Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/RAD4tK02ktN0fOfQsDIg0oXzowM.roa
File: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (raw, json)
Hash identifier: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=
Subject key identifier: 44:00:F8:B4:AD:36:92:D3:74:7C:E7:D0:B0:32:20:D2:85:F3:A3:03
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 0194252163724CD665EADD04357719E1EEE6
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/RAD4tK02ktN0fOfQsDIg0oXzowM.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 91.220.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:63:72:4c:d6:65:ea:dd:04:35:77:19:e1:ee:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4400f8b4ad3692d3747ce7d0b03220d285f3a303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:83:50:b8:ef:5a:02:b9:25:d2:00:bd:b1:
7c:a8:32:ac:48:cf:c7:33:27:09:a3:b4:48:b5:fd:
62:ac:e5:2f:b2:59:6b:08:40:c3:6d:6e:b4:91:7c:
77:22:02:c6:28:6c:80:7c:ab:40:b9:09:66:62:d3:
a1:04:92:5b:5e:07:c0:b3:af:68:1a:8c:ce:0f:7b:
81:98:4c:d6:03:16:82:b7:36:4f:09:0b:f5:a1:3d:
78:80:84:12:13:1a:26:75:ad:ac:40:f9:b5:3d:f0:
ad:89:72:8e:20:d4:39:de:33:d1:36:84:ff:72:a9:
39:41:9b:fa:ae:09:ed:1b:4f:73:a8:f8:f8:df:c4:
4e:85:eb:76:80:88:8e:7b:8a:e1:2f:fc:39:0b:3f:
58:7e:e5:2c:7b:f4:18:87:68:ed:79:ab:af:a8:34:
e4:c4:b4:d3:f1:1e:ab:1b:7d:6b:6c:fa:ff:31:38:
8f:bc:f8:c9:76:a3:2f:2e:3c:f3:90:c4:11:da:52:
c1:16:91:09:9f:15:2e:4c:4d:f2:34:50:df:cc:a8:
eb:e6:43:7e:08:29:c1:f8:47:51:f0:0d:6f:c1:f3:
65:82:11:a7:d9:12:b6:fe:ea:95:90:34:45:df:be:
76:bc:55:d2:b7:9d:a4:7b:42:72:b5:7f:46:ba:01:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:00:F8:B4:AD:36:92:D3:74:7C:E7:D0:B0:32:20:D2:85:F3:A3:03
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/RAD4tK02ktN0fOfQsDIg0oXzowM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:99:0a:bd:e6:95:40:96:2a:97:a8:7a:c5:70:33:6d:db:a3:
a2:29:72:ab:60:98:5f:f5:3d:3a:10:82:4a:6e:93:40:4e:c4:
d3:ea:23:d3:cd:f4:de:3c:b7:0a:6e:44:da:48:f3:2a:99:33:
43:27:6a:29:64:1f:99:20:ca:72:e0:89:7f:f2:c0:39:1e:61:
70:4e:36:29:6d:64:92:4c:ee:00:4f:e3:a6:9a:25:b1:dc:6a:
06:eb:a8:9f:3b:bf:34:33:db:8a:44:9f:16:e1:7b:2f:e6:aa:
8e:2e:d8:df:77:77:10:0e:b3:43:23:60:bf:2e:8b:d2:a7:48:
ce:9b:a5:ea:26:27:72:86:e8:b8:07:43:6f:97:e1:7c:2c:94:
6f:3e:0c:86:98:0f:ec:f9:1a:5c:ec:1b:cf:1f:50:ed:45:5a:
86:46:8d:cc:48:e7:d6:b9:62:9e:a2:aa:97:02:0a:39:dc:9f:
03:cb:71:e5:31:6d:36:65:72:aa:5d:dd:ee:8e:aa:7e:63:3e:
2e:f3:d4:32:a0:49:12:d0:2c:20:57:e8:d0:07:0f:03:c3:db:
33:f0:dd:67:67:bd:c3:05:c1:e5:d4:8a:1d:3e:79:60:c5:fc:
e9:44:af:3d:55:64:13:b6:e0:d6:b4:76:38:66:15:8a:89:b3:
46:c5:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:17:34 2025 by rpki-client