Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa
File: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (raw, json)
Hash identifier: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=
Subject key identifier: 13:11:59:9D:60:50:9F:97:2A:9A:F3:3B:A5:67:C3:68:3D:57:D8:76
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 01941F8CA93507627150E62B23CFDF4F3C39
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198163
IP address blocks: 91.206.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a9:35:07:62:71:50:e6:2b:23:cf:df:4f:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1311599d60509f972a9af33ba567c3683d57d876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:12:9e:88:04:2b:b9:4f:ab:44:8d:c0:27:
09:98:2a:e2:0d:6d:0b:b1:41:db:24:dd:46:76:c2:
48:15:bc:f9:be:6d:52:d6:4a:9a:c7:a1:6b:53:7a:
23:04:f8:21:95:a1:42:ac:b6:84:07:d5:0f:cf:15:
4f:06:c7:28:74:42:1f:f0:90:a3:3b:b5:f9:38:12:
62:0d:06:c7:0f:bd:9e:77:ad:e1:7c:9e:c8:2d:59:
6e:10:78:04:ea:8f:72:7d:de:fa:df:76:24:0a:a6:
0e:d2:d7:23:f9:5f:c1:2e:5b:dc:6a:ee:72:a5:98:
e3:9c:92:42:51:f5:da:b6:7e:6a:7b:e6:6d:97:f3:
87:cc:e4:60:a8:95:22:23:38:8e:49:36:50:15:8b:
5b:5c:4d:e0:f7:c9:d3:59:31:c8:b9:72:2d:24:9e:
04:06:ea:7d:80:1f:4e:15:df:4a:90:a4:5f:45:0c:
75:6a:e7:30:1a:df:80:47:2d:c2:5a:32:14:fc:65:
80:06:27:d1:1f:b3:08:f2:93:8e:4e:4c:da:ba:f5:
69:1c:50:04:9e:c5:d2:90:db:30:75:5c:d9:45:68:
41:0b:40:a1:01:cd:9f:2b:20:23:54:f8:db:7c:e5:
37:91:33:38:ad:6d:f7:71:a7:93:56:6c:13:58:e5:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:59:9D:60:50:9F:97:2A:9A:F3:3B:A5:67:C3:68:3D:57:D8:76
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.90.0/24
Signature Algorithm: sha256WithRSAEncryption
07:45:1c:49:ab:2c:3c:64:09:df:43:3e:f8:14:d3:3b:ea:78:
8e:19:cb:8a:93:9a:05:f8:87:c6:26:d5:26:09:1f:dc:84:ee:
7b:2e:33:1b:1a:c3:57:22:e9:0e:c6:3a:83:0f:c9:a2:fb:6a:
fc:7c:bc:08:5d:a8:5c:5d:c1:52:39:ec:45:9e:f4:4d:91:dd:
2a:ff:5d:ee:4a:a1:64:4e:e6:ae:7c:13:2f:ee:31:19:b5:ca:
c1:d6:74:ed:74:e1:97:9f:25:f6:d4:2e:d2:cf:6f:8b:e5:ea:
57:32:a8:7a:8a:88:e2:b1:3b:03:f3:55:4d:a1:e0:05:ed:cd:
9c:20:a0:20:bc:be:2d:7e:b0:32:ff:03:c8:3a:5e:5b:25:db:
6c:87:a6:98:c3:5d:74:25:46:31:fa:ec:92:cb:f9:0d:e5:1a:
ca:35:43:74:58:ed:ad:7a:60:17:93:a2:ba:10:34:9f:f6:4a:
e2:75:8f:ad:93:45:8c:25:37:2f:46:6e:42:3c:3b:ad:66:2f:
5c:b2:c8:3e:bd:80:f5:27:27:87:a2:15:2f:87:d9:d9:2c:bf:
cf:e9:0b:fc:35:08:0f:38:70:6f:27:38:2d:c4:a6:97:92:22:
30:63:fd:ab:54:b3:ee:ce:dd:98:34:11:4b:2f:56:de:42:18:
dc:31:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:42 2025 by rpki-client