Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/HxAxelvKfyvRBGZgYNyGH359bcw.roa
File: HxAxelvKfyvRBGZgYNyGH359bcw.roa (raw, json)
Hash identifier: 54oYSMM6V461t0pj1oiVJIo5XRCMuwwoyF2Ks6PmNo4=
Subject key identifier: 1F:10:31:7A:5B:CA:7F:2B:D1:04:66:60:60:DC:86:1F:7E:7D:6D:CC
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 019425FC3DBA64C921253E316923134B8AB1
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/HxAxelvKfyvRBGZgYNyGH359bcw.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 91.192.106.0/23 maxlen: 23
91.193.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3d:ba:64:c9:21:25:3e:31:69:23:13:4b:8a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f10317a5bca7f2bd104666060dc861f7e7d6dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:ef:39:d1:b0:c0:1e:18:7a:e9:81:86:a9:
55:91:e1:d4:81:cd:08:c5:9e:d9:13:93:9b:0e:a0:
13:04:fa:d2:66:d5:1a:ce:bc:a4:51:ca:6a:b1:08:
51:5c:1d:db:ca:ce:30:6c:93:68:9e:ba:69:af:17:
57:34:62:49:07:2d:25:5a:d5:66:93:d8:be:27:9a:
db:e0:cd:fa:bd:b2:c9:eb:75:5e:9c:08:d7:0e:2e:
ac:b1:7b:ee:bb:e1:96:27:66:fb:b7:52:9b:15:5c:
4d:cb:e7:db:d0:b8:a8:90:3f:16:76:d3:d4:21:9e:
9f:33:21:60:7e:08:df:60:6a:8b:14:6a:6c:bd:a0:
51:83:0e:f5:a2:12:d9:da:ff:0e:4b:52:14:40:f2:
2d:15:81:42:50:1a:0b:b1:33:9b:32:a0:12:24:a6:
e1:7a:6d:a5:a6:e9:0a:2b:42:c1:56:2c:ce:99:2a:
d0:f9:fc:e1:8a:fc:42:03:b5:0b:b5:20:c8:23:ad:
7c:f7:a9:7d:15:cf:78:19:8a:af:9a:c1:4d:a8:29:
bb:03:06:06:b5:6f:cc:72:d6:7e:93:67:a8:bb:39:
69:8c:fa:1c:2d:db:67:20:70:d8:e7:33:89:4e:24:
a9:5c:8b:81:6d:93:06:7f:cd:ba:c7:98:50:ce:5e:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:31:7A:5B:CA:7F:2B:D1:04:66:60:60:DC:86:1F:7E:7D:6D:CC
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/HxAxelvKfyvRBGZgYNyGH359bcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
91.193.58.0/23
Signature Algorithm: sha256WithRSAEncryption
50:c1:93:12:aa:0d:ce:71:be:74:b6:f1:53:a3:7e:37:ae:16:
74:41:26:07:c2:87:d5:54:be:b7:43:38:b6:5f:f2:ed:dc:53:
7a:e1:68:56:69:16:ae:f8:d0:4b:37:97:42:9a:55:f6:55:b0:
80:2b:93:bc:93:07:4c:70:4a:ff:d3:04:e8:73:de:3a:ec:01:
ae:ab:ea:66:81:0b:d7:e9:e0:bb:66:71:13:1c:58:b0:4d:ef:
fd:71:ee:fd:3b:59:a1:9a:82:0f:87:fc:1b:3d:68:79:9f:4f:
79:38:85:29:ce:68:35:8a:e0:21:23:5d:cc:2d:df:f8:cb:7a:
23:54:cb:7c:02:06:92:00:c1:92:e1:0a:83:fe:91:30:75:ed:
69:5a:66:e8:f0:48:ef:f6:e3:a2:db:85:d4:a8:14:c9:ff:4a:
c8:4f:28:c9:bb:0d:b0:54:0e:66:0e:fd:6d:44:95:29:14:0b:
3d:02:b5:a9:ec:bc:ca:23:48:a8:05:c1:38:b7:7f:85:e5:e6:
91:b7:a5:48:ed:0c:5d:1a:78:78:46:68:e9:74:a0:90:06:0b:
cd:02:53:52:e1:46:8b:35:fe:1b:17:ca:2c:40:9f:ed:0a:5f:
7f:4f:39:51:16:60:a6:23:99:44:49:3a:89:ce:01:69:47:9c:
c5:e0:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:02:47 2025 by rpki-client