Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/Uh2iPJxuHdDukuvdAgLnHChIlRQ.roa
File: Uh2iPJxuHdDukuvdAgLnHChIlRQ.roa (raw, json)
Hash identifier: P7IzVfswDuCa9rPQa+x0Y8KRXxnLbD76QVgGKU1lQe4=
Subject key identifier: 52:1D:A2:3C:9C:6E:1D:D0:EE:92:EB:DD:02:02:E7:1C:28:48:95:14
Certificate issuer: /CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Certificate serial: 019426D99B8D57CBD280EFC8B3D4B8B255AF
Authority key identifier: 9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/Uh2iPJxuHdDukuvdAgLnHChIlRQ.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41820
IP address blocks: 91.220.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9b:8d:57:cb:d2:80:ef:c8:b3:d4:b8:b2:55:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=521da23c9c6e1dd0ee92ebdd0202e71c28489514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:8c:9b:65:81:fb:0a:c7:44:c8:ef:28:a1:
bf:24:84:0a:aa:8a:a1:5a:d5:ff:4c:00:dd:fa:5b:
40:77:42:eb:4a:cf:61:0c:2f:c3:49:8f:89:75:45:
dd:f2:03:45:38:7a:2b:45:2c:82:0a:3f:9a:3f:15:
1e:5c:da:44:19:8a:86:d0:55:79:b3:1a:9c:70:09:
29:09:c2:dc:45:d9:95:41:dd:88:45:61:65:16:da:
b0:1e:c8:bb:c3:31:60:9f:45:5e:8f:12:ae:45:18:
1e:9d:b4:a8:98:fb:f4:7f:94:1b:bd:0c:2b:88:57:
91:ca:0c:af:d7:a4:c3:1b:43:62:71:de:75:79:a1:
33:b3:78:17:f0:eb:da:fa:b4:64:a7:95:65:5f:46:
68:a6:fe:c5:71:18:ac:0f:f6:82:de:df:d0:c0:43:
de:12:50:ca:c6:4d:d5:82:ba:38:e9:bb:8f:48:32:
4d:9d:2a:75:d7:0f:d5:cc:fc:5c:65:b7:0b:93:57:
41:14:45:6d:b9:ba:6f:fb:5b:f9:64:d8:47:55:a4:
f0:41:b5:0d:cb:fb:ec:72:2e:0c:c5:f8:c6:6c:0d:
5b:41:69:22:f4:e2:75:bd:a2:c0:ad:d8:52:24:83:
b7:6d:f9:14:da:1a:26:89:37:71:aa:23:eb:33:69:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:A2:3C:9C:6E:1D:D0:EE:92:EB:DD:02:02:E7:1C:28:48:95:14
X509v3 Authority Key Identifier:
keyid:9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/Uh2iPJxuHdDukuvdAgLnHChIlRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e0:38:c7:13:52:96:3d:5d:56:13:d1:b5:29:c5:6a:95:38:
21:f7:e4:16:f1:b9:0a:9c:9c:77:0c:f5:27:67:0e:d8:96:6c:
3f:d0:8a:a8:27:63:e8:5e:ed:79:41:6e:d4:57:c3:27:97:3e:
39:4a:68:41:ff:5c:cf:0d:82:f1:0c:ea:b2:5f:5b:34:e0:f8:
10:a5:27:92:6a:19:48:04:9b:13:c8:cf:2b:79:e1:2c:77:fc:
ab:59:00:df:35:24:f6:e5:d6:3d:1f:27:89:dc:dd:5f:48:08:
c6:66:43:92:fa:58:de:de:4e:91:34:c3:cc:b7:22:e5:1e:f8:
d7:2b:93:b7:07:e1:6a:da:d8:63:6d:3b:09:32:40:a6:7c:3c:
25:44:7c:be:86:95:f9:58:36:62:0c:89:9c:f8:4e:20:c8:f8:
f0:bd:10:af:5c:4b:bc:5b:f8:a6:9c:06:38:75:8b:07:56:ff:
ad:92:47:cf:14:82:32:d2:09:3d:69:bc:f2:cc:8e:53:49:e8:
37:ba:2a:f8:ae:68:77:d9:1f:a4:8b:04:15:69:87:d6:8d:36:
85:1a:0f:40:bb:fa:79:23:9e:bb:36:95:0d:9a:38:93:0b:03:
e5:d0:d7:c9:48:e0:2c:c2:db:0c:74:71:14:9c:32:87:29:77:
49:8c:82:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:42 2025 by rpki-client