Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/09LlnBZalvUTev-hxsDBxzBhXs0.roa
File: 09LlnBZalvUTev-hxsDBxzBhXs0.roa (raw, json)
Hash identifier: WmF+ESO6gq2BYVxPrfXbYBWd3PjH33B/VjSdQeU0Q/k=
Subject key identifier: D3:D2:E5:9C:16:5A:96:F5:13:7A:FF:A1:C6:C0:C1:C7:30:61:5E:CD
Certificate issuer: /CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Certificate serial: 01857321DA7146ADDDC6CE5B5509BE2F20CC
Authority key identifier: 92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/09LlnBZalvUTev-hxsDBxzBhXs0.roa
Signing time: Mon 02 Jan 2023 15:37:56 +0000
ROA not before: Mon 02 Jan 2023 15:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2542
IP address blocks: 91.140.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:da:71:46:ad:dd:c6:ce:5b:55:09:be:2f:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Validity
Not Before: Jan 2 15:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3d2e59c165a96f5137affa1c6c0c1c730615ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:fc:ee:c1:ed:40:53:44:72:f5:31:ea:78:
63:2e:a2:54:d4:3f:af:64:e1:44:48:43:5c:ef:6c:
a9:19:a2:e3:4d:28:c9:1b:55:9e:22:86:be:e6:31:
88:a9:91:c6:89:b6:b0:57:58:0e:64:a9:a5:11:a2:
b5:67:a9:e8:78:90:db:e3:b0:f2:c6:6e:fe:f0:b0:
52:aa:d6:76:c8:01:68:ad:29:c3:c8:29:05:88:73:
67:6f:bd:c5:53:ef:17:e4:93:02:41:5b:78:ba:a3:
d2:76:62:74:d8:16:2d:af:59:ab:63:ad:4b:08:66:
b9:80:d3:62:3e:8e:bb:e2:e5:79:03:42:19:93:5a:
00:77:43:7c:ed:e1:6d:cf:72:f7:2a:f2:2b:53:81:
9e:57:bc:d3:78:bc:6f:ac:2a:a3:8d:39:73:b1:47:
3f:1e:ed:59:58:e6:36:fd:21:7f:cf:4b:33:5f:46:
bc:41:54:02:f7:ee:c9:75:c9:f2:cd:e3:2e:de:05:
eb:9e:c6:c2:ec:b0:de:a3:ca:eb:6a:18:6a:08:9e:
8b:de:79:d1:cd:a9:de:9a:ca:fb:f3:bc:de:6a:a2:
bd:4f:ab:0e:be:f6:88:ef:d4:17:8f:4f:12:be:1c:
0f:df:fc:57:e1:a4:3e:e7:1a:60:5f:93:a6:60:59:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D2:E5:9C:16:5A:96:F5:13:7A:FF:A1:C6:C0:C1:C7:30:61:5E:CD
X509v3 Authority Key Identifier:
keyid:92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/09LlnBZalvUTev-hxsDBxzBhXs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5b:93:a3:77:3a:65:dd:e7:ca:28:2c:c4:7a:a9:cd:f0:6d:92:
7b:ad:b5:8d:a9:8b:d0:1b:2b:bc:4f:0e:5e:e3:26:0d:f1:2c:
fd:bf:79:98:7e:93:7b:d5:be:2f:d6:47:81:bc:60:ac:a7:a0:
27:98:b4:04:25:06:29:d4:fe:48:c5:29:5d:01:e0:9a:d7:41:
be:8e:9d:9a:17:9e:1a:d8:d3:1a:9b:73:17:d5:f2:15:e7:84:
1b:46:8d:64:e9:f6:4d:20:bf:37:8f:f5:b9:9c:be:5e:f9:7e:
97:0a:7d:7e:51:0e:e1:b0:25:54:b2:42:0d:31:8d:04:c6:73:
b6:b1:2c:2a:33:02:14:ef:ec:3b:dc:c9:3d:a8:96:d0:5c:03:
01:48:86:79:ff:5a:f8:90:f9:a0:80:b3:ab:bc:e2:24:77:8b:
db:35:a0:4e:d1:45:d8:69:c9:70:87:d2:09:ee:02:6e:75:8d:
b7:fd:b7:0e:98:97:b9:2b:ea:22:6a:0b:af:80:ec:c7:a1:5e:
03:bf:29:d3:7b:c8:25:77:0f:e3:d3:77:cb:dd:b8:aa:4d:ec:
4c:36:2b:e2:b6:af:27:ff:28:49:e0:ce:c3:0c:47:c0:cb:2c:
c7:87:e9:d1:e6:33:6c:be:6b:b7:91:4e:56:91:4e:ea:99:dc:
23:e7:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:30:44 2025 by rpki-client