Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/i4e34huH3g5sLDHdnkVm8dSr_sE.roa
File: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (raw, json)
Hash identifier: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=
Subject key identifier: 8B:87:B7:E2:1B:87:DE:0E:6C:2C:31:DD:9E:45:66:F1:D4:AB:FE:C1
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 019423D6D70A7337AD7CA77877DAD309C2C5
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/i4e34huH3g5sLDHdnkVm8dSr_sE.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39558
IP address blocks: 91.221.132.0/24 maxlen: 24
91.221.133.0/24 maxlen: 24
195.244.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d7:0a:73:37:ad:7c:a7:78:77:da:d3:09:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b87b7e21b87de0e6c2c31dd9e4566f1d4abfec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:9d:8a:87:cf:4d:4e:d8:7f:01:b4:37:56:
81:d4:27:d7:a2:d9:f2:0d:38:de:2a:0e:2f:9d:43:
b9:18:2f:f9:af:31:12:20:6d:26:94:2f:ea:45:ad:
2d:98:cf:b4:2a:ee:b0:3c:53:07:e2:6e:3b:cc:48:
86:76:9f:e6:eb:be:76:7c:84:38:bb:04:6e:81:6d:
03:b0:dc:ad:b1:7d:9a:5b:11:16:09:e7:e7:99:95:
db:e4:1e:83:4c:08:e8:bd:ea:6c:63:48:e1:41:e7:
5b:b5:8f:70:fc:3c:32:58:4d:05:af:e0:36:35:d6:
2f:a6:90:f1:a0:15:06:12:00:43:09:41:3e:9d:ec:
ce:b4:71:8d:8d:66:71:9a:9a:03:d1:81:da:93:b1:
20:96:d8:6e:d3:92:72:5b:94:cc:da:1b:43:26:f2:
9d:3e:c0:46:c2:96:12:f8:a3:53:68:7a:76:16:1d:
2b:db:2b:c3:ee:6d:8f:26:06:b4:3e:7c:78:ff:4b:
4a:4c:db:b0:83:e7:2c:2d:f3:3b:ea:63:66:e7:d3:
4f:35:a9:e6:0c:77:f9:57:a9:70:90:f4:a3:b5:6f:
5e:d4:7d:2d:2b:04:c5:e7:d8:56:70:92:aa:21:58:
85:43:f3:82:11:06:67:47:c0:05:10:53:e9:dc:c3:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:B7:E2:1B:87:DE:0E:6C:2C:31:DD:9E:45:66:F1:D4:AB:FE:C1
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/i4e34huH3g5sLDHdnkVm8dSr_sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.132.0/23
195.244.4.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:0d:b4:78:f5:af:67:18:a5:00:38:54:79:d5:26:a2:3e:3b:
e4:42:f3:82:00:36:74:ea:69:1d:99:96:f4:11:7f:6d:cd:0b:
76:79:06:8f:dc:ef:ab:d4:ea:27:f9:30:fc:99:18:43:38:ac:
5e:9c:06:0d:2b:2e:26:f2:fd:0e:e2:aa:cc:d2:6d:2f:9f:4c:
e5:c8:a5:ee:43:81:2b:9e:ed:d5:ba:41:9d:83:18:3a:da:45:
af:78:c2:0e:1f:ae:11:13:3f:72:97:e8:59:fb:66:b4:a8:8e:
ef:80:25:41:a6:6e:aa:ec:a1:83:93:b5:98:21:d9:ff:de:ec:
92:06:65:ba:26:b1:79:17:7f:22:df:b8:db:65:a2:90:91:df:
68:b4:78:84:5d:43:8b:69:19:ba:28:d8:86:4f:07:88:d6:23:
4f:f6:eb:5d:cc:59:77:df:6f:29:af:ba:8d:da:2a:a2:09:ec:
e7:0d:dd:08:c7:c2:00:3b:bd:29:61:48:e9:4e:87:83:b3:cd:
ba:44:e9:f4:02:07:d6:98:3d:61:3f:b1:2a:12:23:c9:d2:48:
81:5f:41:fe:88:de:0f:0c:6c:87:5f:7f:44:e9:8b:c5:9f:a7:
2d:43:a7:57:19:0d:2c:cc:2f:a8:89:cb:dc:c7:15:4d:e5:b2:
2a:b2:0e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:25:07 2025 by rpki-client