Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/Op1gh0wFko9724Ahwm8zyJJnCx8.roa
File: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (raw, json)
Hash identifier: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=
Subject key identifier: 3A:9D:60:87:4C:05:92:8F:7B:DB:80:21:C2:6F:33:C8:92:67:0B:1F
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019424B2B3479C3F9B800130D86B35E68DE4
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/Op1gh0wFko9724Ahwm8zyJJnCx8.roa
Signing time: Thu 02 Jan 2025 01:47:58 +0000
ROA not before: Thu 02 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.198.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b3:47:9c:3f:9b:80:01:30:d8:6b:35:e6:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jan 2 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a9d60874c05928f7bdb8021c26f33c892670b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:b8:b2:c6:31:90:05:b3:32:d8:37:5d:76:
d6:d3:d2:d4:97:59:b9:59:c8:b5:e1:15:5f:97:e3:
c8:4d:24:c0:1c:a7:8e:7a:b0:7b:f2:83:32:22:32:
5c:46:bc:fb:b8:21:9b:4b:8d:0c:f9:53:9b:59:63:
50:cb:70:8f:2e:e8:58:9e:c6:d6:27:00:f4:a4:b7:
10:35:e1:7b:3e:a7:09:a6:3d:48:06:eb:75:21:b9:
58:3f:2d:1a:26:14:1b:a0:02:60:ee:ae:56:d1:0a:
22:76:42:bb:20:f3:fd:07:cd:d6:e9:7e:88:80:3e:
4e:66:8e:0d:8e:78:a7:0d:db:84:ab:90:de:81:71:
8d:f9:ff:4a:15:9f:78:b3:59:fa:2f:e3:40:16:de:
37:b1:f3:41:e7:15:d8:02:ee:06:67:7d:48:14:35:
d4:d8:80:b2:ad:04:d2:3f:87:7e:8f:c0:dd:a4:a4:
2e:14:65:f4:5b:67:ce:63:32:69:5a:cd:70:49:2e:
ee:18:ab:67:b5:46:5f:9e:2e:91:d5:a9:e0:34:a5:
0b:2f:ad:c1:ef:79:b7:9a:28:00:99:5a:d0:5a:03:
49:ad:95:57:f2:0b:28:77:47:dc:20:c0:a4:d9:89:
fe:c0:20:c5:3f:fd:73:7f:75:bd:dd:43:9d:47:d0:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:60:87:4C:05:92:8F:7B:DB:80:21:C2:6F:33:C8:92:67:0B:1F
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/Op1gh0wFko9724Ahwm8zyJJnCx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:15:33:7d:00:f5:15:3f:04:27:9b:bc:26:39:6b:48:fe:97:
d5:cb:f4:5a:71:03:f2:27:95:62:ec:42:ed:4d:01:43:67:d7:
0d:2f:25:03:ef:07:de:a1:a4:7b:3f:59:a5:0c:33:03:a3:27:
17:97:52:fa:12:d8:f8:14:49:62:e7:93:b6:d7:f6:66:5e:24:
3e:43:17:25:98:1a:8a:e9:93:89:cb:51:c2:0f:5f:54:91:e9:
67:ef:56:b4:87:04:7e:c7:58:05:e0:54:c7:72:7f:a8:17:93:
89:a6:63:f7:62:94:15:ff:84:48:af:0d:62:d5:db:13:31:4e:
6a:f1:9b:90:4c:4a:48:61:5f:18:88:df:0c:db:7d:91:d5:da:
f3:65:b3:f9:ef:e5:88:8b:ea:ad:5c:a2:ac:19:39:2d:12:0c:
32:24:cd:69:08:5c:32:d6:bc:f2:8d:a2:3c:d7:a4:4f:fc:a4:
5f:76:9a:2b:b1:99:34:3d:4c:81:ba:51:70:a5:06:3d:26:94:
ba:ab:55:7c:98:84:60:c9:16:bc:89:dc:6f:07:c7:e8:52:40:
1a:97:9c:e5:9a:53:c7:fc:12:69:91:30:3b:d0:a1:1e:71:66:
1b:89:43:f4:78:60:c2:46:4e:6d:b8:9f:d8:20:b6:0a:53:41:
8e:8d:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:40 2025 by rpki-client