Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a917a5-ea8b-48d6-b910-31d2fdf0a5e7/1/zvoEq5H3XZMyTFt8yl-fT-RXIVg.roa
File: zvoEq5H3XZMyTFt8yl-fT-RXIVg.roa (raw, json)
Hash identifier: Wo1+oes2Kfkz6arXDWwS0Jrby3lZDlVJRdPcNER7IYU=
Subject key identifier: CE:FA:04:AB:91:F7:5D:93:32:4C:5B:7C:CA:5F:9F:4F:E4:57:21:58
Certificate issuer: /CN=2f76356d101a3478ca3e5b309f022711ae3b8c46
Certificate serial: 038951FB
Authority key identifier: 2F:76:35:6D:10:1A:34:78:CA:3E:5B:30:9F:02:27:11:AE:3B:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3Y1bRAaNHjKPlswnwInEa47jEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a917a5-ea8b-48d6-b910-31d2fdf0a5e7/1/zvoEq5H3XZMyTFt8yl-fT-RXIVg.roa
Signing time: Sat 01 Jan 2022 10:01:17 +0000
ROA not before: Sat 01 Jan 2022 10:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59593
IP address blocks: 91.244.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59331067 (0x38951fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f76356d101a3478ca3e5b309f022711ae3b8c46
Validity
Not Before: Jan 1 10:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cefa04ab91f75d93324c5b7cca5f9f4fe4572158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:84:34:50:bb:06:aa:2a:f9:88:f2:ff:ab:
21:c0:b7:21:5b:3a:d0:67:68:eb:b8:11:8a:aa:3e:
72:7c:e6:3b:32:17:88:05:c7:56:3d:ec:0e:f5:70:
25:cc:81:bc:a9:cc:87:d3:41:72:89:04:f0:80:65:
3c:97:10:17:23:8a:29:d4:27:37:17:03:b3:f1:57:
03:e3:14:90:d2:2e:38:a9:b0:a0:1a:73:f7:19:b7:
0c:38:66:65:cc:07:a3:0c:f6:46:3e:63:db:b3:76:
b2:cd:d4:b1:09:d5:6a:86:d0:c6:17:d6:b8:c4:90:
46:ca:b0:42:14:c6:3c:68:36:8b:f3:43:39:65:0e:
b6:73:8c:1b:5d:9d:7f:2f:c2:6f:3c:fe:bf:3c:4d:
b4:79:c9:81:a2:14:2e:95:2b:8e:e6:11:51:95:6c:
ec:e4:fd:44:a5:d6:23:90:9d:d0:5a:67:59:f8:d4:
44:36:0f:7c:fb:1a:0f:3b:1c:73:5f:57:42:05:9a:
0d:12:65:99:ba:3e:3c:74:d9:fb:7d:6c:dc:f9:f3:
91:9b:a0:4d:70:ce:c6:27:53:e6:ed:54:25:2a:24:
0d:01:b1:4b:50:32:d0:8b:75:ff:81:fd:b2:8d:95:
6c:3f:7a:3d:79:89:fc:8c:a0:eb:ee:3c:4e:f2:d3:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FA:04:AB:91:F7:5D:93:32:4C:5B:7C:CA:5F:9F:4F:E4:57:21:58
X509v3 Authority Key Identifier:
keyid:2F:76:35:6D:10:1A:34:78:CA:3E:5B:30:9F:02:27:11:AE:3B:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3Y1bRAaNHjKPlswnwInEa47jEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a917a5-ea8b-48d6-b910-31d2fdf0a5e7/1/zvoEq5H3XZMyTFt8yl-fT-RXIVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a917a5-ea8b-48d6-b910-31d2fdf0a5e7/1/L3Y1bRAaNHjKPlswnwInEa47jEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.69.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f5:ba:7e:a1:1d:82:90:23:25:84:3c:78:c0:95:0a:46:ab:
1f:ad:1c:aa:6c:b0:ca:53:7f:68:66:51:5f:3c:c9:e5:1c:29:
38:3d:a3:6e:44:54:b8:49:f8:8a:30:b2:d8:56:88:37:f6:28:
51:d1:e9:fe:91:6a:5c:dd:8d:b5:31:33:a1:df:4e:c7:15:d8:
d0:2e:69:ff:57:da:d8:92:c5:5d:49:23:3f:16:3f:12:78:91:
ad:aa:0d:76:a8:eb:e3:ee:06:35:2d:bd:b9:01:57:c2:69:16:
67:1b:06:82:15:05:0c:db:0d:63:f1:55:af:36:9b:ed:ec:75:
74:e8:5e:cf:a6:a4:df:e6:47:d2:06:d1:97:e2:3f:05:2e:ed:
d2:b0:01:14:b1:49:12:71:50:cf:50:50:80:ed:7a:76:f7:4c:
5f:66:f8:74:04:e4:44:0b:0f:c1:3c:24:d0:45:47:df:cc:cd:
9e:4a:d6:ee:4f:e8:e6:f8:d5:eb:64:54:61:3d:b8:58:a9:2f:
e9:99:7d:19:d5:a2:db:80:01:a4:69:03:56:c9:49:27:37:5d:
a2:66:82:1c:8a:d7:51:33:ac:e3:20:38:9c:b9:0e:71:a3:33:
b9:e8:32:e4:e3:3c:fc:b5:97:fa:2a:dc:13:05:01:35:55:fe:
d5:20:33:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:08 2025 by rpki-client