Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/uC9PLmr5O8CehNSZEFEDNzHH7Us.roa
File: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (raw, json)
Hash identifier: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=
Subject key identifier: B8:2F:4F:2E:6A:F9:3B:C0:9E:84:D4:99:10:51:03:37:31:C7:ED:4B
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019424B394E5A8CBDFA93C81E0E38B447473
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/uC9PLmr5O8CehNSZEFEDNzHH7Us.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52125
IP address blocks: 91.222.64.0/24 maxlen: 24
91.222.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:94:e5:a8:cb:df:a9:3c:81:e0:e3:8b:44:74:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b82f4f2e6af93bc09e84d4991051033731c7ed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:56:e5:d3:70:43:44:a4:84:6e:08:3b:8b:9a:
b9:2f:64:4d:6c:6d:e1:d5:b3:57:f1:12:04:65:91:
b5:86:4b:ee:b7:86:8b:bc:53:ab:b7:dd:b7:81:79:
70:22:81:80:0f:82:60:14:e6:96:e8:60:4e:41:d0:
fa:36:04:53:88:8e:1f:9e:59:fd:ba:68:d2:bd:a1:
15:a2:a0:92:5c:d8:c6:f0:76:01:2f:d3:3a:d3:17:
67:5c:20:08:23:b5:7e:46:ce:56:20:26:a3:e9:0e:
9d:c7:31:e1:68:aa:f5:4f:0d:53:04:c6:43:9d:4c:
d3:8d:b2:2a:6d:bd:f9:c4:e2:5b:7c:9d:51:ec:d8:
58:56:dc:b6:4c:ea:45:e2:13:f7:2f:6d:c6:31:eb:
81:c2:81:85:e6:32:7a:b0:8d:7d:cc:7e:85:c0:a8:
80:77:6b:cb:68:93:85:53:47:c7:94:6a:70:cc:4b:
13:d9:ea:57:2b:8e:92:49:37:13:06:44:ca:11:3b:
d6:dc:ef:e2:07:51:e5:a7:5f:9a:86:4f:a0:1d:48:
a8:52:bf:f1:52:3e:70:8a:19:c6:e8:80:3a:e2:51:
1b:2a:b3:f5:fb:2a:18:ed:32:c1:e8:19:85:f0:0d:
6d:19:70:27:d2:bc:0b:fa:c9:81:04:f4:d6:7d:a9:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:4F:2E:6A:F9:3B:C0:9E:84:D4:99:10:51:03:37:31:C7:ED:4B
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/uC9PLmr5O8CehNSZEFEDNzHH7Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.64.0/23
Signature Algorithm: sha256WithRSAEncryption
88:2e:d9:81:21:06:1d:2a:1c:5b:5f:a6:d4:8b:fa:b4:a2:22:
e8:c5:cc:4a:4f:38:95:c3:a7:b8:4d:e3:2d:be:01:3f:7c:bf:
57:0b:85:e2:70:83:5e:6c:4c:59:96:d9:f4:65:2b:af:70:6c:
00:eb:35:97:18:c7:04:c4:53:4c:53:c6:de:7d:25:1c:c6:df:
03:3a:76:2b:77:95:49:0e:9b:60:34:c6:fd:c5:25:63:44:c2:
94:89:92:0c:1e:f2:82:c6:08:9a:ee:d8:a4:47:5e:d5:81:ab:
d2:15:f8:a7:bf:28:cc:a6:1e:ad:59:71:9d:73:65:50:36:4b:
92:7b:7b:da:b6:b3:c4:f3:ba:10:a3:d4:fc:7b:9e:61:5f:cb:
23:30:cb:f9:aa:c2:e3:c8:16:d5:99:e9:58:48:66:78:50:29:
b2:be:ba:53:ce:82:92:a6:0c:d7:67:80:20:55:18:ef:aa:19:
29:60:6e:4d:a2:17:52:c4:b9:ba:62:ec:06:89:eb:88:b9:43:
fb:5a:5e:7a:3c:fd:fa:5b:71:3e:ac:a0:29:fa:88:5e:6d:f4:
bc:e3:64:68:cb:7f:1e:35:a6:74:c2:ca:04:05:3a:e0:7e:ff:
21:47:40:cb:ae:31:1b:61:53:8f:13:44:de:0e:c4:75:ac:15:
80:25:b0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:47:44 2025 by rpki-client