Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/CRZRtehztTtgWzQtbQPSWf6XW0o.roa
File: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (raw, json)
Hash identifier: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=
Subject key identifier: 09:16:51:B5:E8:73:B5:3B:60:5B:34:2D:6D:03:D2:59:FE:97:5B:4A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBC67DBB0811AFB5399984FAAF848
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/CRZRtehztTtgWzQtbQPSWf6XW0o.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.200.223.0/24 maxlen: 24
91.226.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bc:67:db:b0:81:1a:fb:53:99:98:4f:aa:f8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=091651b5e873b53b605b342d6d03d259fe975b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:5c:21:36:fe:6a:36:1f:46:07:a8:f0:1c:
1c:0d:14:dd:5b:11:a3:71:20:05:17:8e:59:f8:b0:
2f:9d:27:bc:98:ff:75:7d:52:cf:53:4a:86:54:85:
2d:38:85:3e:ab:ba:b9:8e:c0:83:d3:a7:8a:62:6b:
45:75:c3:4b:a8:f1:53:c2:45:bc:db:17:82:a2:29:
7e:fb:4e:58:58:9e:47:cb:21:af:f9:d4:eb:db:c4:
e5:94:06:f7:cb:2b:80:34:9e:e6:f8:10:d5:08:5e:
c8:ae:5d:72:67:00:a9:71:b6:e3:26:b7:4b:f9:53:
f1:0b:9d:fb:dc:e1:32:49:58:47:de:0b:4b:03:b8:
43:5d:90:22:3e:76:86:db:98:64:07:ec:ec:3a:b8:
7b:3f:24:4a:6c:7f:4b:bc:84:ed:c8:46:dc:e0:a4:
a5:71:f0:d8:31:f4:25:91:4a:4e:7e:1e:58:02:ec:
29:03:bd:fa:2b:c9:c9:6d:70:dc:02:5d:1c:f8:ac:
50:1a:9e:01:15:e5:86:96:f9:e2:b5:3f:27:3e:b7:
b7:1b:09:5e:90:b8:f8:6c:c0:d1:4d:2b:0f:82:8e:
ae:62:e3:d0:f1:37:ae:20:73:bf:f8:34:56:0b:32:
21:e0:2f:4c:fc:6b:02:ce:e4:0d:ef:d6:e6:82:7d:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:51:B5:E8:73:B5:3B:60:5B:34:2D:6D:03:D2:59:FE:97:5B:4A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/CRZRtehztTtgWzQtbQPSWf6XW0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.223.0/24
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bc:5b:18:b9:8a:ae:3a:04:34:bb:36:f3:19:a6:85:6c:41:
5d:5d:cd:92:84:68:ee:24:02:61:23:f4:10:b2:b7:a2:ad:5c:
06:cc:82:8d:58:61:7b:4b:9b:17:bb:f1:14:47:7e:c4:d6:e2:
24:85:46:6d:5f:10:ab:1d:dd:c5:9e:ef:c3:6e:2f:b5:4a:45:
e3:64:2e:06:2f:7b:a7:d8:28:ed:8a:ef:90:9d:35:e3:fd:20:
35:08:a9:ce:05:74:71:1b:05:13:6d:d9:22:d6:32:42:f4:43:
dc:90:87:91:65:d5:8a:a2:52:38:06:ab:55:06:92:6a:6d:6b:
fe:ff:46:90:25:9d:8f:dc:01:60:a2:83:d8:57:10:93:ae:ea:
5b:9a:c5:fe:04:b3:c3:1d:13:f3:64:73:8a:a7:8c:bf:25:82:
ec:53:06:73:35:70:61:b9:95:2c:c2:c1:1d:f7:ec:c4:02:51:
9a:f0:d8:da:09:48:fc:f7:b6:ef:45:4b:24:0c:c7:eb:2f:0a:
ec:c6:6f:59:6e:bb:72:88:8d:a3:5c:1c:67:5e:a4:f9:1a:83:
e5:44:05:3a:68:a8:be:90:57:37:0d:66:4a:6a:5b:7b:16:bb:
f1:22:4c:2d:14:dc:0e:09:cc:dc:0f:7a:df:b4:ec:e9:aa:32:
37:68:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:12 2025 by rpki-client