Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/2pelV4FedV45XCLKgpg6a9aqnGU.roa
File: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (raw, json)
Hash identifier: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=
Subject key identifier: DA:97:A5:57:81:5E:75:5E:39:5C:22:CA:82:98:3A:6B:D6:AA:9C:65
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 01941F8CA554B10965615F644EE949B4E9B8
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/2pelV4FedV45XCLKgpg6a9aqnGU.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213011
IP address blocks: 91.211.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a5:54:b1:09:65:61:5f:64:4e:e9:49:b4:e9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da97a557815e755e395c22ca82983a6bd6aa9c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:a7:9c:d1:c9:7c:1a:a9:f9:cd:26:87:dc:
1b:5b:3b:49:ed:08:ab:a0:4c:0e:4b:55:f6:43:74:
11:de:ad:24:ce:69:10:8a:9a:5f:8e:81:84:80:a3:
f2:e4:13:62:23:d5:22:bc:81:fc:fb:01:74:c3:d9:
67:6f:7f:ed:4f:0a:da:b4:7e:c9:71:1c:94:42:1a:
c3:e5:5d:f6:e0:1f:c7:3b:0a:ce:f0:ba:d5:f6:bf:
db:d4:48:88:b2:c1:f7:eb:32:c4:7d:49:e5:21:ee:
f7:fa:4f:62:5f:2c:7e:6c:58:ea:9b:76:32:32:c7:
9a:4a:b2:b1:2d:5f:6c:cc:ea:f7:e9:69:07:c3:19:
02:70:d5:50:90:fb:db:7f:4b:cb:fd:53:b4:8c:07:
ce:f6:cf:d9:f4:d2:96:e1:d6:04:94:8b:4b:9c:4b:
09:ce:13:c5:46:1e:91:b7:6f:1e:96:b3:7b:41:44:
45:cb:9f:3c:2c:4c:a2:c7:4e:cf:20:fa:08:b3:c3:
21:9c:1e:97:3d:1b:7a:0f:ca:86:9c:e9:28:f9:d6:
33:eb:29:4e:3d:9b:8a:8b:ee:cd:1c:06:00:72:c8:
ea:84:59:b8:cb:e3:3a:7e:88:49:16:a6:95:ea:b3:
b8:80:56:1d:d8:7b:9e:df:28:bd:f7:a9:95:75:42:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:97:A5:57:81:5E:75:5E:39:5C:22:CA:82:98:3A:6B:D6:AA:9C:65
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/2pelV4FedV45XCLKgpg6a9aqnGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.1.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d6:81:24:41:b4:fe:c1:ec:6e:c4:09:7b:ff:ac:c2:04:f4:
d8:20:fe:e2:bd:38:34:83:b5:11:26:01:d8:da:43:29:b3:8f:
58:51:7a:7f:93:cd:5b:75:c0:56:fb:1e:d4:19:ae:05:33:23:
0a:f1:0c:34:c9:66:27:52:bd:48:f7:b5:e4:97:fa:c6:b0:bf:
ca:35:54:a6:47:40:81:5e:f1:8e:da:7a:e2:18:44:2e:c7:06:
c5:10:92:83:51:94:54:9f:58:0d:c4:2d:0d:69:c3:74:15:d8:
7b:2d:13:3d:08:bb:44:9f:f8:2f:59:42:f1:71:73:64:5b:7b:
0f:49:6e:1f:f0:52:d0:32:4c:de:5e:22:ad:8d:db:49:20:38:
9b:d6:67:f3:15:00:97:d3:3d:ef:de:c0:c1:4d:70:02:37:e1:
01:c2:b4:cd:19:35:11:b2:72:27:12:e4:58:f1:91:78:97:e6:
ce:55:e2:ee:52:be:72:58:e9:f8:66:80:98:3b:f7:08:77:28:
95:90:6c:57:9c:fb:82:40:28:ab:e2:01:d8:11:2c:3c:0c:f9:
89:7b:a9:b4:96:4c:fc:f7:71:62:ce:52:3d:27:3b:f9:04:e8:
b8:13:57:ce:55:cf:0e:e4:39:c8:3e:f1:25:bc:ba:9f:1e:ff:
e6:71:08:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:06:10 2025 by rpki-client