Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa
File: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (raw, json)
Hash identifier: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=
Subject key identifier: 6B:87:96:5D:EF:66:2F:36:5D:3A:E2:45:E2:0F:A2:FE:C4:CF:4C:AF
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 01941F8C8DDD546D80005710D6E0DB4CDFB5
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48593
IP address blocks: 91.209.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8d:dd:54:6d:80:00:57:10:d6:e0:db:4c:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b87965def662f365d3ae245e20fa2fec4cf4caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:b6:28:ea:06:9c:1d:fa:16:af:84:79:a8:
aa:2c:b7:a6:9f:b0:d2:95:09:7d:06:85:1c:d2:4c:
72:3e:76:47:e4:fc:c8:e3:c7:61:3b:c7:9e:c4:45:
82:5d:91:3e:89:d9:16:d0:c2:10:39:b3:13:67:01:
f9:80:85:ab:fe:71:1d:18:69:89:39:3b:52:c4:ed:
96:76:b3:7c:94:4c:e4:28:b4:7b:b6:08:4c:39:24:
d8:c0:ce:90:64:ed:d6:16:2c:5d:b4:d0:cc:dc:f4:
62:7f:d2:81:56:79:12:2b:9a:ba:39:de:a9:d7:b5:
ea:37:d3:77:7f:9a:0f:ec:28:59:f4:56:01:18:1f:
63:68:31:ca:ff:a6:e1:08:46:7d:0c:b1:79:4b:d8:
30:b2:3d:e9:57:ab:e9:b9:a9:7b:81:2f:db:1e:7d:
59:66:3d:50:8d:eb:5d:a2:df:21:ba:af:39:06:5b:
6a:37:ef:1c:1e:fb:e6:14:c6:c1:51:36:89:ef:d3:
12:53:f3:0c:1f:03:73:d8:9b:5d:b8:b6:3f:43:37:
06:a3:e3:4e:d3:eb:0d:59:6a:15:ab:5a:f1:b7:61:
8e:11:0c:63:6f:37:04:aa:b1:3b:8a:96:ce:fe:8b:
2f:9d:85:4d:a3:9b:ab:c6:26:44:e0:39:56:17:81:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:96:5D:EF:66:2F:36:5D:3A:E2:45:E2:0F:A2:FE:C4:CF:4C:AF
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e5:11:78:fb:53:93:dc:7e:03:e7:91:af:50:ee:fa:de:90:
12:79:ca:42:c1:1c:9d:4c:99:65:44:ae:d9:7a:96:91:b3:16:
bb:7b:be:56:ca:d7:09:4a:56:d4:b8:cb:e4:2a:f9:53:b2:a9:
18:08:73:4e:86:b1:93:ea:4f:e2:86:c4:2e:58:7d:f4:c7:0a:
3c:1e:84:f4:15:65:fd:17:13:fd:30:a3:dd:e9:62:0b:4e:21:
76:f7:5d:21:c2:70:b7:5f:4c:43:9e:c1:95:c4:26:d3:ce:c7:
bb:60:59:bf:b2:b4:83:88:f9:e8:0f:87:ba:b5:a6:58:44:32:
78:20:e0:e6:1a:ab:9a:b4:b3:72:36:73:39:c9:d2:ed:f2:47:
c0:a4:f0:aa:b1:8b:61:03:36:2a:02:3b:09:d1:6b:fb:30:08:
c4:2a:a1:95:3c:92:d1:ca:89:18:1e:3a:38:1a:42:8b:b1:fc:
b7:f2:51:37:e1:6b:81:1e:e9:67:25:77:75:43:af:98:48:55:
a8:41:bf:29:c8:83:de:63:5f:74:fd:e8:97:fd:61:68:0a:ca:
c8:b1:12:42:c0:9f:cf:20:57:af:67:f8:d6:e6:20:52:bf:40:
f6:a0:cf:c0:ee:34:83:62:d0:87:7d:90:a3:11:b0:8b:a0:0c:
30:b8:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:54 2025 by rpki-client