Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3e651d-10e8-46b6-8a9b-330570dfdcfd/1/s2mxycfGu6Krdilpjg-Y1gnMi8c.roa
File: s2mxycfGu6Krdilpjg-Y1gnMi8c.roa (raw, json)
Hash identifier: fbjAtfvkJzikrJMyDo+2EsaZmndohY6DVj3WdA/XY+w=
Subject key identifier: B3:69:B1:C9:C7:C6:BB:A2:AB:76:29:69:8E:0F:98:D6:09:CC:8B:C7
Certificate issuer: /CN=ca7baeeb90502dc9316a35121586ec39b720a3dc
Certificate serial: 01856BDC8964ED8291993B4D0A72E8861038
Authority key identifier: CA:7B:AE:EB:90:50:2D:C9:31:6A:35:12:15:86:EC:39:B7:20:A3:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynuu65BQLckxajUSFYbsObcgo9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3e651d-10e8-46b6-8a9b-330570dfdcfd/1/s2mxycfGu6Krdilpjg-Y1gnMi8c.roa
Signing time: Sun 01 Jan 2023 05:44:53 +0000
ROA not before: Sun 01 Jan 2023 05:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:89:64:ed:82:91:99:3b:4d:0a:72:e8:86:10:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7baeeb90502dc9316a35121586ec39b720a3dc
Validity
Not Before: Jan 1 05:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b369b1c9c7c6bba2ab7629698e0f98d609cc8bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:40:1e:6e:75:b3:bc:9e:55:45:4a:c7:02:
49:af:07:4a:fa:bc:ab:52:66:fb:32:71:12:15:18:
71:26:d9:ba:20:7b:6e:a6:3f:94:ca:ce:d2:bd:8b:
c2:87:6a:90:46:cd:61:c2:10:44:ff:3d:5b:f3:c7:
01:a2:55:0b:f0:34:92:64:cd:8b:12:9b:8d:68:8d:
2b:b7:e3:6a:56:b2:1c:41:23:54:fd:18:3e:0f:d1:
c1:63:a2:73:56:d1:97:e6:58:d3:24:ab:75:d4:e4:
41:6a:e9:48:cc:5a:ee:01:7c:9f:5b:bf:45:32:59:
c0:eb:0d:ea:18:fe:5d:83:a0:4f:94:3c:30:dc:e7:
84:9e:2e:20:91:16:db:f2:09:0b:d1:50:2c:e6:e4:
81:06:07:06:98:fa:99:cf:70:e5:c4:9c:ca:10:ef:
40:48:03:bb:e0:0c:8f:43:07:ab:86:f1:21:aa:ef:
f4:52:49:f6:db:58:d2:f6:6e:e1:7a:a5:ac:6b:db:
c6:5e:38:82:71:d4:bb:d4:ea:84:5c:94:ba:27:5d:
b5:84:d0:bd:c4:2c:b7:a9:44:79:fe:e2:8c:e6:40:
7a:f0:26:4e:8f:03:3c:eb:d8:20:0e:43:d3:d9:b9:
23:d6:12:c7:62:d5:98:2d:72:77:8e:6c:72:2e:12:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:B1:C9:C7:C6:BB:A2:AB:76:29:69:8E:0F:98:D6:09:CC:8B:C7
X509v3 Authority Key Identifier:
keyid:CA:7B:AE:EB:90:50:2D:C9:31:6A:35:12:15:86:EC:39:B7:20:A3:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynuu65BQLckxajUSFYbsObcgo9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3e651d-10e8-46b6-8a9b-330570dfdcfd/1/s2mxycfGu6Krdilpjg-Y1gnMi8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3e651d-10e8-46b6-8a9b-330570dfdcfd/1/ynuu65BQLckxajUSFYbsObcgo9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.169.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3f:eb:50:92:a7:f0:e2:20:6d:ff:43:6c:ad:b0:ad:64:39:
67:62:65:d6:44:19:62:e5:fd:ca:26:3d:7b:84:b4:73:32:20:
75:7c:9c:12:c9:42:38:1d:59:73:72:2b:cc:6b:c6:cd:f6:f0:
e2:70:0a:45:0e:91:39:b9:c7:04:e2:aa:06:2d:70:98:79:2d:
3f:ed:ec:2f:6f:7b:fa:de:3c:d6:06:90:5e:e1:25:e3:d8:00:
bb:09:e2:d9:11:b2:62:42:3e:73:ca:5e:70:a0:fe:be:05:4a:
91:62:42:11:b1:f6:a3:4a:ee:af:87:f7:e3:f2:12:b0:d3:6f:
11:57:a7:d2:7a:1d:a8:62:98:9b:bd:0c:90:50:1b:61:93:be:
59:4c:a4:0a:f2:67:84:6c:c2:bd:9e:36:72:a1:46:c2:0d:87:
7f:20:cb:9b:2e:28:98:13:53:e6:38:3d:3a:ea:b5:a7:ef:ef:
b6:c6:b0:8c:94:9e:10:b6:2f:86:5a:c4:c8:27:56:f1:de:16:
69:95:6d:34:61:e3:2e:74:4b:10:a8:6a:d1:34:d5:d3:d9:49:
d9:92:68:19:7f:36:30:3e:99:a7:83:2e:c6:d8:e0:c0:43:bf:
d0:28:a8:b0:d6:cb:d2:fa:b8:11:c9:d9:f6:4d:13:c6:10:66:
3e:76:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:29 2025 by rpki-client