Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/u6X_yWkVLE-C5GUl8sRlcXUfprI.roa
File: u6X_yWkVLE-C5GUl8sRlcXUfprI.roa (raw, json)
Hash identifier: G/Od4mhlmhQvTsBF+RYMonju3qrggKqYt06lJi4x8BY=
Subject key identifier: BB:A5:FF:C9:69:15:2C:4F:82:E4:65:25:F2:C4:65:71:75:1F:A6:B2
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019425FC4B1154BC2C167B43721BC75ED39B
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/u6X_yWkVLE-C5GUl8sRlcXUfprI.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56400
IP address blocks: 91.225.160.0/22 maxlen: 22
91.225.160.0/23 maxlen: 23
91.225.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4b:11:54:bc:2c:16:7b:43:72:1b:c7:5e:d3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bba5ffc969152c4f82e46525f2c46571751fa6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:02:01:55:fb:10:ea:41:6a:e5:30:89:f6:
33:a0:36:2e:7c:21:8e:95:94:33:60:de:0d:35:f5:
31:6c:b1:af:4e:0e:d4:71:98:24:a4:55:cd:11:58:
29:44:ec:c6:13:49:54:b4:40:d4:fb:05:ca:35:9f:
c2:ae:08:36:1b:0d:67:96:71:c5:14:15:33:74:a6:
87:20:10:ee:39:ee:db:c8:55:2b:58:f7:a2:6d:40:
bf:24:49:24:2a:e1:46:b0:8e:b8:a3:78:71:f7:1c:
6e:d3:e1:59:e8:c2:fd:f3:38:e2:42:83:52:54:89:
95:5a:51:70:22:94:da:ff:17:d5:33:88:07:ea:e0:
07:17:84:1b:a5:e2:12:bd:22:54:42:ab:3f:26:c3:
c6:7a:a9:40:1b:c8:5a:98:66:44:98:bc:79:03:33:
8c:04:fb:81:e5:19:47:9e:17:35:b2:96:f7:1c:34:
e5:c0:a3:21:49:69:a0:63:6a:19:d1:59:61:6b:f4:
42:0b:32:88:00:a5:f5:a4:97:3c:dc:2e:de:a8:fa:
54:01:14:d1:14:2b:cc:f9:b7:07:ac:69:e3:f7:6f:
57:3f:cc:ae:2f:e5:2d:44:47:c2:f4:2c:bc:b4:10:
6d:e4:84:63:d7:eb:96:d0:0c:c6:46:11:3e:37:2f:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A5:FF:C9:69:15:2C:4F:82:E4:65:25:F2:C4:65:71:75:1F:A6:B2
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/u6X_yWkVLE-C5GUl8sRlcXUfprI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.160.0/22
Signature Algorithm: sha256WithRSAEncryption
46:d2:86:21:33:1e:c9:97:da:8f:c4:69:49:c7:7c:d1:e4:86:
60:e3:7d:64:e9:ce:d0:39:c7:60:79:52:1c:77:46:0e:bf:04:
da:92:a9:5c:6a:30:eb:9e:5c:da:ed:fb:58:24:b9:5f:3b:97:
04:bc:9b:8d:fc:62:e8:cc:46:e8:6b:be:a8:09:74:73:28:ae:
11:65:0d:23:04:60:74:44:d2:18:df:1b:99:1c:17:20:75:7c:
3b:ce:c3:a3:98:47:3a:cd:63:29:77:bd:02:ec:70:76:0a:2a:
f9:ab:bd:61:62:39:64:6a:9f:d2:b2:0b:98:ca:72:4c:37:24:
9d:dd:99:17:2a:8a:00:c3:57:76:fe:17:b8:66:8b:13:02:40:
e6:8d:4e:fd:b3:1a:f4:32:54:e2:24:80:59:9a:b8:85:4a:34:
0c:e9:78:a4:50:53:f2:5a:ae:12:a8:1d:42:c9:68:6f:1a:20:
97:ee:49:78:33:a7:fa:9f:03:9f:80:62:a4:18:fb:ef:d7:34:
64:44:2c:20:24:a6:bb:a2:7d:d3:fe:59:49:a4:85:36:99:32:
2d:5b:d3:12:66:3f:74:99:a9:46:1b:5b:38:0b:04:02:ce:90:
1f:4b:6f:05:1f:1c:2e:1b:cc:0d:6f:2c:32:33:05:9f:e6:93:
62:6e:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:12:39 2025 by rpki-client