Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IcXMBAgrCPKN6H_67CPN5h_vXes.roa
File: IcXMBAgrCPKN6H_67CPN5h_vXes.roa (raw, json)
Hash identifier: qj4Qgi7BHlhqfijs5TG/MrvWz4FqNQl2qLulnoY+31U=
Subject key identifier: 21:C5:CC:04:08:2B:08:F2:8D:E8:7F:FA:EC:23:CD:E6:1F:EF:5D:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824CDA5FA098E2178D6911B88C6B590
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IcXMBAgrCPKN6H_67CPN5h_vXes.roa
Signing time: Thu 02 Jan 2025 17:51:28 +0000
ROA not before: Thu 02 Jan 2025 17:51:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215433
IP address blocks: 91.92.27.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:cd:a5:fa:09:8e:21:78:d6:91:1b:88:c6:b5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21c5cc04082b08f28de87ffaec23cde61fef5deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:14:14:f9:19:6d:2d:5c:fb:83:0f:9b:9b:
c8:db:62:83:66:68:9f:2f:47:37:b2:22:93:21:be:
dc:9d:82:e1:17:4b:3b:33:bf:09:fe:ff:f5:ff:8c:
86:3a:3c:f1:e7:b1:c8:eb:9b:eb:65:3b:9a:26:93:
7e:3a:d9:f7:68:d3:52:c2:14:87:e4:18:94:36:36:
45:81:11:9d:2f:a0:0a:4d:1a:95:55:49:27:2c:f0:
72:73:01:5a:ae:55:1a:0e:39:34:50:1f:5a:e5:91:
cd:60:b9:8e:fc:2c:5b:03:4d:7e:02:89:64:dd:bf:
b1:f0:f9:b6:f2:00:ff:45:df:89:55:7c:e5:f2:ae:
5c:5f:77:88:64:e3:4b:04:ca:0c:4e:10:b4:73:66:
8c:79:3b:3f:9c:6b:19:71:31:2c:13:59:c9:69:3e:
91:fc:e2:85:70:e8:df:db:12:c5:9a:93:96:a1:db:
ce:fd:f7:e8:4a:91:d3:ed:2f:78:d0:ea:74:9a:b9:
76:0c:96:55:c9:84:36:f6:11:35:3a:ae:5c:f7:61:
00:e8:ec:ae:d9:b9:a3:9d:36:62:58:26:af:82:0f:
73:0f:12:53:9c:b8:a6:82:6b:ce:ed:a0:0b:9b:a1:
77:d9:1f:16:fa:0a:d3:9d:47:14:a7:04:0a:ab:3c:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:CC:04:08:2B:08:F2:8D:E8:7F:FA:EC:23:CD:E6:1F:EF:5D:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IcXMBAgrCPKN6H_67CPN5h_vXes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.27.0/24
94.156.238.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8b:14:6a:d9:f3:98:34:6e:66:39:d4:1d:fb:a4:fa:db:7e:
5e:8d:8f:a6:f5:ba:5f:aa:7d:8f:60:77:1d:6d:8f:fe:32:fb:
c1:4f:c5:8f:62:b0:92:dd:82:f6:e4:a0:8e:7e:d1:1f:5d:fc:
1a:27:8e:1c:86:cc:e0:e0:67:dd:6e:fc:b9:4d:a4:84:cd:f8:
35:2a:95:96:50:59:44:77:64:e8:4a:62:35:9e:a3:1a:10:86:
d9:f7:01:bd:ef:9b:17:c1:6c:c5:80:4f:98:42:e1:2b:f6:c9:
48:94:70:c8:f7:88:2a:94:cc:9e:cb:5e:f9:91:23:d6:4c:51:
6b:a4:68:46:c8:ef:55:fe:a7:a3:36:85:a1:24:ce:a1:25:43:
57:04:78:be:4e:75:e4:10:cb:f4:0d:89:c9:63:b1:c7:fd:42:
6d:c0:01:90:b8:af:9f:82:c0:15:90:36:0f:69:12:ca:88:c6:
b7:61:81:d9:23:6f:88:80:67:12:69:e3:5d:39:00:b0:08:ec:
1b:37:43:e3:5c:bc:24:08:33:2b:a6:aa:2e:69:1a:87:c7:f8:
07:62:05:8c:18:be:af:0e:e0:70:bb:b3:d0:6a:7c:38:2d:63:
f4:d5:ec:f5:38:1e:d4:38:e6:bd:57:9e:44:76:1d:67:2f:2f:
a9:64:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:36 2025 by rpki-client