Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/_XanHjYNZTT-5X0sROOr4g4zRS4.roa
File: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (raw, json)
Hash identifier: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=
Subject key identifier: FD:76:A7:1E:36:0D:65:34:FE:E5:7D:2C:44:E3:AB:E2:0E:33:45:2E
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 01942369FA10BF74AB0C12C9C4E55AE60C45
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/_XanHjYNZTT-5X0sROOr4g4zRS4.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211451
IP address blocks: 91.234.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fa:10:bf:74:ab:0c:12:c9:c4:e5:5a:e6:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd76a71e360d6534fee57d2c44e3abe20e33452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:c2:3a:26:a8:b8:f5:da:6e:14:a2:df:ac:
44:a0:39:25:50:b1:ea:cb:03:2f:dc:c7:b9:84:bd:
c8:35:26:cb:76:43:d7:ca:ca:ad:49:75:fb:60:42:
e7:22:26:e0:0a:d3:c9:a6:04:be:05:44:e4:3d:92:
8c:14:a2:89:09:6b:49:77:14:f5:b9:a9:a5:ee:09:
c5:30:6f:65:17:3a:cf:f8:18:70:5a:99:99:ae:ab:
95:a9:6a:dd:0b:ec:33:de:ff:8c:ec:75:00:2d:56:
a9:e4:2b:13:af:f8:99:da:66:98:f6:2f:c3:6b:d7:
55:67:75:01:dc:75:22:b1:b0:c5:fb:3a:57:b4:1b:
21:b8:14:97:10:2e:0d:89:eb:1b:5a:bc:21:ab:e0:
36:40:d4:87:b4:2e:e8:14:ff:3d:c6:79:d9:88:94:
10:b6:bb:35:0d:ae:9a:08:2e:20:ea:2f:2e:18:32:
47:c1:c3:34:f7:86:3e:ac:b3:49:d5:9a:23:c7:9d:
5a:c8:bd:de:12:80:2f:1b:e0:dd:52:bf:62:d5:9a:
24:03:af:cc:76:7a:ab:d8:d3:32:5a:43:3d:aa:4b:
6e:b7:df:a4:5c:fc:75:75:4f:91:e6:81:e3:76:45:
f4:3d:f6:da:6c:0e:b4:2a:9f:c5:17:c3:74:98:57:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:A7:1E:36:0D:65:34:FE:E5:7D:2C:44:E3:AB:E2:0E:33:45:2E
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/_XanHjYNZTT-5X0sROOr4g4zRS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.233.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8d:eb:e3:3a:81:3e:d2:92:50:bd:32:aa:2e:11:5d:50:7d:
49:d6:ae:29:8b:3f:1d:97:45:4c:37:53:9f:d6:ff:bf:da:4e:
a4:7b:e4:d7:db:b0:4f:77:31:2b:98:dc:30:93:ff:5c:81:b8:
16:0c:30:82:a6:22:47:95:7d:fb:1e:73:87:4f:2f:5f:00:22:
ea:62:8c:e6:5c:1e:f2:c7:62:48:58:4e:aa:46:44:c2:4b:c4:
53:0f:f8:5a:e3:73:b9:54:33:a1:ab:4d:4c:80:7d:34:e6:71:
a3:87:88:53:74:03:9c:c6:68:76:fa:7f:18:22:10:eb:74:1a:
87:0a:b6:30:cd:1c:fa:9b:85:55:ec:b1:6a:a9:49:81:d4:8f:
89:7a:9c:2e:4d:87:07:2c:c6:d9:bd:8d:ec:5d:9e:25:14:9a:
6d:d2:2f:e2:62:b0:26:85:cb:dc:ba:3f:96:79:30:be:65:40:
8e:a5:1b:00:b9:b7:fd:37:d1:01:37:51:17:12:c0:b3:5b:d0:
9b:07:37:bc:7c:9d:50:02:3e:cf:b5:4b:4d:d0:e4:51:86:24:
1a:d6:ce:e9:9c:6b:45:ff:29:92:ae:16:6d:84:b5:72:de:68:
1d:76:4c:ee:a0:13:45:e3:11:84:d2:04:e8:50:4c:cc:83:7c:
98:90:7d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:00 2025 by rpki-client