Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/TYNO3Cpvh-NPPYvKWRHI6hX37fU.roa
File: TYNO3Cpvh-NPPYvKWRHI6hX37fU.roa (raw, json)
Hash identifier: rRE9ziDAEZJs1bWxZj36Kk8JT0OQi8C4y5nJAWeaLGA=
Subject key identifier: 4D:83:4E:DC:2A:6F:87:E3:4F:3D:8B:CA:59:11:C8:EA:15:F7:ED:F5
Certificate issuer: /CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Certificate serial: B4670C
Authority key identifier: 6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/TYNO3Cpvh-NPPYvKWRHI6hX37fU.roa
Signing time: Sat 01 Jan 2022 08:04:32 +0000
ROA not before: Sat 01 Jan 2022 08:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.241.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11822860 (0xb4670c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Validity
Not Before: Jan 1 08:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d834edc2a6f87e34f3d8bca5911c8ea15f7edf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:bd:b3:1d:c9:36:0b:db:68:27:c8:96:ef:
e4:51:20:ee:ab:1a:94:35:3c:12:10:5d:e1:46:23:
e4:ea:b5:4a:56:6b:dc:6d:e0:65:b7:44:e1:ed:60:
be:08:f0:e3:d3:99:04:ab:45:ee:2d:b3:37:0d:1e:
ef:b8:1c:71:bb:5d:43:ac:85:f2:38:67:bd:bf:e9:
0d:c6:7e:64:50:d4:ca:13:9c:35:26:1c:de:ce:da:
71:0c:69:19:23:7b:d3:1e:5f:8b:88:40:e2:d8:30:
d4:e6:ef:0b:85:34:8b:3c:e8:6c:d0:21:24:10:d8:
32:33:2a:42:fb:dd:73:35:c0:54:51:77:30:ae:a8:
e3:69:c8:5a:3c:bc:a2:74:d9:99:c5:e7:1e:42:4f:
38:ff:21:c7:e5:e5:6d:8e:68:68:0a:ce:f5:f5:a8:
6d:65:17:3f:47:e4:fd:1a:c1:54:8e:7d:d2:6e:f6:
4c:3f:66:69:e8:69:02:f5:ff:27:84:22:31:23:19:
3f:f6:23:20:2b:0f:51:af:21:c5:ab:d5:4b:e0:9d:
c3:1d:49:22:5d:60:a2:af:8a:5f:6c:e7:d5:9a:91:
c9:4e:b0:f9:a9:df:8c:59:2d:3c:1a:66:5b:8d:a8:
80:c7:f3:3f:d8:0f:fc:98:ed:ca:e7:74:ef:e1:56:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:83:4E:DC:2A:6F:87:E3:4F:3D:8B:CA:59:11:C8:EA:15:F7:ED:F5
X509v3 Authority Key Identifier:
keyid:6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/TYNO3Cpvh-NPPYvKWRHI6hX37fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.55.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ef:3e:a5:c0:2b:ca:74:2f:87:34:4b:be:e5:6f:54:8a:a5:
c2:a2:70:b7:3c:b2:06:24:ff:6b:08:fb:b7:7a:1e:62:31:5e:
7a:09:58:ce:78:62:9a:c3:d5:72:b7:14:23:7f:d1:8b:fb:16:
dd:34:83:c1:f7:56:68:dc:a1:4b:8c:7f:5e:eb:80:57:59:48:
90:80:fb:d3:04:f0:ed:77:c2:90:10:64:00:e4:19:18:fe:31:
90:b4:5a:8e:54:af:28:9a:db:2d:b1:0f:01:70:d9:02:f9:5b:
e0:42:b0:c3:16:48:f1:02:2e:4c:dc:e6:65:63:4c:b9:ce:2e:
ae:29:0b:6b:1d:e8:e1:a5:4c:0c:e4:79:51:73:bf:1a:7e:84:
1e:6c:03:df:a9:bd:fc:65:63:24:f0:b9:80:cb:91:14:26:13:
57:52:39:6c:20:a7:1e:bf:15:8f:21:9e:d8:b4:62:ff:2e:d7:
b3:46:52:37:49:89:db:60:a6:60:34:c9:76:fe:51:c5:db:a7:
a2:50:4d:e9:60:ab:37:d1:fb:f6:db:14:91:a0:9d:21:87:6b:
db:45:da:46:a8:f6:c9:f4:47:45:73:95:a7:21:60:53:bc:73:
4b:d8:04:df:56:c2:de:43:bb:df:09:fa:d4:74:48:55:44:e7:
ea:fb:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:13 2025 by rpki-client