Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XreWF-dzlOcgK_7UUvJIWUUq16I.roa
File: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (raw, json)
Hash identifier: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=
Subject key identifier: 5E:B7:96:17:E7:73:94:E7:20:2B:FE:D4:52:F2:48:59:45:2A:D7:A2
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC171FB40D66DE58F9985FE6FBC4D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XreWF-dzlOcgK_7UUvJIWUUq16I.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149766
IP address blocks: 91.210.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c1:71:fb:40:d6:6d:e5:8f:99:85:fe:6f:bc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5eb79617e77394e7202bfed452f24859452ad7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:53:52:ef:ed:94:64:3a:19:fc:8f:4d:53:
50:6f:78:a6:0a:51:e4:d7:89:a0:f3:43:a5:0d:f6:
a0:40:af:ac:0e:5b:6c:20:6c:af:03:d6:eb:91:28:
f1:a9:c7:4e:f2:19:72:23:9f:c5:5e:9c:70:08:18:
44:9b:0c:fb:c7:5c:35:2c:4d:65:78:fc:45:04:39:
38:fd:1b:62:c2:52:83:86:d6:38:e2:80:19:43:1f:
b4:5f:0c:ed:1e:39:04:1f:15:30:59:1f:db:cf:a9:
1d:7a:39:27:5e:72:03:08:0e:32:08:b1:25:87:58:
7a:17:bd:a7:d2:40:cd:4c:ff:e9:04:bf:dd:59:96:
b6:32:eb:60:4f:5d:26:26:b3:0d:97:ce:5c:ab:22:
13:3d:64:c9:cd:62:c1:13:00:14:85:af:b9:2c:7c:
09:c6:d9:b7:e4:de:5f:cf:07:44:c1:03:8e:22:cc:
71:35:14:98:7c:77:e0:7d:53:fe:60:3a:33:ad:4f:
cc:7a:2f:3f:1b:a6:5e:e6:f7:05:89:9b:00:a1:83:
09:31:3d:6e:61:ce:c6:db:41:74:27:b0:ac:1a:b0:
1c:66:17:3d:fc:33:e4:c2:c0:d3:d3:8c:76:f7:c6:
cf:97:f7:bd:38:18:24:55:68:d1:32:17:b5:db:d1:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B7:96:17:E7:73:94:E7:20:2B:FE:D4:52:F2:48:59:45:2A:D7:A2
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XreWF-dzlOcgK_7UUvJIWUUq16I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d3:9a:20:02:b7:f0:ed:48:d9:2a:e1:73:e1:8a:56:d8:62:
bd:e5:b3:1e:2b:d6:e9:17:f4:94:b2:8f:3b:e3:40:a6:2b:0a:
49:40:04:a0:cc:5f:ea:9f:bd:ea:86:68:b0:b0:18:37:b7:39:
d6:0f:e2:00:88:27:29:44:30:8a:32:52:f7:96:8a:d6:04:77:
4a:10:13:2a:a1:bf:fc:9b:ea:13:83:77:da:18:49:db:2f:25:
d6:c6:ab:4e:e0:4d:bd:c1:8a:6a:34:b8:63:3d:8a:3e:83:34:
5c:aa:7f:ef:48:8a:39:31:5a:63:1c:ad:57:66:87:85:e7:bd:
ae:a4:6e:8c:9b:10:df:35:b7:59:ed:8c:45:f1:94:07:26:89:
16:c6:4f:c4:87:76:ee:05:94:86:fb:68:db:9f:5b:0f:5d:81:
0e:12:97:74:01:45:25:a5:6a:14:f9:2a:5b:6d:66:93:af:de:
9a:32:c3:94:60:cd:83:3c:ae:25:32:98:23:28:45:89:a8:6d:
cf:42:92:48:79:2f:ee:90:72:da:94:ba:82:3c:2b:06:48:ba:
4b:2c:d3:ee:15:e1:25:84:ae:d2:6b:01:e2:2c:21:19:ae:2e:
76:88:6c:2a:e2:f7:a2:0b:cd:0e:79:38:fb:a7:08:e7:1a:ba:
96:d8:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:25:54 2025 by rpki-client