Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/rqU6u3hoknN-3UdF3hZxUQWu0pY.roa
File: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (raw, json)
Hash identifier: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=
Subject key identifier: AE:A5:3A:BB:78:68:92:73:7E:DD:47:45:DE:16:71:51:05:AE:D2:96
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019426D95AFD4DC3E461C9F6CC715349A1FC
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/rqU6u3hoknN-3UdF3hZxUQWu0pY.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196792
IP address blocks: 91.217.98.0/23 maxlen: 23
91.217.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:fd:4d:c3:e4:61:c9:f6:cc:71:53:49:a1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aea53abb786892737edd4745de16715105aed296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:50:26:4f:40:08:0c:55:c8:d5:f7:22:bc:
8d:64:82:e6:b4:09:21:ec:ee:91:df:76:5e:2a:5f:
43:65:c8:77:99:50:b5:90:ab:e3:ee:36:7f:cb:ac:
e9:18:f9:4b:58:ab:2c:6c:1b:70:ba:50:f3:79:a8:
42:af:6e:11:9e:8c:0a:fb:aa:d5:eb:f5:bb:19:0c:
71:6a:69:da:e8:a7:a1:9a:de:19:13:78:a2:8f:74:
71:e6:c4:10:43:28:0e:fa:16:40:a5:55:b4:a2:56:
08:33:1d:d5:6f:df:a0:bb:4c:ef:7e:68:7b:23:07:
d2:91:5e:07:d8:93:54:28:c4:1a:de:22:51:72:65:
31:bf:a9:50:9f:0e:28:0d:8c:43:6d:bc:02:f5:6d:
f0:6e:42:be:a7:5d:4d:e6:ee:cd:0f:96:fd:7d:4f:
31:ff:80:b6:a4:c3:19:b5:36:af:f3:6b:72:e4:dd:
c3:6b:91:93:8e:16:d3:35:16:24:71:1a:5d:ee:7f:
7c:89:18:42:c3:92:cd:dc:a8:af:0c:e2:7c:03:46:
08:cd:16:11:40:d9:9b:8b:8d:66:68:cb:e4:3c:65:
e2:11:9c:f5:f9:df:d2:23:93:c3:bb:b8:6f:4e:7e:
0e:23:ed:d3:20:28:af:2a:b5:a6:f2:3c:0e:39:ee:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:3A:BB:78:68:92:73:7E:DD:47:45:DE:16:71:51:05:AE:D2:96
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/rqU6u3hoknN-3UdF3hZxUQWu0pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.98.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:cd:73:da:c5:f0:b3:36:f9:ff:d5:fc:f1:61:21:8f:a5:37:
5c:0b:a8:23:7a:36:d0:58:67:06:0c:a2:fa:c9:ed:4e:79:c9:
ad:1d:86:5b:d7:e0:07:29:b0:b7:fc:5a:6f:cd:24:6c:29:0c:
54:1c:1a:63:03:f5:94:e6:80:c3:04:79:1a:0c:24:1e:81:7c:
ce:81:4c:43:fa:c7:34:84:18:36:43:37:3c:fe:60:dd:8f:60:
8b:78:47:91:4b:29:15:00:36:bb:5c:d0:08:2d:2a:27:44:79:
12:3f:61:05:0d:74:a1:ee:a5:df:79:0f:cf:9c:37:6b:7e:c3:
5b:e4:3b:cd:20:ef:df:df:5a:6d:30:d7:74:6e:b9:26:46:9c:
c6:7e:95:d8:df:5e:fc:4e:5b:06:87:60:1e:6b:4f:dc:76:a0:
ef:96:7c:02:8d:96:95:40:33:54:ab:37:6b:df:f3:72:db:a7:
22:a7:76:f5:29:11:aa:93:40:ea:1a:5f:db:ec:a9:3b:38:cf:
f1:94:37:a6:b3:6b:30:98:a9:d2:4d:77:50:03:48:97:9f:39:
71:78:4b:df:f8:43:6f:52:27:47:9f:0e:82:b6:f4:a7:64:9f:
91:99:db:0c:28:6a:05:4c:7f:5d:e9:0a:bb:be:46:53:b3:25:
12:b6:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:58 2025 by rpki-client