Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jfWPXM8f17zDdgpgDOvWHfP79LA.roa
File: jfWPXM8f17zDdgpgDOvWHfP79LA.roa (raw, json)
Hash identifier: 9HDbR4+ROOkHpEJdKZBlSl9DaQEuTy0esqMSOmD1qHs=
Subject key identifier: 8D:F5:8F:5C:CF:1F:D7:BC:C3:76:0A:60:0C:EB:D6:1D:F3:FB:F4:B0
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282813CBFC6A707A531932715AED4F5E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jfWPXM8f17zDdgpgDOvWHfP79LA.roa
Signing time: Thu 02 Jan 2025 17:55:02 +0000
ROA not before: Thu 02 Jan 2025 17:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41610
IP address blocks: 212.91.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:13:cb:fc:6a:70:7a:53:19:32:71:5a:ed:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df58f5ccf1fd7bcc3760a600cebd61df3fbf4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:5b:5b:ca:86:32:8d:e0:9a:d7:30:66:b9:
38:f1:4b:45:1a:a8:a9:b6:eb:18:4f:5e:07:c3:40:
48:9d:2e:a6:94:ce:36:ab:8e:51:b4:97:02:94:dd:
1e:93:ec:cf:70:45:1e:1b:21:79:68:4c:f6:3a:73:
f2:46:2e:c2:52:97:77:73:d6:b7:02:68:db:7a:4b:
ba:6b:b5:6f:81:a9:94:04:76:ce:34:d7:7d:f1:31:
a6:7d:f7:c8:e7:c3:9d:72:6b:41:84:33:a9:53:76:
90:95:68:7a:0c:db:d9:c2:fb:ea:03:9d:9a:71:4c:
41:93:34:b0:35:f7:10:fa:fb:b9:7d:98:08:ab:cb:
ae:08:d3:02:e1:d6:d6:09:b8:f1:3f:73:5e:04:6c:
60:38:ed:51:d1:93:08:41:a8:ad:d2:05:c4:27:ea:
ad:d9:af:2e:3a:01:0f:d4:83:43:c5:4b:c2:97:69:
5a:80:d0:0a:4a:6c:0e:2e:33:e4:cf:94:e5:74:80:
c9:34:b3:8c:b8:7b:40:ab:f7:5f:9f:b4:06:06:b6:
38:91:7e:d2:d7:ef:a7:54:40:9b:16:ff:97:ce:4a:
4d:75:b1:65:f5:98:a0:7e:ce:46:13:70:1d:9e:72:
64:cb:72:c2:88:79:e3:9a:40:61:37:2d:cf:c0:be:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:8F:5C:CF:1F:D7:BC:C3:76:0A:60:0C:EB:D6:1D:F3:FB:F4:B0
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jfWPXM8f17zDdgpgDOvWHfP79LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.162.0/24
Signature Algorithm: sha256WithRSAEncryption
59:59:15:2a:16:00:dd:34:9a:d5:f5:00:80:49:12:ad:53:0b:
6e:38:8a:6a:8f:a6:78:26:ae:00:fa:47:d8:93:96:ab:92:be:
c2:c3:10:a6:27:08:44:b8:35:05:95:2b:09:7f:f4:41:a8:c5:
63:a7:a6:33:7d:17:62:aa:d7:e5:f1:f0:48:36:1a:95:16:f2:
66:09:17:df:7e:2c:30:52:ee:1a:b6:4f:4b:d1:f5:f1:86:7d:
79:c6:96:93:e6:60:17:08:65:7d:85:2e:b1:a3:97:dc:81:52:
19:41:48:e8:f0:e3:19:a4:7c:24:b9:1b:8f:c2:f8:17:b4:41:
74:3c:a9:68:6b:5c:99:77:8d:4e:49:b5:cb:94:6a:3d:6e:28:
e4:30:5a:33:8d:d0:6f:1c:40:79:3b:ee:e3:11:f9:a6:d2:8a:
1a:8c:ac:4c:b9:42:db:2d:9f:08:8d:64:ef:ff:0b:a3:99:9a:
7d:9a:85:b1:d1:10:a4:f2:6c:af:31:b6:a9:a6:39:d0:ee:fc:
99:a4:c7:f7:48:cc:eb:30:40:a6:c6:ca:66:0e:93:e1:9d:bf:
29:4f:13:ea:be:7f:33:70:b4:1f:28:7b:05:6f:f1:d1:b4:52:
18:51:da:08:4f:54:d7:d4:88:f7:a3:8d:ea:f7:eb:bf:52:a8:
6c:12:91:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:09 2025 by rpki-client