Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/H7J8lcwk3WdhuKagL6mXekb371E.roa
File: H7J8lcwk3WdhuKagL6mXekb371E.roa (raw, json)
Hash identifier: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=
Subject key identifier: 1F:B2:7C:95:CC:24:DD:67:61:B8:A6:A0:2F:A9:97:7A:46:F7:EF:51
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 0194222018E644B8F217C7F18B1FF3DCB84D
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/H7J8lcwk3WdhuKagL6mXekb371E.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.209.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:18:e6:44:b8:f2:17:c7:f1:8b:1f:f3:dc:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fb27c95cc24dd6761b8a6a02fa9977a46f7ef51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:63:50:e8:a1:6d:97:2c:13:80:58:7f:0b:
9a:d4:57:11:95:60:a8:53:51:71:63:cc:d3:a7:48:
c9:a5:bd:d0:bf:44:17:66:68:12:c8:d7:84:ad:a7:
c2:00:a1:67:e4:d1:0f:37:9c:08:75:d4:f1:3f:f3:
9b:4f:e5:8e:e0:65:05:bb:e2:20:cb:b9:ff:a0:04:
91:41:8b:27:e5:e9:a3:a5:74:38:0c:f3:15:31:ee:
d6:71:2f:1c:a2:04:c2:41:e2:5b:3c:81:16:fd:51:
1a:21:4b:97:57:d5:dc:62:f9:5b:4b:92:63:7d:8a:
02:a8:cd:88:b8:f2:bb:6a:5f:8b:62:41:3c:9f:a0:
a8:6d:54:35:50:42:d1:3c:0f:52:ce:51:17:fa:e7:
f6:a6:43:64:b3:81:c5:cf:c8:00:a8:98:2b:0e:64:
d4:27:55:64:a4:72:7d:06:99:7c:58:7e:79:cd:eb:
36:72:c1:4c:a1:79:38:62:4c:2b:3c:6a:03:8f:78:
a5:98:2e:f4:aa:5d:89:5b:f0:7a:2b:54:72:fc:04:
70:c4:23:fa:3a:5c:17:79:bd:db:0c:67:75:10:4c:
dc:4e:27:1c:7c:50:bc:a4:c9:1c:65:55:91:4e:52:
7a:b1:98:16:6d:95:63:08:aa:0c:c4:8e:c5:cd:e7:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B2:7C:95:CC:24:DD:67:61:B8:A6:A0:2F:A9:97:7A:46:F7:EF:51
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/H7J8lcwk3WdhuKagL6mXekb371E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6d:4c:fe:c8:da:1e:1d:74:f8:7c:a5:6c:a6:9d:4d:99:14:
52:24:10:e1:9c:db:70:a6:0c:27:97:32:8d:37:36:8c:59:ff:
d3:f2:8c:7f:26:11:1a:7b:14:d4:44:d3:2e:61:f9:b7:e2:40:
40:ba:83:5c:60:ec:1b:7d:77:12:1e:a1:50:8b:e6:3b:77:4d:
40:8c:08:54:33:58:e8:97:15:a6:d5:aa:e3:91:d1:b6:62:12:
b4:aa:b3:f0:7c:59:5c:35:e4:aa:ea:82:3c:40:fc:a6:73:14:
66:cb:65:07:df:35:ec:8f:07:49:c0:72:21:74:48:71:72:60:
38:04:27:f6:5a:94:cf:6c:e9:28:7e:1c:4f:cb:f3:0d:d2:97:
88:3e:41:80:29:00:d8:4a:2b:32:a2:21:07:6b:87:14:ef:ec:
30:75:4e:2e:f7:c2:5e:c2:e8:c1:69:4f:28:ab:53:18:90:0e:
5c:00:a8:28:cc:39:00:67:e7:97:ce:c5:3e:40:88:39:9a:4f:
9c:43:1e:5e:38:39:a0:d2:d5:be:3d:9e:68:b9:4d:55:63:8c:
f2:e9:18:20:f0:24:97:6b:bf:89:5c:ac:01:f7:a5:08:77:f4:
c2:7a:18:ab:3f:1f:0c:a2:fa:f5:dc:ab:21:b0:7d:74:1c:5d:
1a:06:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:50 2025 by rpki-client