Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/BkDrM4-atcp10Br--qbvg_yK1zg.roa
File: BkDrM4-atcp10Br--qbvg_yK1zg.roa (raw, json)
Hash identifier: OQTXLqdYWvwdj8zXSXiFu8x5dJlCSPxgy4/Qhi1Yohc=
Subject key identifier: 06:40:EB:33:8F:9A:B5:CA:75:D0:1A:FE:FA:A6:EF:83:FC:8A:D7:38
Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial: 0194221F92CA4F0A8AE2C0373CD689FAAC9B
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/BkDrM4-atcp10Br--qbvg_yK1zg.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197716
IP address blocks: 91.226.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:92:ca:4f:0a:8a:e2:c0:37:3c:d6:89:fa:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0640eb338f9ab5ca75d01afefaa6ef83fc8ad738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:97:27:6c:c6:16:b4:89:1c:a8:b2:c3:fb:
c9:77:6c:db:bc:fe:73:a1:29:a9:ab:bf:bb:8a:7e:
05:20:fd:93:fc:61:83:7f:d3:c3:4f:9a:05:61:a8:
da:b9:ac:a1:97:8b:be:3a:9d:a3:ac:0f:b4:b1:5d:
81:cb:1d:5c:b6:da:d6:8e:72:27:e3:21:c5:14:41:
a7:4f:0e:1f:6f:d9:c7:52:19:3c:15:cd:6f:af:0f:
f0:cc:fc:8f:b6:0e:23:5b:ec:b9:21:63:b8:a1:93:
fc:8f:1b:54:27:e9:d9:6d:23:6c:d2:21:25:bb:1f:
3d:3b:6f:a2:35:14:c3:8b:cd:d8:4f:36:6c:ea:5a:
7c:32:66:2a:6e:52:ca:e2:70:1e:34:76:7b:cc:fb:
40:5d:92:ca:dc:6c:fb:ab:4f:c5:4d:bf:c1:a4:2f:
4d:21:5c:6a:92:5e:70:bc:9b:0f:71:96:f1:38:3d:
ca:7a:2f:4d:c8:6c:af:fe:75:39:4d:68:1e:e0:fb:
6b:12:ea:75:be:aa:09:de:cd:dc:55:f1:aa:ee:24:
26:57:f1:87:cb:b6:c8:28:16:16:9f:e4:6c:4e:e2:
9f:9f:32:8e:f5:ae:19:08:1e:05:de:4e:9b:44:d9:
24:77:fa:4e:e2:b7:90:99:ed:8b:fd:ee:e0:a6:88:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:EB:33:8F:9A:B5:CA:75:D0:1A:FE:FA:A6:EF:83:FC:8A:D7:38
X509v3 Authority Key Identifier:
keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/BkDrM4-atcp10Br--qbvg_yK1zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:a9:38:85:94:d7:cb:41:c8:7d:eb:c9:e8:64:21:00:b2:37:
6f:92:2d:d2:ca:7b:df:c1:1a:89:f7:7c:3d:02:30:b0:41:27:
e2:e6:47:f5:d2:59:f0:0c:5a:da:33:d7:c4:76:8b:18:93:c3:
d0:95:12:e6:37:37:47:4b:c2:0d:d2:62:11:5e:46:99:d2:5b:
12:c9:12:31:3f:cc:b8:f4:61:68:e0:e7:cf:83:01:c6:0a:5d:
47:7b:f2:68:1e:c9:46:d4:2e:82:1a:09:a8:1b:96:a5:5f:22:
bf:db:7c:69:5f:81:8a:e8:92:d1:24:81:d4:da:7f:7b:fa:32:
24:5e:fd:09:c2:34:de:a3:dd:08:54:d9:bd:9e:8c:52:36:c6:
58:40:7f:9b:11:65:aa:68:7d:43:96:3c:56:51:20:18:2a:fc:
77:dc:ce:9f:22:15:de:44:34:b2:0e:df:e6:e2:85:90:50:98:
54:1f:a1:04:9b:35:76:1c:82:cf:e1:0c:66:09:29:4d:1f:f9:
01:87:25:33:df:e2:a9:48:f8:68:77:5f:6b:a7:0c:f4:31:0a:
d9:d4:85:d4:9c:44:a4:44:7f:da:70:c3:b8:6a:dd:58:c2:ab:
29:63:ac:61:a1:67:f6:37:5a:f2:a9:75:42:fe:73:17:90:79:
d7:eb:53:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:23 2025 by rpki-client