Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/n71MSGzOhUkplgZWWIqcoN_zTeY.roa
File: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (raw, json)
Hash identifier: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=
Subject key identifier: 9F:BD:4C:48:6C:CE:85:49:29:96:06:56:58:8A:9C:A0:DF:F3:4D:E6
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019425222AA942D4F453C7DC569D33117B4F
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/n71MSGzOhUkplgZWWIqcoN_zTeY.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34288
IP address blocks: 91.232.37.0/24 maxlen: 24
2001:67c:2f94::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2a:a9:42:d4:f4:53:c7:dc:56:9d:33:11:7b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fbd4c486cce854929960656588a9ca0dff34de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:9f:2b:98:50:96:f4:38:d4:c6:1d:dd:7b:
70:2a:71:c2:cd:70:84:43:fa:0c:8a:aa:66:5f:4a:
b1:75:8a:e8:21:14:63:95:d7:26:ac:89:d9:f6:97:
4c:12:1e:e8:69:f5:26:60:e2:34:ce:88:52:4c:c2:
b2:a0:e8:9f:fc:06:81:a1:02:8f:bb:2c:56:ec:e5:
84:62:ef:2f:3e:18:4c:00:01:66:b1:11:2b:2d:75:
80:c7:31:71:33:ac:f9:6a:86:aa:f2:e6:e7:e7:e9:
18:88:65:36:17:05:b1:37:0a:90:53:d0:a7:d8:f1:
06:5e:4b:2f:d0:f8:65:3f:5c:34:14:21:a2:61:76:
22:0f:46:85:1b:14:6e:0e:27:79:8e:c1:71:84:cd:
f3:af:ff:fe:bd:71:b9:72:09:32:20:67:9e:2d:6c:
7a:66:22:d4:5c:36:f6:4c:08:72:88:0b:62:cb:a2:
ef:98:91:cd:9b:e1:4e:19:31:b2:9d:fd:b8:17:79:
3e:c7:dd:16:c3:4d:a7:8d:13:da:fc:f0:aa:90:c1:
5d:d1:2b:ea:22:db:a2:87:ce:a7:7f:2f:7d:9b:16:
32:a0:30:e1:09:bc:25:b6:26:7e:bb:8b:ef:e7:e2:
61:59:ae:be:69:65:02:e7:a0:5a:5f:a2:2e:51:e8:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BD:4C:48:6C:CE:85:49:29:96:06:56:58:8A:9C:A0:DF:F3:4D:E6
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/n71MSGzOhUkplgZWWIqcoN_zTeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.37.0/24
IPv6:
2001:67c:2f94::/48
Signature Algorithm: sha256WithRSAEncryption
2f:14:e0:c2:93:da:e5:ae:f7:e0:3f:8c:1d:a3:9d:24:87:df:
9e:bf:d6:5e:de:82:63:0d:a1:1e:56:7a:38:0b:40:eb:0a:77:
12:cc:55:ab:0e:69:11:7f:50:d7:83:32:75:52:18:34:83:e6:
b7:35:a4:0f:08:1b:6d:ae:ca:48:16:46:c9:06:1a:71:b0:21:
0b:c1:06:f5:62:10:20:ad:f7:e7:fb:9e:aa:f6:81:81:2d:04:
51:cb:f5:65:a1:94:9b:f9:84:0e:c7:14:29:b4:13:f8:02:0d:
28:1d:b1:67:60:c1:d5:a0:a7:8a:54:6b:72:a0:54:64:96:1f:
21:6d:cb:9b:38:1f:5b:93:d6:64:22:82:69:7a:b2:69:42:5f:
c9:e5:c4:7c:91:6c:e2:97:87:4a:15:b9:b7:95:94:68:0d:26:
88:e3:e7:79:5b:68:05:75:70:f5:de:a1:5d:e9:ce:29:cc:c8:
94:65:ab:f6:65:18:30:03:72:06:61:2b:78:3f:0f:77:69:b5:
f9:a9:c3:f1:62:a6:0f:d9:e0:d0:8e:47:03:67:1c:aa:ea:a2:
7c:d2:98:93:02:c3:ec:96:b7:07:4d:e7:5d:2d:75:af:0c:15:
78:a5:6c:70:0f:48:54:92:80:73:2a:b3:b4:0f:20:47:4b:7b:
76:b5:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:40 2025 by rpki-client