Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/jtaR0UqVsAZLkY0kZNEVD_APhkw.roa
File: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (raw, json)
Hash identifier: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=
Subject key identifier: 8E:D6:91:D1:4A:95:B0:06:4B:91:8D:24:64:D1:15:0F:F0:0F:86:4C
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 01942067D19E75E769A7DE5A3517D42B33BE
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/jtaR0UqVsAZLkY0kZNEVD_APhkw.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25160
IP address blocks: 91.244.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d1:9e:75:e7:69:a7:de:5a:35:17:d4:2b:33:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ed691d14a95b0064b918d2464d1150ff00f864c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:6e:c9:ca:35:b1:ae:7a:e4:f0:de:0f:6d:
82:9d:96:96:72:c5:92:07:ae:38:ef:30:9d:5f:0a:
30:98:a1:da:eb:da:27:3d:04:39:e3:fa:7e:87:5e:
06:60:34:f1:16:9a:99:46:91:38:ac:45:cd:a9:3d:
3b:5a:b6:3b:50:20:ec:f7:79:39:ae:5b:87:84:90:
fe:2d:17:4e:82:96:49:ad:b3:11:10:3b:dd:e0:18:
4b:9a:28:ef:b0:6b:0a:f3:76:1c:68:9b:21:4b:ca:
15:10:ec:72:e0:53:55:f5:7b:52:0a:41:d2:e0:ce:
24:30:92:71:ca:52:cb:8a:35:4c:79:ce:24:c6:06:
b4:96:15:15:51:91:f5:86:6c:75:20:86:9b:00:7e:
fb:3c:65:f8:8d:01:ab:92:84:6b:16:e7:47:8d:25:
04:bc:c7:d9:f5:d7:59:b1:f5:6b:5f:91:ea:a9:06:
7f:6a:b6:d4:54:c4:eb:a8:93:be:b6:21:91:45:20:
0d:1a:8c:b3:ec:72:34:28:f6:9b:64:56:7d:7c:66:
52:c5:f0:9c:b8:92:a3:48:a9:1f:29:fd:28:d9:44:
0c:6e:e1:e6:b3:37:a3:58:d9:59:4e:85:e8:c8:e8:
43:d0:4d:35:8d:93:6a:4a:f7:e5:34:df:5a:d3:ac:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D6:91:D1:4A:95:B0:06:4B:91:8D:24:64:D1:15:0F:F0:0F:86:4C
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/jtaR0UqVsAZLkY0kZNEVD_APhkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:25:bd:2c:be:77:c1:36:42:6e:26:b4:78:e6:40:95:44:a8:
60:9c:85:5e:19:e7:8f:3c:e0:a9:14:92:e2:3b:e1:fb:59:45:
15:99:87:90:f5:60:0a:c0:f4:c2:d3:49:89:f1:3a:50:e9:a0:
a7:ff:d8:61:de:f8:33:6d:73:fc:ac:ba:6f:3d:b8:aa:1e:02:
dd:79:cc:5e:fe:14:b2:f8:7c:cc:dc:86:ec:e9:60:0e:4b:22:
c8:36:f2:06:31:d3:14:0c:1f:97:de:cf:fe:bf:d3:67:f8:39:
8b:ab:c6:05:02:f9:5b:66:5a:48:76:44:43:78:f2:fb:dc:de:
35:f2:58:00:bc:71:b4:95:96:ce:bf:0d:ca:2d:b9:81:0b:52:
36:93:b3:d8:63:0e:62:ef:b2:a0:06:20:bf:ff:72:9a:cf:81:
38:6c:d7:85:52:a2:d7:86:59:2f:05:7e:f0:03:36:7f:7f:60:
67:3a:eb:5b:75:c1:df:65:56:0f:5c:78:92:b0:f1:9b:36:09:
26:1d:41:1a:cd:6b:6a:63:af:ad:da:e5:43:90:93:c6:81:c8:
2a:05:a4:8a:b9:c1:3e:19:db:1e:7f:29:bb:6f:5a:9a:eb:6f:
cd:d3:76:5e:17:e9:c2:94:1c:17:5b:18:e9:bc:75:51:8c:6e:
a8:9a:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:38 2025 by rpki-client