Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa
File: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (raw, json)
Hash identifier: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=
Subject key identifier: 5E:B6:7B:FD:56:2C:4E:35:4E:D4:77:6B:EA:54:D7:05:84:47:74:33
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01942444D8A91C028338863773583E915C24
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55569
IP address blocks: 91.199.242.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d8:a9:1c:02:83:38:86:37:73:58:3e:91:5c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5eb67bfd562c4e354ed4776bea54d70584477433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:17:5c:42:cb:36:90:41:af:03:1a:db:7d:
33:70:20:1e:ec:e4:71:b1:c6:32:92:7f:5c:45:cb:
d2:ff:92:59:32:8b:e0:f6:b2:9b:64:4a:b4:92:b6:
b2:c1:93:43:e7:28:97:8b:54:fd:2f:84:62:e9:01:
4e:c4:e4:93:b9:44:31:1a:c5:cc:86:e9:1a:80:36:
49:66:f2:13:fe:e2:92:a8:25:ba:47:cf:e1:30:e1:
7c:a3:ec:63:55:43:11:17:7c:2d:f3:ab:08:5d:f8:
ac:78:4d:20:3e:53:b1:d7:a4:e4:d7:2c:42:93:d1:
71:73:f6:ff:74:18:e6:e7:a7:26:b0:ec:51:fc:4d:
60:e0:02:b3:90:e1:37:ed:51:38:91:d3:8e:5f:81:
da:81:6f:7b:76:67:17:2d:26:05:7f:44:37:4b:1d:
a7:3c:5f:f4:9d:13:43:92:d7:91:bc:ba:89:96:bd:
9a:91:b7:6a:cb:3d:b1:3a:7d:b6:43:33:67:86:2e:
74:84:2b:65:3c:17:8b:a4:30:97:71:43:7a:36:c5:
a1:cd:4f:f7:92:a1:8d:34:cc:b5:53:03:29:0f:34:
52:9b:cd:fd:7e:98:16:08:c0:8c:7d:81:c1:27:0d:
41:85:84:d4:a5:98:80:f7:4f:8d:9d:e5:2d:62:e2:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B6:7B:FD:56:2C:4E:35:4E:D4:77:6B:EA:54:D7:05:84:47:74:33
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ba:7c:b0:05:67:a7:e3:02:d6:91:6c:ab:9e:a4:71:2e:c0:
94:aa:e8:fb:58:df:9c:a3:8a:b6:f1:cb:f6:d3:34:15:69:2b:
d4:34:e8:2b:fd:ac:ad:6e:5f:cc:6a:27:e8:cc:2f:f4:01:4a:
2c:0c:ae:43:70:ea:e8:26:f8:37:f5:a3:dc:d0:47:7b:18:33:
d7:a3:1b:fb:d7:bc:ec:ba:9a:7e:1d:b2:3e:9d:23:03:22:2c:
8d:7e:af:6c:01:68:aa:2d:16:ce:98:63:f3:6d:ed:f8:07:83:
0f:8d:bd:c9:c7:64:d8:74:55:20:19:fb:07:bf:4c:83:7c:35:
ab:86:43:f8:66:89:04:a8:ae:38:b9:3f:31:c2:9d:b0:b8:e5:
c7:1d:ae:7f:e7:3f:0a:20:63:8d:9b:75:f0:f3:05:a2:89:d9:
97:a9:de:d8:b4:1a:2e:c7:01:b7:c6:6f:4e:b7:ab:20:c7:9e:
78:a7:23:d9:e4:fb:bb:76:1a:2d:5c:93:93:07:0d:ee:1f:bf:
df:dc:43:4a:e5:0f:06:6f:af:42:35:a1:81:19:78:55:86:dd:
01:02:71:05:cf:5b:b0:12:e7:84:de:66:73:6b:91:a8:68:c4:
62:4e:2b:1d:21:bc:14:82:c9:94:b5:2e:a4:70:7d:d4:6c:dd:
52:21:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:08 2025 by rpki-client