Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/B9CXmyFJNB3NRKLw7pcYD1T3USA.roa
File: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (raw, json)
Hash identifier: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=
Subject key identifier: 07:D0:97:9B:21:49:34:1D:CD:44:A2:F0:EE:97:18:0F:54:F7:51:20
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019424451896D38CCBD4232F186C3038AAA6
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/B9CXmyFJNB3NRKLw7pcYD1T3USA.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42507
IP address blocks: 91.151.196.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:18:96:d3:8c:cb:d4:23:2f:18:6c:30:38:aa:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d0979b2149341dcd44a2f0ee97180f54f75120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:7c:5c:f5:5f:5f:c9:b5:59:72:63:22:3c:
7a:9e:dc:da:27:69:fd:dd:fb:ad:67:1b:1d:3d:11:
2e:37:3f:99:4a:22:ce:ed:a6:12:ab:71:4f:9a:ab:
eb:3f:a5:94:8a:55:a2:16:95:84:9e:88:ed:62:a5:
62:b6:51:6f:41:72:ae:50:06:85:85:26:64:1d:c8:
64:8d:71:16:43:74:99:42:25:45:e0:1d:d4:7f:35:
a9:e1:1f:34:a5:98:e3:73:7b:cf:67:78:9c:a9:87:
c2:a8:d2:2f:7e:16:4d:81:02:12:8c:b7:b9:c1:0c:
aa:2f:a9:a9:96:5d:1d:f4:29:f7:20:64:cb:c8:7d:
9f:67:7a:50:83:bd:15:30:b4:83:42:ea:3b:29:84:
98:db:cf:ea:57:04:d0:93:a7:d4:dd:8d:15:65:68:
60:2f:c9:d7:aa:b9:33:60:1e:cc:6c:bd:ba:35:a5:
c7:43:58:eb:0c:2d:c8:9a:65:5b:ce:97:b2:31:3c:
1b:4e:dd:3b:1b:51:95:60:42:c4:0e:5a:85:cd:77:
19:0c:a4:5c:6e:39:ab:26:69:f6:98:f4:d4:32:fc:
a1:12:b5:71:fe:59:24:ca:c3:0c:84:af:1e:49:05:
64:e9:d0:6f:00:9f:65:f1:f2:03:86:70:55:0b:1e:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:97:9B:21:49:34:1D:CD:44:A2:F0:EE:97:18:0F:54:F7:51:20
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/B9CXmyFJNB3NRKLw7pcYD1T3USA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.196.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ab:6c:44:b6:fa:a3:e2:93:33:08:9a:b9:69:dd:88:ed:6a:
db:7d:fc:0d:8b:a4:97:6f:c8:f7:7d:87:e5:82:54:e2:6e:66:
d6:48:34:79:c1:6f:29:48:ea:05:08:2d:7a:f9:eb:09:eb:81:
94:76:e8:3c:79:e9:b9:e4:d1:77:75:17:18:32:a2:08:d4:40:
39:2b:5d:52:fc:f0:93:2b:5a:66:7d:a7:37:5a:be:f7:bb:c3:
12:40:7c:2f:72:97:57:04:87:75:d0:6f:c7:55:a2:22:bc:32:
42:22:7d:23:05:bd:c8:86:a6:6e:a1:23:05:d7:bf:39:05:0d:
06:39:98:35:66:71:16:c4:a9:46:2f:a0:75:9e:1a:a2:7d:57:
cc:68:48:5f:52:1d:f3:3f:9a:20:7e:8f:9f:a1:c0:92:0c:1a:
f1:55:c8:c6:8d:da:90:39:f8:cd:db:94:17:ac:a1:38:ae:7a:
5d:87:10:33:a7:bd:dd:a7:bb:7e:21:75:c0:f7:a3:37:13:28:
f7:96:94:ef:be:09:b8:d6:28:48:9f:03:74:00:d7:62:3d:db:
eb:60:35:89:cc:53:ae:8d:d0:a4:bf:85:95:9a:5d:fd:24:fa:
d5:8d:e5:0a:3a:4d:b6:4a:7d:8e:bf:2a:0d:cc:7c:56:e5:fb:
ad:92:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:04:37 2025 by rpki-client