Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/S4_bZaUrYeif2UyHHeNglamlIdY.roa
File: S4_bZaUrYeif2UyHHeNglamlIdY.roa (raw, json)
Hash identifier: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=
Subject key identifier: 4B:8F:DB:65:A5:2B:61:E8:9F:D9:4C:87:1D:E3:60:95:A9:A5:21:D6
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 019427B5C3D9D1362EC7D4D43BEF8BDBF852
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/S4_bZaUrYeif2UyHHeNglamlIdY.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 91.208.95.0/24 maxlen: 24
194.180.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c3:d9:d1:36:2e:c7:d4:d4:3b:ef:8b:db:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8fdb65a52b61e89fd94c871de36095a9a521d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:3c:b7:06:79:6a:0d:22:57:34:17:f6:49:
20:d4:4b:da:c4:b3:95:39:c4:2c:de:75:aa:b5:72:
ed:65:0e:98:44:f5:1a:54:a5:f2:6a:d5:27:df:0b:
e8:d9:9d:83:09:df:58:a9:20:ef:c3:f6:7e:18:d7:
79:af:59:cd:3e:36:14:84:6c:a2:85:d0:1c:28:d6:
89:25:24:85:df:be:14:a9:d5:e1:13:44:5a:5e:b7:
a0:59:30:2f:fd:5d:a0:cf:24:4d:cd:08:3d:e8:74:
71:be:29:f5:01:fa:2d:cd:63:20:97:b2:e4:7b:92:
5b:e5:86:1d:76:a2:63:7e:38:24:09:cf:f1:8f:f1:
7f:50:ba:2a:e9:18:0e:8f:28:00:4a:7f:eb:15:fc:
b7:5f:be:9e:60:85:c5:44:6f:b1:53:3f:ad:7a:7c:
4c:98:0d:4c:cc:1c:20:c9:98:dd:55:9d:28:a6:1b:
fd:70:b9:ba:1c:e9:59:a9:a8:3e:be:d0:aa:09:8a:
fe:b5:10:2e:25:04:9d:17:a1:69:0b:1d:40:2f:24:
eb:75:89:71:98:6a:1e:ad:f6:b7:5f:82:17:6d:b2:
04:15:5a:22:c2:35:56:ee:48:de:cd:9a:de:72:ce:
6d:0c:78:06:53:dd:46:eb:19:10:08:cf:28:8f:6a:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8F:DB:65:A5:2B:61:E8:9F:D9:4C:87:1D:E3:60:95:A9:A5:21:D6
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/S4_bZaUrYeif2UyHHeNglamlIdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.95.0/24
194.180.184.0/24
Signature Algorithm: sha256WithRSAEncryption
31:75:06:48:07:e5:17:aa:be:f4:12:ff:f3:97:61:a7:c4:6f:
c1:b3:1b:b0:08:4f:5f:c0:1e:0c:72:85:19:7c:fe:a0:f7:6e:
5c:11:bb:ad:33:13:38:b7:67:17:8c:cf:b6:4e:36:1b:e3:8f:
c2:91:33:74:d1:6a:f6:46:09:69:15:67:7a:18:9c:82:c3:0a:
88:b3:ac:71:94:91:22:ae:37:8c:d1:65:b9:a3:ad:7a:69:4a:
d5:ed:1b:ac:65:e9:79:90:b7:cc:c4:0c:4b:9b:de:fb:19:79:
83:bf:7c:93:a8:9c:e6:79:ac:4f:4b:c3:0d:8a:69:30:ce:bb:
c6:24:55:e7:50:98:b3:0a:c9:03:61:2f:03:df:2e:1d:ed:1f:
06:22:60:8c:79:71:07:88:28:2e:cc:bc:93:d7:ba:76:53:ec:
8a:1a:74:15:d0:ae:41:2c:da:6b:96:10:96:80:de:e4:54:3e:
56:c5:0f:ed:64:fc:24:e8:8a:00:21:9f:18:58:9a:c1:5c:16:
ac:80:46:6f:72:88:17:2d:5d:7d:a1:10:60:30:2f:9b:50:73:
43:d5:eb:ae:d9:25:be:ba:66:5b:39:db:d3:02:01:4d:72:7e:
6f:ec:b5:ea:e2:0a:ef:99:9c:1a:5d:de:ac:9d:28:fe:15:60:
7c:73:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:47:01 2025 by rpki-client