Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/XXRk-2utC2qSFmq343z5VXrm2u4.roa
File: XXRk-2utC2qSFmq343z5VXrm2u4.roa (raw, json)
Hash identifier: ytRglwlu3WOrTr72XPTW+Woc0VzZSF5e3VxmBUNFs3g=
Subject key identifier: 5D:74:64:FB:6B:AD:0B:6A:92:16:6A:B7:E3:7C:F9:55:7A:E6:DA:EE
Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial: 019427B6843103748E70D6E895666795BED1
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/XXRk-2utC2qSFmq343z5VXrm2u4.roa
Signing time: Thu 02 Jan 2025 15:51:00 +0000
ROA not before: Thu 02 Jan 2025 15:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202348
IP address blocks: 91.240.89.0/24 maxlen: 24
2a13:141:2::/48 maxlen: 48
2a13:141:4::/48 maxlen: 48
2a13:141:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:84:31:03:74:8e:70:d6:e8:95:66:67:95:be:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Validity
Not Before: Jan 2 15:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d7464fb6bad0b6a92166ab7e37cf9557ae6daee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:ea:1e:7d:0c:0f:0e:cb:1a:2f:16:3c:68:
8d:5a:c1:ed:85:3a:81:64:9b:61:35:75:54:00:16:
19:d7:68:be:bf:02:21:22:3b:ba:39:c5:38:84:36:
9a:11:09:7a:9c:42:05:ed:27:54:4a:c5:5c:18:a6:
97:e0:e1:fc:ab:e2:92:d0:24:36:b7:8e:c2:08:c2:
fa:c9:43:4f:85:19:94:3e:63:12:ca:4a:6c:a8:55:
d6:7c:3d:30:35:ac:5c:84:c9:c0:cb:33:be:1c:93:
da:77:ef:e0:ff:74:cd:3c:c3:12:7b:dc:31:d2:03:
13:77:50:96:5f:ad:8e:b4:3a:8a:04:27:51:c1:2c:
20:ad:49:71:8b:33:c9:83:cd:3b:7c:47:e3:5b:2a:
d0:a7:21:6c:1d:f7:5a:d1:b5:a9:02:bf:30:d5:d9:
92:f9:83:6d:6a:ff:47:93:c3:ce:37:56:4e:e5:48:
81:62:22:5b:46:26:e0:cc:2c:33:5b:66:1b:6b:0d:
2d:09:bb:f0:b7:aa:91:f4:0b:06:6e:63:75:32:07:
7b:c8:06:2c:32:62:94:19:49:de:cf:3c:e5:14:b7:
ef:c4:59:3a:32:5c:36:12:07:39:39:51:be:ed:8a:
5a:35:56:47:b7:7a:31:48:1b:a9:f1:d2:34:fe:8e:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:74:64:FB:6B:AD:0B:6A:92:16:6A:B7:E3:7C:F9:55:7A:E6:DA:EE
X509v3 Authority Key Identifier:
keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/XXRk-2utC2qSFmq343z5VXrm2u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.89.0/24
IPv6:
2a13:141:2::/48
2a13:141:4::/48
2a13:141:11::/48
Signature Algorithm: sha256WithRSAEncryption
5b:a8:18:e4:d1:19:6e:76:c5:3f:9f:b1:5a:64:cc:b3:04:13:
38:43:d1:96:e4:8e:fe:4a:49:03:13:28:f4:7b:bd:96:93:a3:
38:69:53:40:39:ce:7d:41:05:52:3c:01:2a:7e:d5:59:05:eb:
d7:c7:ea:3c:23:ad:d2:b4:1f:e2:2c:3f:ea:ca:20:13:9c:9e:
b5:f2:2b:d1:c6:93:61:e0:ec:e9:a3:3d:b5:42:66:58:ed:03:
de:28:93:03:83:12:30:bd:2e:25:41:ce:d9:18:8c:f4:ed:e6:
97:46:7a:dc:eb:22:f7:6d:0a:21:c0:68:fe:d0:e7:4e:66:81:
63:20:63:37:05:fd:4a:49:de:08:71:9a:2b:e6:30:eb:03:d8:
dd:85:9a:f1:d1:b7:44:53:df:1d:ec:fd:95:a1:25:98:92:fb:
f7:04:70:77:65:a1:9e:ca:db:28:11:c8:09:38:4e:8b:6a:8d:
d2:e6:0e:1c:07:dc:6c:79:ad:3a:04:af:aa:9f:85:ae:4c:3c:
6f:a5:2a:b1:63:a6:ea:37:c1:dc:35:4a:d2:93:7d:9f:a0:c4:
ba:17:ab:fa:36:62:4e:57:07:bf:1f:65:32:c7:a8:03:5e:f4:
d1:66:ab:84:c7:aa:c0:2d:b2:14:07:68:c2:34:80:e0:03:48:
27:37:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:22:15 2025 by rpki-client