Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a917a5-ea8b-48d6-b910-31d2fdf0a5e7/1/uyIvNdwHXaeCS5xDk7_cUMu6TVQ.roa
File: uyIvNdwHXaeCS5xDk7_cUMu6TVQ.roa (raw, json)
Hash identifier: P3zGC1BdPpmflY+RWCfy6YvZY76U9OzzqyMPkDWLkZw=
Subject key identifier: BB:22:2F:35:DC:07:5D:A7:82:4B:9C:43:93:BF:DC:50:CB:BA:4D:54
Certificate issuer: /CN=2f76356d101a3478ca3e5b309f022711ae3b8c46
Certificate serial: 01856C1C94B4F45992EAE06C64683BA0B374
Authority key identifier: 2F:76:35:6D:10:1A:34:78:CA:3E:5B:30:9F:02:27:11:AE:3B:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3Y1bRAaNHjKPlswnwInEa47jEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a917a5-ea8b-48d6-b910-31d2fdf0a5e7/1/uyIvNdwHXaeCS5xDk7_cUMu6TVQ.roa
Signing time: Sun 01 Jan 2023 06:54:50 +0000
ROA not before: Sun 01 Jan 2023 06:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59593
IP address blocks: 91.244.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:94:b4:f4:59:92:ea:e0:6c:64:68:3b:a0:b3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f76356d101a3478ca3e5b309f022711ae3b8c46
Validity
Not Before: Jan 1 06:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb222f35dc075da7824b9c4393bfdc50cbba4d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:60:1c:65:5c:27:3a:34:90:5b:85:61:f2:
32:ce:fd:b5:71:e1:8d:95:d8:80:81:1f:83:80:a5:
da:81:92:60:5e:fc:38:95:03:6f:61:9a:59:d8:b5:
fc:b1:68:62:96:73:2f:1d:1c:e4:f4:0a:87:59:b4:
05:23:24:99:27:3f:4b:24:8d:b9:69:ed:09:6c:d9:
7a:a7:74:f9:b5:0f:1c:a4:28:bc:ae:8c:51:47:f1:
8f:d7:b3:2a:37:c8:f0:a7:71:c1:1b:09:13:c0:35:
c9:12:0c:93:ea:91:b1:af:99:b9:5d:31:1c:d5:6f:
1a:44:32:17:3e:39:55:99:af:dc:aa:4b:4b:9c:64:
ca:ea:be:84:e2:a0:a0:62:6e:ab:0a:64:db:58:a1:
dc:b0:9d:3c:59:59:7d:d8:3c:fc:be:95:33:8c:b6:
04:c0:99:d0:e8:79:c9:eb:9e:73:17:82:a3:a4:76:
98:15:c1:1f:86:b9:2a:56:0b:a5:25:25:c0:23:74:
b2:f5:47:d6:7f:2a:b6:29:92:53:e9:32:cc:3d:29:
42:d0:02:f2:0f:22:e9:2a:2a:b9:33:4b:bd:f9:97:
0f:74:32:13:07:42:a4:44:34:bc:c0:01:0e:91:bc:
b6:a1:ec:0b:7a:b7:cf:b9:9b:c0:fd:81:00:54:81:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:2F:35:DC:07:5D:A7:82:4B:9C:43:93:BF:DC:50:CB:BA:4D:54
X509v3 Authority Key Identifier:
keyid:2F:76:35:6D:10:1A:34:78:CA:3E:5B:30:9F:02:27:11:AE:3B:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3Y1bRAaNHjKPlswnwInEa47jEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a917a5-ea8b-48d6-b910-31d2fdf0a5e7/1/uyIvNdwHXaeCS5xDk7_cUMu6TVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a917a5-ea8b-48d6-b910-31d2fdf0a5e7/1/L3Y1bRAaNHjKPlswnwInEa47jEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.69.0/24
Signature Algorithm: sha256WithRSAEncryption
df:a6:21:d6:24:f3:f2:7e:86:19:e3:9b:4e:e1:16:3d:a7:19:
bf:e3:ac:47:4b:61:34:bc:fc:1c:9e:1e:ce:7d:db:a5:b4:2c:
e1:d6:d5:61:82:d2:a1:5d:ba:d7:2d:5e:bb:58:d0:00:6e:55:
c2:c2:c2:6f:ae:2e:ed:db:ea:31:67:f6:dd:09:f4:3b:27:49:
a0:a9:88:15:60:3e:6e:18:36:4f:6c:31:ad:24:44:1b:a4:45:
36:71:e5:f8:3d:ce:ad:8c:3d:7f:5f:ae:ec:0a:9e:00:42:67:
56:66:6b:63:e8:a3:03:65:76:86:cf:d1:90:be:a7:7b:57:8f:
64:17:98:f2:c0:a4:ea:4d:4c:28:30:a6:c9:2a:19:5c:78:2c:
6a:6a:81:ed:7d:e2:36:ed:44:24:62:d2:66:e9:86:74:18:44:
ae:f4:14:20:e5:a9:b1:07:e7:0c:56:92:e9:15:20:d5:ff:3a:
b0:63:2a:71:75:c3:28:49:fa:bd:5b:60:4d:fd:9e:ce:7a:6b:
a8:97:26:04:72:1c:94:21:57:7f:3a:69:c4:95:9a:7a:fd:4c:
da:6f:77:ae:a8:d8:54:ef:55:ee:d0:2d:bf:95:c4:b6:7e:13:
6e:62:4f:33:97:c2:c7:1a:2d:3a:c0:f0:2a:42:fe:01:45:ec:
ce:e9:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:02 2025 by rpki-client