Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa
File: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (raw, json)
Hash identifier: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=
Subject key identifier: C8:EE:8C:BB:3C:82:7E:A3:E5:FC:17:7E:E5:3F:C4:51:90:09:8A:ED
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019422FAFE745AC556C9E329382E721D1B6C
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa
Signing time: Wed 01 Jan 2025 17:47:41 +0000
ROA not before: Wed 01 Jan 2025 17:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198048
IP address blocks: 91.231.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fe:74:5a:c5:56:c9:e3:29:38:2e:72:1d:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jan 1 17:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8ee8cbb3c827ea3e5fc177ee53fc45190098aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:b2:8d:f2:39:37:03:c7:79:90:6c:48:c1:
7f:de:55:65:ba:cf:a0:ac:94:6d:ff:97:e5:8b:61:
f1:fa:14:89:22:be:8b:3e:5d:9c:59:c4:e6:a0:74:
10:af:56:e9:63:93:6d:86:6f:b6:72:01:e6:89:86:
4f:57:d4:cc:e5:99:21:85:f8:ad:07:9d:5e:6b:85:
1e:3a:81:e8:a0:0f:18:4c:8c:af:17:49:a3:0e:02:
43:fe:b9:0d:26:ca:07:b5:48:89:86:1a:7b:ca:81:
01:cc:21:40:c5:c8:1d:c3:12:69:e7:eb:7d:dc:7b:
d9:7c:4f:6b:57:54:a2:0a:45:74:10:31:ce:87:05:
1a:87:2b:3f:92:c7:c5:ee:f4:97:27:54:e9:84:71:
86:7e:99:dd:10:bb:27:3c:a3:d1:0e:f5:2c:da:3e:
50:92:6c:f6:cf:38:5f:d7:83:7b:a3:77:a5:51:0a:
4a:a7:f7:4c:5e:79:6f:c0:4f:c5:f0:9f:d5:3c:7e:
c0:e6:af:af:d6:83:84:20:7c:4b:3f:32:07:14:ca:
a8:b6:25:27:20:cf:37:fb:b1:aa:0c:dc:ef:5b:2c:
83:20:af:17:05:05:ee:f4:b9:9b:f9:44:75:a0:6b:
d1:e9:e6:30:66:61:4b:2f:01:cc:c4:cc:a6:30:eb:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EE:8C:BB:3C:82:7E:A3:E5:FC:17:7E:E5:3F:C4:51:90:09:8A:ED
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.72.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:90:3f:0a:27:8f:90:54:0a:bd:21:f4:0b:07:08:7c:55:03:
16:fe:0b:b1:d4:74:01:a0:99:a9:91:63:9a:a4:e6:87:04:41:
d8:d6:f4:8d:39:a0:32:78:28:dc:2f:0d:ad:fb:27:73:aa:2b:
60:bf:47:53:ef:8c:57:90:26:2b:cf:fb:bf:93:70:c9:ef:b9:
7c:5a:85:16:52:44:1a:16:f9:bb:8d:37:8c:a5:af:1e:62:ab:
00:39:6c:a4:41:6e:b8:99:f0:a1:67:77:9a:16:4c:13:29:67:
f2:6e:d9:fc:5e:3f:fd:d6:c0:57:2e:1c:7e:d1:72:e6:bd:9e:
6a:a7:d9:19:4a:c8:3e:0d:ae:82:53:d1:4e:09:39:5f:d8:f3:
c2:b6:c3:10:63:32:4f:0b:03:83:f3:8b:3d:ce:74:97:52:ad:
cf:81:33:03:b3:56:9d:0f:a8:34:ca:9e:37:19:a4:c0:9c:47:
2a:eb:ce:79:93:b3:f1:35:d2:aa:06:8a:e9:65:15:b3:a1:e9:
49:d6:81:25:c0:22:54:b1:ca:5e:16:ee:8e:21:86:93:cf:3d:
2f:06:62:51:81:ac:a3:cf:27:97:59:7b:b7:2d:e9:ca:60:8e:
be:99:ac:f1:09:17:ce:7b:be:2d:e8:99:fc:d5:f0:a0:e2:74:
50:4f:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:09 2025 by rpki-client