Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/TA33cBaeT_PxTkoehPSm-MChmOs.roa
File: TA33cBaeT_PxTkoehPSm-MChmOs.roa (raw, json)
Hash identifier: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=
Subject key identifier: 4C:0D:F7:70:16:9E:4F:F3:F1:4E:4A:1E:84:F4:A6:F8:C0:A1:98:EB
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 01941FFAAF14C1DD6932DDC8B8188C7723C8
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/TA33cBaeT_PxTkoehPSm-MChmOs.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24858
IP address blocks: 91.232.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:af:14:c1:dd:69:32:dd:c8:b8:18:8c:77:23:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c0df770169e4ff3f14e4a1e84f4a6f8c0a198eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:9a:d4:c2:0e:e7:ee:47:ea:c4:f3:ae:ff:
b5:fe:d1:4f:6a:5d:27:6a:00:76:c2:e3:3f:f7:a5:
10:0f:b3:64:7c:72:af:02:90:00:42:4f:5d:95:53:
c0:b0:09:14:df:59:fd:3f:9e:b1:99:b9:53:da:79:
a5:83:dd:8d:3a:bb:4f:0e:8e:5b:19:85:25:8c:44:
63:77:40:e5:15:2e:01:06:3d:e7:56:2e:f5:25:98:
29:05:b6:c4:9f:97:fa:be:6d:43:09:7d:3e:35:97:
48:92:d1:c0:c5:c3:68:13:e6:71:61:d0:54:6f:c9:
24:3c:11:47:52:cb:8b:b7:69:1a:30:28:b0:c5:e3:
32:b7:81:a8:26:b6:9e:0a:b1:da:dd:0b:1a:28:d1:
06:7f:e7:a9:49:17:b7:79:c2:f3:1d:d0:81:8e:50:
49:c7:cf:64:27:54:1c:44:aa:63:d7:99:44:23:69:
4a:0a:94:ef:01:06:0a:f6:a8:69:0b:d5:4b:fe:44:
6c:c1:48:46:09:42:b3:76:e6:aa:69:43:5e:c6:21:
68:73:c4:13:54:16:ce:a1:a1:dc:70:08:7a:41:ab:
5d:79:6e:d8:27:bf:d5:02:cf:e7:84:61:30:7b:6a:
63:74:b9:e4:c8:02:98:79:25:a8:49:f5:97:29:db:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0D:F7:70:16:9E:4F:F3:F1:4E:4A:1E:84:F4:A6:F8:C0:A1:98:EB
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/TA33cBaeT_PxTkoehPSm-MChmOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5f:e3:12:61:8a:09:af:e7:1e:51:51:64:d1:76:18:50:64:
a6:ea:4c:10:0a:6b:1f:83:98:69:d3:19:14:68:4d:b9:eb:7f:
08:03:4a:fe:e2:7d:fc:9f:d0:74:b6:3b:d5:c2:1d:43:f5:4c:
cc:21:0d:b1:67:70:76:6a:5d:66:d2:98:40:2a:4e:6d:cf:c3:
ea:a6:5a:2a:17:f6:b0:dc:7e:36:ca:2a:b9:ac:a9:39:bd:eb:
86:52:0f:bb:e5:46:3a:00:1d:fa:0c:41:12:37:13:fe:0a:66:
bb:46:d2:9b:ca:94:d9:6c:5f:f5:31:08:b1:70:78:ce:24:e0:
fb:33:9d:bf:13:67:40:b6:7d:2c:8a:be:90:97:f2:a8:4c:d7:
79:25:00:c4:44:ab:f0:b7:3b:fc:78:be:e3:56:18:32:a3:0f:
9e:43:71:a2:44:cd:fa:a8:68:4e:b3:67:91:81:40:fd:aa:74:
6b:89:ea:2e:ce:90:9a:98:06:a7:42:1f:22:c6:7e:df:13:22:
50:55:cf:bf:91:cd:41:32:b3:b9:9e:8b:1c:75:ab:69:3f:d4:
fd:b3:01:99:04:ff:97:b4:33:a1:48:63:35:e2:df:13:87:de:
24:36:62:ef:24:95:10:95:0c:7a:95:7f:0d:39:64:cc:77:04:
54:1f:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:03 2025 by rpki-client