Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa
File: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (raw, json)
Hash identifier: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=
Subject key identifier: EA:5E:4C:FB:1E:40:54:25:76:3C:66:6B:EB:F9:7F:0D:92:4E:4D:E8
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 019425FDB16B39B2FA95F4738B933C2A7017
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214640
IP address blocks: 91.226.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b1:6b:39:b2:fa:95:f4:73:8b:93:3c:2a:70:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea5e4cfb1e405425763c666bebf97f0d924e4de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:d6:39:71:0c:1a:38:c8:3a:c6:80:a6:55:
05:99:8b:ab:1f:11:25:b3:11:58:8b:7b:31:1d:03:
8d:83:b1:f3:30:c6:7f:fa:15:52:55:2c:d8:a2:c6:
eb:a8:20:d0:63:bf:cb:29:d5:fa:31:29:22:92:ee:
c9:2d:b3:cd:02:1b:f5:66:10:bf:bd:54:10:80:98:
52:0a:c0:82:37:03:d6:63:02:0d:fc:15:4b:8c:b7:
b6:d1:6f:4e:d3:8e:4c:da:2b:83:92:a1:d8:50:c0:
2b:2c:33:f1:4f:5d:a8:d0:42:0d:8c:35:75:88:a2:
54:e2:53:9f:92:87:f8:ba:8b:32:a5:ba:de:fc:e1:
ca:dd:c1:67:51:62:ae:45:e0:73:21:f9:1c:51:44:
97:67:98:fd:f2:39:1b:43:54:d5:e9:98:10:b7:26:
eb:0a:63:04:70:2c:03:12:bf:79:50:66:a4:c0:0c:
51:0f:85:2e:1c:5b:8c:bb:83:57:10:eb:ba:f9:89:
d5:e8:47:9b:f2:8c:31:11:7b:d9:df:74:18:b7:e4:
da:ce:da:ca:68:2e:2b:29:5e:10:80:70:de:c0:27:
7d:22:f8:3b:cc:6c:a2:10:e1:c8:53:d8:6e:00:2f:
ab:88:dc:c8:de:b7:7c:b6:b7:a3:18:d2:d1:e7:25:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5E:4C:FB:1E:40:54:25:76:3C:66:6B:EB:F9:7F:0D:92:4E:4D:E8
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.221.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cd:74:8a:9c:19:c1:fd:b4:2c:c6:61:81:ed:f8:38:45:10:
d2:b6:6a:43:58:0f:e7:a3:eb:7b:cb:e2:41:1c:28:d9:c9:42:
03:b1:ca:c8:16:cf:fc:31:6c:75:cd:bc:32:a9:55:32:8d:e0:
23:df:9f:54:7f:c4:46:53:ef:39:4a:e6:7d:52:43:76:33:37:
00:cf:34:b2:cc:bb:d0:0b:37:5c:56:1d:8a:80:f7:b3:5a:fc:
27:9f:44:59:0c:db:da:43:09:b9:a2:cc:ff:dd:45:ac:33:65:
c6:28:64:00:0f:e9:d7:54:89:d7:92:df:ad:b0:4b:09:16:7b:
64:e3:88:80:ae:4f:48:ac:75:cf:9a:45:c8:23:0a:99:27:0a:
19:72:8f:52:a5:bb:f1:1b:53:d0:a8:5a:0b:16:d5:46:46:b3:
a4:f0:97:dd:3a:f5:da:dd:d3:dd:39:54:39:65:cf:09:c7:61:
b4:16:d8:b4:32:62:6f:de:ce:14:23:2c:0a:d7:a3:d2:f6:96:
97:5d:6b:3d:7f:1b:28:da:0e:7c:af:2b:1f:6e:ed:34:f2:8f:
56:47:2a:d3:8b:80:56:88:f7:9c:47:da:c0:55:45:17:d2:07:
a6:9d:89:ae:63:c5:52:93:92:d5:59:08:3b:14:8b:78:a6:dd:
a9:c5:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:22 2025 by rpki-client