Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa
File: mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa (raw, json)
Hash identifier: MlJtJ+9IYVgqHxEydx7ywPk31bzQHuAZBNNJFqPMbXA=
Subject key identifier: 99:C2:3F:8B:3F:E3:2C:C1:74:9B:6C:AD:89:28:4D:21:6D:98:D1:72
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 019499C0F1EBA78618055E584D8003FD08DF
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa
Signing time: Fri 24 Jan 2025 19:19:06 +0000
ROA not before: Fri 24 Jan 2025 19:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 91.239.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:c0:f1:eb:a7:86:18:05:5e:58:4d:80:03:fd:08:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Jan 24 19:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99c23f8b3fe32cc1749b6cad89284d216d98d172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:9b:a4:15:db:b2:f0:6c:4c:7d:d9:5f:c1:
0b:d8:76:de:6f:f5:4f:aa:e3:f7:06:44:17:3f:66:
83:76:a9:f0:93:9b:e6:fb:70:49:8c:59:7a:85:66:
40:39:96:31:18:2a:52:88:6c:40:1a:77:b9:11:21:
22:89:38:b2:9d:c8:b1:d7:88:78:b4:f8:0d:78:40:
96:30:99:a7:19:fd:92:e9:74:f2:ac:bf:d2:84:e4:
c9:7e:59:c8:78:51:6e:1e:9a:1b:9f:7a:9c:40:a0:
98:4b:a8:b8:75:68:1e:9e:39:a4:ad:2a:9f:de:7d:
18:67:20:4e:c9:67:4c:58:8c:0f:0f:bc:6a:6d:a3:
d3:f8:2a:ba:b5:6c:b5:be:fe:84:cb:09:9a:74:7e:
ba:71:7e:13:e2:1b:94:37:b7:46:18:32:ab:6b:6e:
24:86:ee:af:2c:3b:ee:d6:63:7b:28:92:26:75:98:
4d:a7:ca:77:97:bd:9b:1a:33:ce:e9:10:cf:fa:7c:
b5:4b:cd:8f:86:fb:d3:ae:18:67:e1:4d:a6:76:ca:
67:a6:55:9d:80:75:48:58:71:40:1a:0b:5c:33:94:
24:65:c9:33:83:f9:3a:ca:a7:a2:e7:e6:ee:b3:71:
c0:4c:bf:31:bd:4c:b9:73:28:6a:e9:91:4c:07:c3:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:3F:8B:3F:E3:2C:C1:74:9B:6C:AD:89:28:4D:21:6D:98:D1:72
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:da:d2:70:b0:f2:d6:f6:28:f7:5d:4f:c7:7f:be:e5:83:46:
41:9a:27:72:fc:63:ff:f8:32:e6:91:58:09:69:a6:73:be:10:
cd:da:c7:be:a8:4a:a8:56:1a:f5:88:8f:ea:7d:1e:51:67:c8:
4b:32:cf:ec:db:5b:09:e5:da:5b:ef:0f:56:68:43:ef:65:74:
4f:69:3f:a8:80:c7:61:f0:18:ce:05:ab:9d:93:39:68:43:58:
87:ca:58:5d:ec:ea:71:00:c3:a1:97:9d:fb:ef:3e:16:e4:fa:
f6:f9:c7:e4:ba:95:58:fe:42:5d:de:15:84:fe:34:1b:fa:50:
79:02:c1:18:58:e8:d2:08:35:e9:7e:8c:75:b7:88:a5:f6:9c:
2c:35:06:37:c8:a7:8a:8d:cf:26:99:de:38:d5:9f:d2:d9:66:
14:90:54:8c:02:47:b9:ad:82:a5:0b:ae:23:be:aa:c9:58:65:
1e:64:4f:91:b6:40:61:0c:77:42:41:ee:55:ba:55:a2:43:62:
fd:3f:c5:7d:6d:48:3b:eb:cc:e3:b0:96:d1:9b:ba:9b:a9:58:
11:30:3d:39:34:a9:95:fa:2b:5a:aa:a8:1e:43:0c:b0:4f:07:
5a:65:45:36:ee:a4:f2:b7:d0:47:d9:98:9a:55:0f:e5:33:97:
d2:25:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:49:10 2025 by rpki-client