Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/r0MpZWGF2my5L4ptog2DrTmu7No.roa
File: r0MpZWGF2my5L4ptog2DrTmu7No.roa (raw, json)
Hash identifier: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=
Subject key identifier: AF:43:29:65:61:85:DA:6C:B9:2F:8A:6D:A2:0D:83:AD:39:AE:EC:DA
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01942823824F5BDC9A6C3A7C2E873E5C3D07
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/r0MpZWGF2my5L4ptog2DrTmu7No.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198401
IP address blocks: 91.149.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:82:4f:5b:dc:9a:6c:3a:7c:2e:87:3e:5c:3d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af4329656185da6cb92f8a6da20d83ad39aeecda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:fe:68:88:a3:7a:8a:f1:bf:d9:c4:5e:50:
4b:e0:74:7f:0d:16:bc:fc:94:49:40:3d:17:3c:a7:
bf:d3:bd:e4:45:a8:bd:d0:ea:c9:4c:88:ec:e4:fc:
ae:66:1e:4d:5d:c8:84:cd:37:0a:18:0c:7d:53:f5:
33:3c:eb:f0:18:35:50:85:82:ab:1e:f1:ce:ce:8f:
e6:78:95:35:ff:ac:ad:6e:f2:bf:d5:75:00:53:8d:
af:69:b8:74:9c:9c:84:00:6b:5b:b3:c2:c8:42:45:
1c:20:26:de:df:88:40:40:2a:b4:66:d7:4c:0b:63:
14:21:54:51:ee:87:00:db:3b:e4:99:e0:30:38:24:
d7:8e:55:31:4e:44:e3:46:ee:95:a8:3c:35:03:d1:
65:dc:ec:b1:1c:73:bf:58:6d:b3:3d:36:bc:6c:15:
b8:ed:a5:54:72:db:12:7f:24:4a:c7:e3:c1:9f:e4:
b2:51:36:d5:11:ce:b5:01:95:e4:6c:90:ac:94:2a:
86:3e:26:d3:f9:70:9b:d4:ea:55:d1:e0:c4:cb:59:
67:a9:3c:a5:5a:a0:c4:cc:22:f5:79:96:71:91:f2:
2f:60:f7:88:a2:0c:8f:37:c9:51:48:d1:b1:c8:24:
33:2e:f5:c8:4b:32:3e:83:79:a1:4d:17:96:2a:bb:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:29:65:61:85:DA:6C:B9:2F:8A:6D:A2:0D:83:AD:39:AE:EC:DA
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/r0MpZWGF2my5L4ptog2DrTmu7No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.213.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:38:20:3b:30:06:4b:22:62:ed:f9:88:bf:8b:bb:b7:d0:df:
74:b3:41:c8:46:48:8e:28:40:56:da:fe:89:98:79:87:c2:36:
ea:7a:bb:72:97:1b:a4:e5:f5:33:0e:e7:52:1f:f7:10:28:cf:
f6:0f:82:4a:1e:0a:07:e9:b8:c0:5d:cc:61:35:3d:e0:6d:fd:
60:63:c6:40:fe:83:20:32:ee:88:ba:84:73:2f:96:bb:48:be:
4b:e0:df:30:8d:1d:74:2a:44:b7:fd:d3:27:e7:f2:ff:c7:fb:
15:b2:68:8a:dc:9a:5b:4e:67:00:45:a3:e8:25:57:b0:1b:7c:
85:20:10:33:09:3e:c8:e8:96:8a:db:b1:0c:58:92:22:80:cc:
7e:5e:95:4d:68:f3:ca:a3:1e:da:1b:b1:af:95:7d:e8:f9:90:
15:98:b1:1c:17:0f:5c:eb:4b:ed:e9:1b:67:8b:9c:8d:1c:88:
75:e7:50:dc:ea:7b:47:fd:82:48:8c:6e:14:a1:5c:06:2c:ed:
e8:14:cb:c9:18:73:a2:cc:cc:ce:10:d7:54:91:36:8d:f2:f6:
7b:3c:51:7a:24:d4:01:80:8d:33:fc:c2:4d:d2:d9:ba:8a:8a:
c0:c2:d2:7e:18:ce:d8:12:52:68:5e:fc:15:5b:3f:ca:99:3a:
98:1b:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:24:40 2025 by rpki-client