:95:64:b6:0e:34:55:0d:c7:cd:81:e8:c5:dd:
b1:4f:69:6e:ca:1b:d3:07:12:d4:da:fd:4f:67:b1:32:50:63:
83:83:cb:e1:35:31:41:48:59:89:cc:d8:3c:94:67:5f:b3:a1:
0d:76:dc:ab:76:39:90:f6:e7:e4:bc:6a:0c:31:71:f7:1c:81:
91:5e:13:6d:24:23:f8:c8:2f:8a:00:83:39:5b:92:90:84:51:
f1:59:e4:f6:09:39:05:54:2a:05:65:f3:e3:19:c3:ec:3d:9f:
c7:01:ba:70:fd:b6:d6:47:0c:c0:3f:c6:01:42:ac:43:4e:4d:
0c:af:4b:5f:cd:06:f6:f0:62:10:02:12:86:d1:1b:6d:5a:97:
ad:7a:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:43 2025 by rpki-client