Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/v64OG16FRTD93CnYY-754YZNyZ4.roa
File: v64OG16FRTD93CnYY-754YZNyZ4.roa (raw, json)
Hash identifier: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=
Subject key identifier: BF:AE:0E:1B:5E:85:45:30:FD:DC:29:D8:63:EE:F9:E1:86:4D:C9:9E
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 01942068371D12B1C8D90A992ABCFE0367B7
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/v64OG16FRTD93CnYY-754YZNyZ4.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56853
IP address blocks: 91.228.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:37:1d:12:b1:c8:d9:0a:99:2a:bc:fe:03:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfae0e1b5e854530fddc29d863eef9e1864dc99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:11:63:7b:ba:1a:98:cf:f3:ed:a7:69:7a:
09:71:91:0b:20:1e:55:de:56:cc:37:a0:32:e0:c5:
93:fe:7a:f3:cc:24:be:6e:16:d8:16:db:a6:31:1b:
03:3c:69:e7:fe:aa:39:82:11:88:90:80:f4:aa:da:
48:85:e2:aa:21:e4:f2:7f:62:c2:1e:d9:62:9f:6c:
30:c6:b4:53:bb:98:1a:7c:6a:6d:bd:af:26:07:ec:
2f:98:4f:9d:94:14:d1:eb:31:df:96:39:87:ea:1b:
3c:38:ea:57:c5:d7:7a:a9:ba:7b:94:51:d3:0c:3a:
f5:ed:08:78:e7:05:25:a9:92:b7:d3:59:4b:22:38:
c0:90:56:6e:be:c5:5c:61:cf:ed:39:0d:45:90:24:
6c:cf:d0:5d:6a:09:b3:13:de:2f:44:4f:a6:34:a9:
8c:f5:6f:75:5a:a7:eb:88:7b:72:fb:91:f4:a6:ce:
00:98:1b:d1:4b:32:04:ee:4e:24:0d:b8:96:1d:7a:
be:68:7b:00:db:c5:b5:63:d7:45:f4:2e:18:6d:ac:
54:25:d9:75:d9:01:e1:ec:2f:83:74:c4:91:26:82:
16:a5:51:83:60:38:34:f1:be:23:90:b6:f6:16:16:
4d:01:16:0e:88:7d:53:f9:6b:be:e4:25:e7:ea:8c:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AE:0E:1B:5E:85:45:30:FD:DC:29:D8:63:EE:F9:E1:86:4D:C9:9E
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/v64OG16FRTD93CnYY-754YZNyZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.102.0/24
Signature Algorithm: sha256WithRSAEncryption
34:59:ba:6b:e0:f6:13:40:cd:d6:9d:c5:98:69:ec:39:3a:66:
d7:f1:4a:f9:fc:ed:34:21:04:ed:ea:7c:f2:2b:e1:08:2f:7b:
d4:e6:e2:9c:7d:41:40:71:87:25:4d:29:d5:1d:a8:d4:2e:88:
27:fc:9b:e2:6c:88:b2:8e:9b:64:0d:b7:cf:ac:e2:cb:63:0e:
cb:96:5c:e7:cc:0b:9d:c0:53:4b:50:f1:b1:36:05:b9:3c:f7:
ef:be:55:47:fe:aa:d1:8c:c5:b1:64:21:41:da:4c:8d:c2:19:
e9:23:03:5b:68:80:0d:4f:92:c8:a2:f4:16:2a:b6:12:a1:ce:
77:75:53:78:b2:0a:36:ce:27:b5:a0:91:f3:9d:66:94:c7:34:
e0:ef:e4:ed:b4:f6:da:a9:e5:0d:20:5b:75:cf:62:c2:01:79:
18:03:43:54:b4:4b:20:e8:80:1f:eb:64:bb:c1:c8:4e:0c:57:
a8:08:96:4d:49:0a:3a:57:66:97:e4:19:5c:88:c3:a6:58:cf:
9f:73:bb:be:f9:08:a1:dc:88:2a:64:a9:e5:53:cc:8c:29:52:
f2:06:e0:a4:ec:99:8b:a2:dd:da:cf:28:bc:5d:5d:83:7c:b2:
e4:b1:4f:43:6f:2e:f4:84:dc:09:68:44:93:29:ed:22:c6:81:
4d:ab:3a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:25:23 2025 by rpki-client