Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/ZOrfGuxYr-AGVishKANZfi1iYXI.roa
File: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (raw, json)
Hash identifier: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=
Subject key identifier: 64:EA:DF:1A:EC:58:AF:E0:06:56:2B:21:28:03:59:7E:2D:62:61:72
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019422FC3775E4BC28307FC6594E256C5F61
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/ZOrfGuxYr-AGVishKANZfi1iYXI.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61311
IP address blocks: 91.202.176.0/22 maxlen: 24
91.202.176.0/24 maxlen: 24
91.202.177.0/24 maxlen: 24
91.202.178.0/24 maxlen: 24
91.202.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:37:75:e4:bc:28:30:7f:c6:59:4e:25:6c:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64eadf1aec58afe006562b212803597e2d626172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:21:27:cb:92:be:c6:da:24:ae:22:e2:a1:
71:bb:9d:8a:1d:9b:24:b8:42:c3:20:ed:4c:e3:60:
15:62:01:07:82:ce:fb:09:0c:1a:e0:a8:d3:e3:01:
1c:d2:b7:95:bd:1f:60:7f:44:d6:00:a2:d3:50:17:
7c:f1:a4:92:06:9b:b6:d2:fa:89:03:11:55:cb:0d:
e5:c7:45:ba:b3:88:17:7d:e8:1d:7a:65:42:12:cc:
92:de:0a:f3:f5:74:0a:7e:7b:41:e6:83:9e:64:68:
5d:45:cc:ad:2c:a3:18:00:02:55:7e:0a:92:1e:61:
37:c1:47:d0:93:19:e2:f7:1c:77:20:45:ee:6d:0b:
28:a9:57:d5:70:39:a6:32:41:ef:ee:9f:69:35:d7:
de:95:cc:30:23:3e:69:04:9d:bc:81:c2:cf:25:5c:
29:9c:1b:19:68:a8:c9:7a:27:51:0d:c3:27:cc:04:
e0:7f:e0:3b:5e:60:e8:a6:79:3c:5d:4e:a6:6a:24:
3e:d5:aa:4c:80:4e:53:cc:c7:b8:aa:13:a5:ab:b6:
1b:ae:aa:e0:eb:46:3f:b6:ed:f8:3f:60:c2:c1:12:
c5:2e:2a:b8:31:80:c4:23:64:1b:02:bf:c9:63:27:
0e:fa:8e:03:f0:71:a6:2f:4f:57:5d:90:36:73:f7:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:DF:1A:EC:58:AF:E0:06:56:2B:21:28:03:59:7E:2D:62:61:72
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/ZOrfGuxYr-AGVishKANZfi1iYXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.176.0/22
Signature Algorithm: sha256WithRSAEncryption
80:b9:9a:40:f2:e7:eb:06:e1:7b:d2:43:e3:2a:c8:7b:e8:db:
6f:d2:7f:82:48:a2:45:d9:05:1c:7a:27:81:55:30:43:6a:da:
c2:4a:0a:d1:15:50:e6:45:aa:a7:ac:20:a6:55:e5:0a:ae:0f:
8e:5c:20:23:c3:c0:9d:cf:03:40:85:cf:95:cb:09:ec:3f:6c:
29:92:33:ae:7a:ab:1d:94:b2:59:74:c8:0d:48:70:07:db:e4:
07:b0:8a:d6:54:a4:77:02:58:f3:47:a4:46:bd:a4:0a:5c:df:
31:28:60:0b:a5:bc:d5:a3:1c:b9:36:76:7e:01:65:51:b1:aa:
32:e1:d3:de:e7:b1:80:79:f3:56:b6:38:6d:a7:1a:6c:f5:b2:
91:39:ed:32:7b:98:e1:1f:c5:90:16:52:0b:8d:e0:a9:32:09:
bc:60:1c:b3:57:65:dd:16:23:1a:a8:4d:14:2f:cc:a5:0e:49:
54:24:95:e7:bb:47:ad:19:39:0f:5a:12:41:d1:4e:a0:0f:06:
ad:7b:50:4b:21:25:1d:c0:99:64:26:22:51:31:f7:38:70:8e:
ee:e6:27:aa:7f:e7:86:ad:78:a7:3f:b2:66:7e:d3:a1:7c:79:
4f:66:90:e9:b1:b3:6b:b2:59:33:3a:2b:86:3f:87:95:02:40:
a3:09:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:06 2025 by rpki-client