Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/e4McvVrGaFdkSdBoMPZ3lP_kuJs.roa
File: e4McvVrGaFdkSdBoMPZ3lP_kuJs.roa (raw, json)
Hash identifier: RfJzqYK341DVjhoP96ChRBImMemxykqwKCbXZfesXQ0=
Subject key identifier: 7B:83:1C:BD:5A:C6:68:57:64:49:D0:68:30:F6:77:94:FF:E4:B8:9B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0193A29967A91E726F463349152625EC630B
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/e4McvVrGaFdkSdBoMPZ3lP_kuJs.roa
Signing time: Sat 07 Dec 2024 19:29:42 +0000
ROA not before: Sat 07 Dec 2024 19:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.216.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a2:99:67:a9:1e:72:6f:46:33:49:15:26:25:ec:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Dec 7 19:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b831cbd5ac668576449d06830f67794ffe4b89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:cd:dc:56:a1:cb:5c:94:d2:7b:56:e9:cd:
10:31:9c:d3:73:ed:bf:f7:db:3b:e0:12:76:c1:80:
da:a2:be:26:77:f6:7f:c5:2c:58:fc:4d:58:70:90:
6c:54:48:51:26:11:24:82:c2:b0:ac:7f:00:9d:18:
84:7e:4f:c8:e7:5f:b4:0c:ed:d6:53:27:f5:67:c1:
34:37:ed:07:b7:86:ac:c9:28:1a:a5:f1:be:9c:a7:
d4:a2:72:0b:0e:e6:a3:3b:fc:75:9e:9f:bf:35:88:
2a:2f:4a:25:0d:3f:50:96:ae:7c:a6:ea:4d:ef:08:
9f:b4:17:9a:4e:fa:7d:05:fc:03:80:9d:3d:41:81:
5b:e5:d1:b0:c7:4c:11:8b:3c:3d:5d:38:24:65:c8:
07:b2:9f:b2:11:9f:98:ed:ed:77:d1:f8:ed:e9:30:
79:1f:9b:9c:56:8d:54:df:3d:2c:27:ce:6f:a2:95:
aa:96:8a:f8:28:fb:51:ac:76:fc:b3:d7:ea:70:f1:
e0:74:e8:99:e1:fe:23:41:77:df:f9:62:4e:59:a3:
2f:03:65:00:e8:83:f9:8a:1d:3b:f6:85:c4:89:b7:
80:aa:6e:51:e8:20:95:63:27:af:81:fb:29:4d:c8:
4d:96:e2:ad:47:42:4b:49:54:55:e4:8d:44:93:0b:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:1C:BD:5A:C6:68:57:64:49:D0:68:30:F6:77:94:FF:E4:B8:9B
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/e4McvVrGaFdkSdBoMPZ3lP_kuJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:95:9a:68:d7:83:f1:83:0a:bf:ac:5e:da:84:c9:98:c2:8d:
57:ec:c8:11:0b:92:ee:fe:83:98:f8:55:01:1e:83:ab:b3:5b:
63:9f:d6:46:a2:3b:90:09:28:e0:75:89:2d:e9:7c:00:69:32:
ae:fe:8c:28:db:a7:e0:55:dc:46:e7:56:ef:84:c9:17:10:95:
55:2f:61:9f:da:5c:83:b1:d2:eb:81:ce:6a:2c:d9:03:03:d8:
3d:ed:5e:f1:ad:0c:90:97:39:0d:76:c9:a9:f7:0d:b4:e4:30:
9c:18:0e:91:d9:9d:ee:ff:08:06:40:22:f0:97:c1:f3:90:dc:
ed:f7:46:a8:b2:9a:bf:fb:11:94:b5:89:f2:b2:5f:13:83:43:
d1:e6:84:b9:88:af:e8:4d:86:39:54:c2:fe:d0:4f:00:07:1c:
53:e2:28:03:b4:4b:38:58:05:da:f4:9f:f9:6d:06:12:3e:41:
1c:75:5d:6c:3d:37:4b:ab:67:d3:1c:aa:08:0c:3e:95:c0:13:
38:2a:e1:80:04:7b:6f:13:2b:fa:31:93:f5:61:5b:60:6f:c1:
60:3a:1c:34:de:cf:01:07:7e:28:bb:30:7f:1c:5d:54:9d:57:
8d:3b:a8:28:6c:44:23:06:71:50:b0:06:be:4c:42:df:b2:10:
51:ab:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:28 2025 by rpki-client