Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/bsPlgtSTewhtejJlHEC16VB8iFk.roa
File: bsPlgtSTewhtejJlHEC16VB8iFk.roa (raw, json)
Hash identifier: yN5B+JirZw1zjCURfHVJqNEYm6kfWTIMJJcnKlwz3k4=
Subject key identifier: 6E:C3:E5:82:D4:93:7B:08:6D:7A:32:65:1C:40:B5:E9:50:7C:88:59
Certificate issuer: /CN=e4e1770df8c6e803fceb364c868e3246e4d33742
Certificate serial: 019425FC5E9B9294C4483AC80FFB8211831D
Authority key identifier: E4:E1:77:0D:F8:C6:E8:03:FC:EB:36:4C:86:8E:32:46:E4:D3:37:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF3DfjG6AP86zZMho4yRuTTN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/bsPlgtSTewhtejJlHEC16VB8iFk.roa
Signing time: Thu 02 Jan 2025 07:48:03 +0000
ROA not before: Thu 02 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57122
IP address blocks: 91.230.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5e:9b:92:94:c4:48:3a:c8:0f:fb:82:11:83:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e1770df8c6e803fceb364c868e3246e4d33742
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ec3e582d4937b086d7a32651c40b5e9507c8859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:db:cb:09:0d:d2:90:0d:d5:d8:93:09:aa:
66:b5:7f:ef:49:00:4b:97:dd:b3:19:9e:7b:5c:d0:
9b:91:08:96:5e:2b:45:26:f1:bd:a6:c5:e5:14:30:
93:46:90:c4:ae:45:b8:7e:09:60:0e:1e:97:54:9d:
5d:46:7d:9d:91:18:96:0d:00:18:f4:09:00:cd:77:
3e:93:1b:e8:54:31:86:ca:8f:9f:b6:ac:a4:f8:5e:
92:64:60:e0:0e:91:fc:ee:76:78:7a:cb:76:02:ea:
3f:df:51:6d:63:6a:73:79:37:2c:de:12:4c:20:4c:
dc:ea:94:36:f4:70:e1:d5:03:91:68:c6:f2:6a:fc:
7f:8d:17:db:06:bd:34:f5:45:aa:bc:43:33:60:ca:
82:7e:22:b2:97:fd:1e:b2:ef:25:18:47:9d:7f:f9:
ae:a8:e4:c1:48:b5:af:43:f2:f8:d5:0e:a3:d3:73:
38:ad:7f:ba:0a:d3:e6:2c:e3:22:20:b5:01:7a:23:
9b:54:65:41:ec:6c:75:ff:0f:66:08:2f:77:9b:a9:
5b:52:ad:f6:8d:a5:8b:0c:3e:55:61:9c:6a:cd:ae:
73:0f:ca:17:c4:6e:b9:41:1a:5f:77:cd:1b:ff:14:
f9:c1:d3:78:69:a5:3e:7c:70:f4:4d:db:a6:73:b0:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C3:E5:82:D4:93:7B:08:6D:7A:32:65:1C:40:B5:E9:50:7C:88:59
X509v3 Authority Key Identifier:
keyid:E4:E1:77:0D:F8:C6:E8:03:FC:EB:36:4C:86:8E:32:46:E4:D3:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF3DfjG6AP86zZMho4yRuTTN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/bsPlgtSTewhtejJlHEC16VB8iFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/5OF3DfjG6AP86zZMho4yRuTTN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:56:f7:7f:56:b2:f6:bf:23:b6:80:a6:dd:c1:ae:76:b4:5d:
38:dc:b0:d9:ac:93:20:ac:02:dd:dc:8d:5f:db:16:9e:a9:4c:
64:97:11:7c:c8:a6:40:7d:36:c2:7f:2b:26:b3:9a:8c:90:f3:
5a:48:2b:06:9c:74:ac:be:92:7c:5b:33:76:8a:f0:1e:af:9a:
5a:3f:99:8c:e7:ec:5d:5a:21:17:27:13:a4:9d:3d:2d:6e:91:
a1:c6:e1:ba:41:54:0d:da:9d:8b:cf:c5:87:c7:95:f4:d9:5d:
9e:37:4e:29:c1:18:2a:ff:c7:0c:d1:9e:eb:d9:8a:7e:fc:d0:
17:a4:9a:5e:a7:6d:84:fb:4e:ff:d6:85:9a:cc:f1:e3:65:7a:
86:24:09:36:58:7c:57:43:80:3f:01:a7:9c:0c:cb:f1:57:36:
fc:88:91:00:0b:3c:b0:02:11:05:aa:ac:17:1c:ac:36:a6:5d:
c1:a0:a9:25:0c:56:c1:71:7f:5c:d2:d5:4f:4c:36:6d:9b:2f:
52:bd:31:f9:19:7a:6c:77:f3:52:53:68:d1:00:a1:d8:bd:71:
42:c3:db:94:f1:85:1e:0d:20:48:a7:40:54:ef:4f:3f:45:a1:
38:89:ab:32:fe:50:a2:e7:8c:71:3f:0c:8a:90:0b:a0:5d:a7:
f3:81:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:38 2025 by rpki-client