Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/fgGzcQHkgvy017kTpKRY0I3BpTU.roa
File: fgGzcQHkgvy017kTpKRY0I3BpTU.roa (raw, json)
Hash identifier: wEs+oYfP4enDgmXEK97qJA74G5w/hDecdyvcNQaGYi8=
Subject key identifier: 7E:01:B3:71:01:E4:82:FC:B4:D7:B9:13:A4:A4:58:D0:8D:C1:A5:35
Certificate issuer: /CN=9c7ef2852d4cb2eabc978ec1c5a1a4d09e04afb5
Certificate serial: 0184CE36FE06F1602A9FB9E0BF107F20C3AD
Authority key identifier: 9C:7E:F2:85:2D:4C:B2:EA:BC:97:8E:C1:C5:A1:A4:D0:9E:04:AF:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH7yhS1Msuq8l47BxaGk0J4Er7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/fgGzcQHkgvy017kTpKRY0I3BpTU.roa
Signing time: Thu 01 Dec 2022 15:03:41 +0000
ROA not before: Thu 01 Dec 2022 15:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 91.199.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:36:fe:06:f1:60:2a:9f:b9:e0:bf:10:7f:20:c3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7ef2852d4cb2eabc978ec1c5a1a4d09e04afb5
Validity
Not Before: Dec 1 15:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e01b37101e482fcb4d7b913a4a458d08dc1a535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:c2:7a:ee:7f:12:9e:8c:fe:9c:c5:d1:ec:
e4:cc:23:71:1c:54:dd:f5:ea:4b:4f:b7:63:28:ed:
2d:5a:32:03:f9:f4:84:fc:9d:65:60:ba:40:da:18:
81:cf:96:6d:ad:24:e9:86:1a:f7:b4:55:49:f8:cd:
18:ae:16:df:8e:42:85:77:3b:d8:80:cc:3c:79:fc:
b3:f6:39:a7:b4:30:a7:ef:78:e5:4e:50:cc:fd:86:
2d:70:fb:c0:be:df:0f:bc:7c:e9:70:92:0f:e4:8e:
2e:96:dc:9a:60:98:b6:b1:27:87:e2:da:15:a0:aa:
7f:e5:c3:fb:0c:9f:a5:39:73:a5:69:6a:1d:4a:91:
fc:af:ba:ad:bf:ef:43:ca:5b:13:ec:db:f8:8c:68:
9f:90:96:12:13:76:63:c7:94:7a:78:b4:63:dc:04:
57:3e:85:4d:ae:ff:99:7d:19:b6:b8:f3:ef:eb:01:
90:6e:6d:d8:07:f1:db:9c:0c:45:1a:82:80:5d:05:
6d:5a:46:85:c1:1c:40:86:1e:c8:fa:8e:15:d7:32:
36:98:b0:ec:e7:2b:2c:5d:7e:41:d4:0d:b7:35:4a:
f6:cf:ce:b2:70:34:fe:42:e9:54:86:0c:e6:1b:ee:
68:c3:81:da:8f:12:90:b4:3d:08:2f:a4:b1:66:89:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:01:B3:71:01:E4:82:FC:B4:D7:B9:13:A4:A4:58:D0:8D:C1:A5:35
X509v3 Authority Key Identifier:
keyid:9C:7E:F2:85:2D:4C:B2:EA:BC:97:8E:C1:C5:A1:A4:D0:9E:04:AF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH7yhS1Msuq8l47BxaGk0J4Er7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/fgGzcQHkgvy017kTpKRY0I3BpTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/nH7yhS1Msuq8l47BxaGk0J4Er7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.133.0/24
Signature Algorithm: sha256WithRSAEncryption
20:70:8d:36:cd:23:a5:da:22:34:30:1b:04:f9:41:dd:a7:f8:
c0:c7:17:b6:fd:2f:84:eb:fa:c2:1a:79:0b:08:5a:ed:08:1c:
ef:ee:c8:5c:23:ad:5d:d8:0a:a7:2b:18:1d:b5:ac:98:b5:f7:
46:93:ba:9e:88:2a:64:fb:bb:97:60:ae:48:0f:d3:42:1f:9f:
ed:3d:84:b0:39:fd:60:b0:75:f2:a2:b3:ce:9b:2f:62:86:5b:
38:3c:45:a6:03:5b:bd:53:e3:b6:11:77:b8:30:9d:2f:78:86:
95:7c:b1:6e:13:06:5b:54:b8:ad:10:cf:bb:b8:bf:6d:6c:7c:
3f:16:cf:4b:f6:33:51:d7:69:91:43:19:a7:77:c5:71:8f:19:
2e:44:5c:f8:4f:d9:f0:27:c0:6b:e1:69:67:54:42:c6:4b:f4:
e6:ec:4d:72:d6:18:3b:81:55:1f:6f:0f:e2:ca:71:e5:24:57:
e2:b1:86:4d:cb:5b:2b:76:f4:fc:3f:c3:e0:ea:8e:7b:54:74:
f8:e9:a4:26:fd:43:0c:4b:32:3b:5d:64:57:2f:e3:90:7c:c4:
cb:bf:ee:48:24:00:f7:d2:11:a9:5a:d7:99:b9:15:43:57:c9:
97:06:b3:f5:77:22:8d:9f:0d:05:0f:02:10:f5:9b:0d:32:3c:
57:80:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:41 2025 by rpki-client