Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/g5dObdUrwbFQidi0BNVU8a1JEFk.roa
File: g5dObdUrwbFQidi0BNVU8a1JEFk.roa (raw, json)
Hash identifier: +VjHifvfXur6+BVw/dDLiwj2v/1Es+V33t//jUh1woY=
Subject key identifier: 83:97:4E:6D:D5:2B:C1:B1:50:89:D8:B4:04:D5:54:F1:AD:49:10:59
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0181D543A4888063A8C0A49375596C7CBE29
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/g5dObdUrwbFQidi0BNVU8a1JEFk.roa
Signing time: Wed 06 Jul 2022 20:46:28 +0000
ROA not before: Wed 06 Jul 2022 20:46:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.245.239.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:43:a4:88:80:63:a8:c0:a4:93:75:59:6c:7c:be:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jul 6 20:46:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83974e6dd52bc1b15089d8b404d554f1ad491059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:7e:6f:b5:06:dc:5c:06:ca:db:9e:fe:2c:
9c:10:ed:47:2f:1a:32:56:9f:20:9f:0d:be:94:7a:
33:42:f0:88:c6:ba:e6:ae:61:69:77:ae:50:d2:e2:
a6:b7:90:6e:d4:c0:ea:b3:3a:d4:b3:42:0f:f8:13:
91:ec:c2:bf:be:81:df:61:7a:3d:a3:ff:d9:41:df:
5c:e5:1d:57:4a:e5:90:fc:30:60:62:02:f4:90:f0:
b4:93:30:9b:d2:20:30:9c:8b:9d:46:72:c0:a7:42:
df:23:f5:87:c3:69:86:fb:f0:21:a3:41:e6:58:4d:
e3:28:a0:c3:10:7f:37:35:f1:f1:97:59:20:37:80:
ab:7c:2a:f8:da:67:6b:50:02:22:9b:ea:da:95:c4:
9e:5a:31:18:9b:e3:60:9f:82:0a:f1:3d:ad:5e:ba:
c2:5e:b1:44:ae:d7:dc:b7:13:1a:7d:7e:a0:d1:3c:
8d:c4:53:5e:95:08:e1:cb:c9:4f:12:e9:13:ba:83:
3b:7d:8c:2f:75:f6:13:28:d8:7b:49:44:bd:84:5a:
47:71:8f:e0:7d:cc:c4:de:47:b3:a7:a2:1d:67:bb:
82:5a:92:70:cd:9b:f6:58:7a:b7:1f:78:fc:b8:76:
cf:7f:2c:3a:63:a8:9a:e8:db:3d:5b:a3:30:66:27:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:4E:6D:D5:2B:C1:B1:50:89:D8:B4:04:D5:54:F1:AD:49:10:59
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/g5dObdUrwbFQidi0BNVU8a1JEFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.239.0/24
95.214.92.0/24
95.214.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4d:ec:a7:0c:e2:c8:f7:de:80:a5:c3:50:80:50:9f:4b:e8:
cf:78:6d:48:c0:c3:0a:43:e9:09:43:00:1e:c3:1f:e8:48:bb:
91:17:b8:13:68:71:4f:a9:4d:76:d5:55:6e:c1:75:f7:e7:46:
1e:0a:00:c1:cc:3f:00:0c:df:2f:53:62:78:ed:7d:cd:e4:e1:
76:3b:4d:82:a2:91:8a:48:4c:df:ad:50:3f:b7:d4:0a:51:13:
28:bf:fc:42:86:88:c3:93:3c:56:42:5d:76:14:44:27:34:45:
db:04:e4:1b:4e:7a:ae:e8:6f:b0:26:1f:47:94:7c:0b:e1:78:
ae:03:ec:81:6b:2e:0e:5e:1f:47:06:54:32:b7:6e:88:ff:65:
e9:52:0e:1d:e6:aa:76:e8:a8:dd:62:66:84:53:d8:fd:73:76:
0f:6c:0e:a2:6a:86:02:79:67:7c:ac:f6:88:95:05:28:4e:96:
f3:e6:79:96:2a:e6:4c:13:31:29:a0:bc:19:ef:cc:79:d4:84:
ed:dd:f6:f1:55:89:1e:91:4a:05:39:cf:3c:1b:bf:78:b7:73:
fa:25:48:1f:5c:12:a5:19:b7:e5:81:b3:bb:ab:b4:1f:c8:86:
3f:9f:49:0d:a4:26:92:42:c8:61:e6:4b:7b:c6:27:97:28:12:
59:7a:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:37 2025 by rpki-client