Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/OUK8DH1_ZwLJTKjgkIJhkgfftEM.roa
File: OUK8DH1_ZwLJTKjgkIJhkgfftEM.roa (raw, json)
Hash identifier: sgD35TJEGdgnJCE0857reB9qQVS2kMpKGMQW25avb38=
Subject key identifier: 39:42:BC:0C:7D:7F:67:02:C9:4C:A8:E0:90:82:61:92:07:DF:B4:43
Certificate issuer: /CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Certificate serial: 01827CB0E30CB634CC005D58DD5EA816B290
Authority key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/OUK8DH1_ZwLJTKjgkIJhkgfftEM.roa
Signing time: Mon 08 Aug 2022 09:02:23 +0000
ROA not before: Mon 08 Aug 2022 09:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 91.202.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:b0:e3:0c:b6:34:cc:00:5d:58:dd:5e:a8:16:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Validity
Not Before: Aug 8 09:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3942bc0c7d7f6702c94ca8e09082619207dfb443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:23:86:c2:61:a6:f6:4f:98:6d:b9:f4:8a:
a4:26:31:d9:c9:c4:c6:5a:b6:72:42:b6:de:c7:52:
19:8f:67:92:dc:3a:3b:01:f9:83:64:1f:02:c2:54:
1a:97:bd:73:f2:96:64:66:3b:51:a2:0b:aa:dd:69:
68:46:dc:cc:81:7f:f7:97:4f:ce:74:17:db:fc:29:
8d:4e:02:a0:de:84:37:e6:48:77:06:e6:08:5f:97:
52:53:99:b3:a8:9b:46:02:bc:dc:57:b4:ba:28:25:
7b:72:dc:60:5e:71:13:53:9d:fb:a5:83:53:d7:5b:
71:67:52:66:6c:62:f6:c0:58:ef:e4:a4:2f:81:fc:
ac:17:d1:6f:cd:76:05:28:25:84:34:a6:47:b4:14:
b6:ce:98:f1:c3:08:5e:d4:05:a1:6d:ff:a9:d5:24:
99:e1:82:86:ae:26:4f:cc:06:5f:22:05:7e:77:4c:
fe:04:12:9a:06:74:4f:3e:d2:74:62:67:40:f9:35:
f8:46:08:68:8e:03:ad:a9:40:06:6c:56:6d:bf:da:
53:18:2e:8d:eb:c8:41:84:65:f0:68:26:e6:f3:28:
b5:8d:6c:08:62:07:83:7a:69:c6:60:4d:3e:c1:ad:
af:1b:6e:be:2f:d8:73:50:bb:99:a2:cf:fc:53:6b:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:42:BC:0C:7D:7F:67:02:C9:4C:A8:E0:90:82:61:92:07:DF:B4:43
X509v3 Authority Key Identifier:
keyid:69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/OUK8DH1_ZwLJTKjgkIJhkgfftEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
01:23:13:3c:29:5a:ca:b2:97:80:e8:4a:49:f6:0b:8c:a7:9c:
af:0a:fa:75:ac:4d:92:ed:66:d9:81:b7:5a:ac:85:d0:f4:a1:
4c:3a:f1:af:fc:ae:3a:cb:35:02:46:d2:01:02:05:67:bd:a8:
20:fe:4e:63:49:7d:3d:b1:59:cc:fc:03:e1:6d:37:d3:83:8d:
50:d1:ef:a6:b4:74:52:7b:44:96:55:18:8b:56:5c:17:ab:09:
3e:79:16:6f:85:ba:66:79:84:0e:c5:2f:db:86:41:1f:e2:ca:
ec:0d:63:18:8e:72:aa:1e:a5:70:5b:fa:e4:c5:e0:bd:13:18:
65:0c:07:6a:c8:94:60:aa:a9:38:78:55:5a:11:74:fa:02:ec:
23:27:f2:a7:03:9f:d2:c4:67:ab:cd:5c:d7:a5:04:24:d7:25:
ec:59:da:01:a7:d9:52:f4:76:ce:b4:f0:7f:f5:f8:f4:bb:b1:
cb:90:1c:83:6a:2c:cb:f0:9c:f5:da:e6:6f:74:0e:12:62:6f:
06:f6:61:6d:f1:4b:d0:66:ef:e3:60:07:b8:54:e5:d7:ec:8c:
80:ee:99:dc:27:83:8b:9b:85:e4:fb:29:e0:46:fc:b3:40:a7:
fd:99:31:4d:77:99:a6:d8:ef:cb:d6:5c:97:6d:fc:1e:d7:16:
79:ba:0c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:07 2025 by rpki-client