Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/pLyv7pmpJhOWwtOi55q9xB85WyA.roa
File: pLyv7pmpJhOWwtOi55q9xB85WyA.roa (raw, json)
Hash identifier: 33RObDkXG18DgwgtFHiy/uus+7WPkXOfxU5zY98Hg/0=
Subject key identifier: A4:BC:AF:EE:99:A9:26:13:96:C2:D3:A2:E7:9A:BD:C4:1F:39:5B:20
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018580A3E95FE2A9B5831C4A3E6A471361CD
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/pLyv7pmpJhOWwtOi55q9xB85WyA.roa
Signing time: Thu 05 Jan 2023 06:35:03 +0000
ROA not before: Thu 05 Jan 2023 06:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 91.132.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:a3:e9:5f:e2:a9:b5:83:1c:4a:3e:6a:47:13:61:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 5 06:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4bcafee99a9261396c2d3a2e79abdc41f395b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:cf:5f:e9:97:98:d1:4c:f8:6c:0e:51:a4:
2b:b7:6e:90:d9:17:8c:6d:bd:07:96:0b:82:8c:77:
5e:24:f2:ee:f6:73:bc:a9:0a:da:a2:71:7d:6f:db:
2b:2b:3e:04:f5:a2:c8:ee:4e:4d:66:2d:bc:84:51:
5d:7e:45:11:f8:3d:f2:ad:0a:59:72:6c:f2:91:3c:
b9:70:67:9e:ed:a1:0f:3c:aa:5f:53:80:4f:72:95:
9a:eb:27:2d:53:ef:60:0f:b8:f0:d7:1a:32:b4:7a:
87:ea:71:35:f3:e8:be:0d:0c:53:80:62:c3:93:6d:
d6:57:c6:bc:6f:19:1f:c2:39:85:68:55:7a:8a:ee:
e0:90:1b:f7:c6:5e:5e:fe:cc:fc:69:46:5b:5a:c1:
9d:0d:0f:5a:f7:aa:87:12:f0:1b:c2:51:c6:88:74:
96:c0:3b:82:ef:5d:e2:2d:25:4a:bb:3e:e4:b8:26:
77:61:00:56:20:b3:fd:72:ba:ec:55:ed:e2:2e:40:
00:55:03:02:95:ac:c1:d8:d3:dc:32:72:59:cd:20:
1c:de:1c:78:2f:03:4a:9b:4b:ab:bc:82:b7:aa:5f:
f5:c1:9c:e7:bd:4c:ad:33:02:6d:3d:f2:81:87:44:
aa:b0:07:f2:82:29:6e:c1:fb:32:62:58:c1:60:44:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BC:AF:EE:99:A9:26:13:96:C2:D3:A2:E7:9A:BD:C4:1F:39:5B:20
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/pLyv7pmpJhOWwtOi55q9xB85WyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:77:08:aa:12:f7:b7:0c:89:da:8b:24:7e:71:bc:bb:a7:d8:
f9:eb:01:2d:a4:77:25:8f:6f:9f:1d:d5:21:f8:2f:c8:67:85:
32:2b:08:1b:71:df:63:72:23:a7:94:cc:28:bc:d5:12:38:7b:
80:8a:13:6f:c4:c7:1a:4e:46:1b:61:ef:4e:3f:47:88:a0:0c:
13:80:b0:d5:9e:db:69:40:d7:d6:18:a6:52:ef:f4:56:4a:5f:
34:92:e6:16:7e:38:f4:59:c2:1d:d8:37:69:67:61:40:d0:b4:
af:ee:a5:6c:4d:f1:c2:df:de:3f:c7:ae:43:09:cc:9a:b5:87:
d9:51:cd:ff:6b:51:ba:10:b1:f6:c7:f3:5e:ba:f2:a1:af:6b:
cd:b9:e7:6f:cc:5c:ee:9d:b9:67:2e:19:d8:3c:0a:39:68:3a:
4a:50:ae:34:8b:c0:54:14:a6:64:1c:9c:9f:d9:8e:ca:bd:f3:
3a:f9:ac:ef:f7:51:94:33:b0:01:13:36:56:54:ff:1d:7a:22:
59:b6:03:3f:fa:83:f7:74:12:ed:bd:e6:43:93:5a:c2:0e:aa:
b2:56:9a:31:0b:7c:aa:4a:3c:04:ed:26:94:2a:9c:5f:8a:04:
8d:0f:c7:a9:db:9e:89:03:62:22:36:3b:92:ea:4c:b6:13:4d:
f7:a8:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:49 2025 by rpki-client