Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/K7Ga725J3x2RwbbwxIq7lR_PIPs.roa
File: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (raw, json)
Hash identifier: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=
Subject key identifier: 2B:B1:9A:EF:6E:49:DF:1D:91:C1:B6:F0:C4:8A:BB:95:1F:CF:20:FB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 01942067D16603D3A4796048F6B3ED659743
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/K7Ga725J3x2RwbbwxIq7lR_PIPs.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 91.244.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d1:66:03:d3:a4:79:60:48:f6:b3:ed:65:97:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bb19aef6e49df1d91c1b6f0c48abb951fcf20fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:ac:69:3b:67:5e:3e:7b:de:91:df:b8:ec:
e8:16:8d:70:95:a9:96:2b:e1:5e:be:35:aa:86:86:
76:68:5e:e8:61:68:47:10:c7:b2:a0:01:eb:f9:cc:
31:36:be:ba:a0:32:fe:5e:79:01:9e:45:c6:df:04:
e7:17:9e:4d:f8:19:4a:35:20:aa:c7:70:54:a3:8c:
71:e3:6b:65:93:7d:1e:19:d2:02:8d:79:3c:30:c5:
fc:d4:4d:27:91:b2:ad:22:3f:aa:8a:0a:8c:8e:17:
66:7d:37:8c:28:1f:95:5c:b2:10:c6:51:03:cb:02:
4d:c4:23:7a:f5:ff:d0:85:a3:2a:5a:2e:29:a2:29:
c8:fe:ae:e4:0b:be:4d:fc:eb:14:9e:9d:7a:66:7a:
e4:43:e4:6e:66:dd:f2:50:ec:f9:f0:fa:35:a3:59:
06:7c:5e:a6:5e:cc:eb:02:ff:36:9c:4c:0e:48:6d:
5f:5d:27:8c:75:64:b2:7d:d3:f3:d8:ba:49:3f:f9:
9f:91:e7:47:bb:e9:af:1e:f9:9d:d9:b1:7b:a5:1e:
72:d8:32:f0:40:c5:2e:de:a2:1f:20:58:bf:cc:d7:
f7:07:11:43:a0:2e:ac:c2:e7:5f:d8:22:6e:57:c4:
e6:6e:eb:c2:35:8a:6f:1f:62:59:3c:1a:bb:da:86:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B1:9A:EF:6E:49:DF:1D:91:C1:B6:F0:C4:8A:BB:95:1F:CF:20:FB
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/K7Ga725J3x2RwbbwxIq7lR_PIPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:57:ad:64:96:8e:f6:9c:2c:c6:54:dd:8b:77:da:41:5a:9d:
4f:8b:65:cb:62:fe:aa:ac:d1:5b:3d:2f:c0:7f:c5:89:68:d0:
1a:aa:df:47:9c:96:68:d0:48:5d:8a:3e:e7:32:13:16:83:34:
44:70:c3:6f:e8:5c:44:ab:f6:c4:d0:d2:74:e4:83:14:05:dd:
11:47:4f:7d:3c:a3:82:8f:07:2a:a3:52:07:ae:be:cb:06:50:
c4:d3:06:95:00:9b:a2:8f:2d:82:2c:d1:fd:9a:74:96:f0:cc:
6c:14:a8:7b:4b:c0:23:06:ec:8d:99:f2:fb:ef:9f:18:61:f7:
8a:a8:32:f7:16:1e:7b:0c:8b:b0:e0:b8:5f:f6:eb:17:03:78:
e6:e9:9e:bd:28:d8:e9:95:cd:88:52:94:e8:91:72:07:4a:37:
b4:0b:65:b8:dc:d2:5d:70:3e:48:c9:fd:82:42:f8:83:4a:ac:
53:d9:61:0e:ae:7f:de:5e:a8:aa:b7:93:41:21:7d:0b:1b:4d:
e3:29:89:aa:6f:89:9d:e0:4e:d1:d8:7e:51:d4:44:16:cb:fb:
87:eb:6d:a2:e2:35:73:3f:83:8b:a0:9a:56:83:7d:ed:dc:1d:
06:7b:6e:d4:00:a3:65:8d:5f:54:6a:62:50:cc:04:0c:8e:bd:
33:e8:62:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:59 2025 by rpki-client