Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/391a9f-db82-4bb2-aac9-7bafbfac9184/1/yBaAVuGNh-0F09WPha4IlZP86aU.roa
File: yBaAVuGNh-0F09WPha4IlZP86aU.roa (raw, json)
Hash identifier: sCf/uu/NE7H1S5Uwievw8ftJ1UH5E9Ah3HXjYof/b8s=
Subject key identifier: C8:16:80:56:E1:8D:87:ED:05:D3:D5:8F:85:AE:08:95:93:FC:E9:A5
Certificate issuer: /CN=987e7ec85c73a7f26b7befb2aa869a2ea7a1d1c3
Certificate serial: 0189654AC25EB5B3C447C451031F8D5B26D5
Authority key identifier: 98:7E:7E:C8:5C:73:A7:F2:6B:7B:EF:B2:AA:86:9A:2E:A7:A1:D1:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH5-yFxzp_Jre--yqoaaLqeh0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/391a9f-db82-4bb2-aac9-7bafbfac9184/1/yBaAVuGNh-0F09WPha4IlZP86aU.roa
Signing time: Mon 17 Jul 2023 19:19:04 +0000
ROA not before: Mon 17 Jul 2023 19:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.190.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c2:5e:b5:b3:c4:47:c4:51:03:1f:8d:5b:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987e7ec85c73a7f26b7befb2aa869a2ea7a1d1c3
Validity
Not Before: Jul 17 19:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8168056e18d87ed05d3d58f85ae089593fce9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:2d:1d:1a:08:c4:d6:d9:31:8f:76:7c:3f:
10:b2:dc:3e:38:94:82:d6:70:30:98:50:52:b9:f9:
69:16:9a:81:e1:0e:46:ac:8a:d7:04:f8:45:8b:d0:
2b:3c:9c:f9:5e:87:48:c6:c9:d7:0d:a0:37:d4:45:
bf:c9:30:55:70:13:f1:33:e2:80:6f:aa:7a:e8:aa:
4f:e2:5f:64:da:f5:ad:83:78:5e:58:d8:39:4c:13:
1a:ac:94:77:5d:b3:f5:70:de:b2:89:d4:af:66:b6:
fc:f7:22:cc:ab:11:6f:8f:45:b2:15:46:88:7e:17:
a1:67:4e:3b:a8:bc:31:be:e6:aa:17:45:25:bf:7a:
76:b3:31:91:e6:d5:4b:a5:8d:9c:6c:4a:cf:9c:a6:
50:29:f4:9c:66:13:da:64:fe:52:e4:7a:0d:4b:95:
21:8b:5a:68:2f:51:f4:2c:68:71:4f:c0:f5:0e:02:
26:ba:aa:55:56:51:5b:0c:c4:b6:8e:b6:95:8f:fe:
0c:d1:ae:62:7a:5a:c3:58:6c:21:b0:91:c5:28:b9:
8a:1d:dc:12:dd:53:d5:30:e0:47:bb:e3:5f:12:0a:
45:8b:6f:27:b3:81:7c:48:6a:0b:5d:1c:5a:bc:f3:
0a:08:bf:83:7a:65:70:60:31:e6:71:86:87:ac:00:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:80:56:E1:8D:87:ED:05:D3:D5:8F:85:AE:08:95:93:FC:E9:A5
X509v3 Authority Key Identifier:
keyid:98:7E:7E:C8:5C:73:A7:F2:6B:7B:EF:B2:AA:86:9A:2E:A7:A1:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH5-yFxzp_Jre--yqoaaLqeh0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/391a9f-db82-4bb2-aac9-7bafbfac9184/1/yBaAVuGNh-0F09WPha4IlZP86aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/391a9f-db82-4bb2-aac9-7bafbfac9184/1/mH5-yFxzp_Jre--yqoaaLqeh0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.158.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8a:db:76:25:bf:27:25:ae:f7:bc:75:10:f0:b7:d1:9b:e2:
bb:c7:07:dc:d7:29:d7:57:ad:15:02:db:3c:0f:81:7a:06:73:
e7:3d:0e:bb:65:49:61:75:88:8f:79:aa:44:ee:11:fd:a3:63:
ea:55:86:0d:1a:82:c0:67:57:75:89:58:3b:4b:de:ae:33:15:
95:75:2c:97:e7:86:79:14:5f:95:00:bf:46:e8:ca:e7:36:88:
35:0f:6c:de:53:c3:dc:92:94:e0:56:83:6c:c7:d6:2f:e0:0e:
7b:79:69:09:c1:42:23:de:a2:06:f4:16:2b:56:b2:84:d3:ac:
7c:98:35:13:02:6e:10:66:ff:b3:01:41:a9:fc:94:d9:a7:ea:
ce:42:53:c9:df:67:e3:71:3f:4e:4a:83:5c:b2:32:31:59:05:
7a:cb:3f:81:e5:17:18:e1:d5:e0:77:28:32:32:e6:a9:f3:5f:
4f:70:8b:91:48:57:3e:04:5f:ff:dd:a3:66:bd:bf:c8:e1:5c:
36:96:40:7f:9a:da:55:1e:e7:50:52:a7:0a:b7:dc:29:18:7b:
32:32:cf:a4:05:2e:65:8d:70:91:d9:ff:4f:15:2e:50:c4:8c:
73:d5:cf:86:e0:1a:4d:74:4e:2f:78:cf:9a:f4:5a:4b:c2:0e:
eb:a3:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:39 2025 by rpki-client