Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_J5JILR3g08GxLAZwtS6oNKzzbg.roa
File: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (raw, json)
Hash identifier: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=
Subject key identifier: FC:9E:49:20:B4:77:83:4F:06:C4:B0:19:C2:D4:BA:A0:D2:B3:CD:B8
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F9029A79117680044426E7D504502
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_J5JILR3g08GxLAZwtS6oNKzzbg.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201909
IP address blocks: 91.223.117.0/24 maxlen: 24
91.233.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:90:29:a7:91:17:68:00:44:42:6e:7d:50:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc9e4920b477834f06c4b019c2d4baa0d2b3cdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:90:bc:ba:a1:a1:b0:45:9b:4e:2a:eb:d6:
7b:5b:bf:6d:b4:4a:77:82:d9:03:73:f3:95:43:0f:
a9:70:b7:26:cd:c5:21:cb:f8:3c:45:7f:98:c9:6d:
3c:5f:1d:d9:67:ae:f3:a8:92:76:9c:af:bc:d3:7b:
47:83:d2:29:e4:df:d2:29:00:dc:b3:ea:59:55:51:
b9:a3:b4:3e:73:5a:c3:8b:b1:e7:b6:ba:5a:63:67:
41:5c:03:07:99:90:ca:51:22:7d:6a:3f:79:30:9a:
52:92:ae:80:63:5a:d7:ac:04:20:75:5d:14:5f:4b:
0d:72:2c:c7:9b:f9:70:0a:33:63:98:c6:57:cb:fc:
43:f2:6c:96:6a:4a:9f:35:07:0b:78:5f:5f:0e:05:
40:b3:ba:09:de:ba:f5:fa:7d:c7:e1:1b:af:51:16:
07:09:03:fe:0c:01:69:30:61:82:8e:7f:f9:fa:79:
9c:c3:6a:6b:04:65:3b:67:c3:dc:17:31:15:b1:20:
4c:5f:b8:c5:ff:39:5e:40:cb:a2:09:b0:6d:1f:63:
16:a7:ad:03:b7:c4:46:54:24:aa:40:1e:0d:43:fe:
69:d1:cb:84:5e:4f:86:40:40:93:70:70:c9:ec:92:
c8:7b:12:76:1f:ab:47:c9:93:bb:be:c2:58:39:67:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:49:20:B4:77:83:4F:06:C4:B0:19:C2:D4:BA:A0:D2:B3:CD:B8
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_J5JILR3g08GxLAZwtS6oNKzzbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.117.0/24
91.233.201.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ac:c6:c6:34:56:43:88:57:e9:52:8c:d7:0c:bf:80:56:c3:
96:ef:88:a9:3d:cc:60:0a:ed:41:99:88:e0:0f:ab:b6:50:4a:
e7:41:11:de:54:ae:14:5b:b9:c4:47:93:45:b6:a0:3d:ca:45:
23:42:e4:49:36:21:fa:03:e2:88:33:4e:02:77:01:94:2a:34:
03:70:bb:6f:02:c8:b8:7c:d2:b7:e3:61:b2:5a:44:7f:72:2a:
c5:23:28:3c:f8:40:e9:da:bc:06:8c:52:74:9d:03:12:ec:f7:
14:b1:ce:64:2e:3b:ea:a3:85:f0:77:ac:5c:d0:dc:f8:53:c3:
8d:0a:96:75:8c:9c:84:6d:42:bc:dd:8e:45:6a:13:84:a2:e7:
4b:35:4c:e4:42:dd:3d:d8:09:2c:5a:af:8f:29:f3:ce:76:e5:
fb:57:ea:c4:d1:f8:85:15:f6:ac:02:92:fd:26:58:09:6e:fb:
93:03:cb:18:8d:08:d0:b0:07:24:9d:83:cc:fe:fa:80:fb:c8:
41:be:1b:f8:c8:2f:9d:65:fe:5c:b7:d7:8d:dc:97:e4:bd:dd:
97:4e:17:d0:a3:09:b0:55:08:71:86:4e:d0:8a:3b:5f:21:d4:
a5:8f:a5:d6:eb:fb:4b:d7:2b:d3:ae:6a:f7:03:a8:dc:b0:f5:
fe:ce:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:11 2025 by rpki-client