Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/z5K9wsT3BqydVKpGlTX11AJ7R38.roa
File: z5K9wsT3BqydVKpGlTX11AJ7R38.roa (raw, json)
Hash identifier: VVqHoyV7jjAW4JNfI1uED+ol2qIkMWNomQr1XszZX3Q=
Subject key identifier: CF:92:BD:C2:C4:F7:06:AC:9D:54:AA:46:95:35:F5:D4:02:7B:47:7F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1267B0AEA45C790AB354222E8A48
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/z5K9wsT3BqydVKpGlTX11AJ7R38.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62281
IP address blocks: 91.242.86.0/23 maxlen: 24
91.242.88.0/22 maxlen: 24
91.242.92.0/23 maxlen: 24
91.242.96.0/24 maxlen: 24
91.242.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:67:b0:ae:a4:5c:79:0a:b3:54:22:2e:8a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf92bdc2c4f706ac9d54aa469535f5d4027b477f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:32:fe:41:c7:35:61:2a:29:72:db:4f:3a:
72:7d:91:17:f3:92:ec:35:a9:e9:fa:8a:58:27:cb:
39:63:82:7e:bf:f8:52:ff:39:c6:d1:29:91:bd:91:
db:57:61:78:64:87:b2:df:6f:dc:f2:e1:da:11:5e:
bd:52:12:95:10:b3:07:b4:98:ec:a7:38:7e:62:2a:
ab:ad:57:f7:a5:cc:4f:81:9a:88:d3:b0:25:8b:62:
84:18:70:89:79:bc:51:4f:49:78:14:49:cd:5a:e5:
85:5e:77:5e:60:c5:c9:ce:1a:de:06:9c:14:6c:c2:
69:53:59:1c:95:04:ab:25:3a:8c:22:39:84:fe:e9:
58:29:28:77:8e:bb:33:6e:94:bf:23:a2:99:43:73:
33:59:e7:bb:c6:c8:83:ea:2f:56:5a:75:06:27:30:
cd:ed:92:56:22:aa:6c:a7:b6:5b:08:9e:e6:0e:ab:
0f:21:e9:24:42:25:7f:52:a1:8a:7b:ad:bf:4b:8d:
d8:d4:d4:7a:03:4b:c0:fa:c4:12:83:67:35:2f:94:
0a:85:02:f5:08:d4:77:9b:00:70:56:14:85:94:bd:
da:91:46:6e:ec:f6:2c:93:04:60:14:66:fb:07:46:
8d:df:5e:26:32:24:3b:31:70:bd:22:41:82:02:c1:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:BD:C2:C4:F7:06:AC:9D:54:AA:46:95:35:F5:D4:02:7B:47:7F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/z5K9wsT3BqydVKpGlTX11AJ7R38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.86.0-91.242.93.255
91.242.96.0/24
91.242.106.0/24
Signature Algorithm: sha256WithRSAEncryption
09:df:4e:f3:20:90:70:e4:73:13:c8:fb:ae:c3:cd:58:dc:82:
c5:6e:d6:0e:ba:6d:41:e4:b8:6d:0b:d5:a4:fe:4f:80:d4:90:
a2:db:be:c0:87:73:08:4c:06:03:ce:08:71:27:c6:2f:03:41:
4f:cd:38:75:30:3b:61:f8:2e:9b:4b:0c:df:9f:e8:84:b9:03:
4f:c4:ce:9c:4a:82:82:96:95:65:75:22:f6:35:23:cc:0f:f8:
aa:6a:b0:9b:ce:0c:95:17:5d:2a:9d:a6:b1:d8:53:95:18:7b:
a4:7a:4c:0e:84:c8:93:19:91:aa:dd:a5:8a:e7:42:25:a8:5a:
09:26:1b:a4:6b:d0:02:5b:f3:39:40:3d:8a:5b:2b:bb:18:59:
60:df:01:d6:05:4b:5b:68:91:a0:93:42:70:6d:78:d0:d0:bd:
ae:fb:e6:2f:ea:17:fe:55:1a:31:d6:d0:e6:00:bb:2f:0c:09:
94:c3:64:a8:48:74:32:00:1d:80:3e:7b:80:20:84:15:38:c9:
2c:22:c5:89:20:29:f7:ad:53:c8:5b:bf:2f:29:ac:5a:7f:81:
ae:44:b4:94:93:15:fd:b1:51:e6:af:3e:e6:de:69:3c:54:9b:
84:5b:31:e0:43:bb:53:ec:e9:f0:51:6a:56:67:44:71:c4:02:
90:60:30:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:04:34 2025 by rpki-client