Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r4c3fyT5mEicBTcplHGkCHGu1DU.roa
File: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (raw, json)
Hash identifier: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=
Subject key identifier: AF:87:37:7F:24:F9:98:48:9C:05:37:29:94:71:A4:08:71:AE:D4:35
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 01941F8C2731F500674064DB141C7C690B86
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r4c3fyT5mEicBTcplHGkCHGu1DU.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212126
IP address blocks: 91.231.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:27:31:f5:00:67:40:64:db:14:1c:7c:69:0b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af87377f24f998489c0537299471a40871aed435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:1a:cd:f9:ba:d0:78:11:4b:fb:89:32:a6:
b2:54:f4:ad:2d:26:b5:16:61:ce:24:c8:2e:63:ba:
73:33:09:9b:68:6c:61:de:07:57:92:a9:6e:bd:f5:
65:a1:de:7a:89:b3:57:97:eb:08:3d:51:9f:ab:05:
84:1b:80:15:61:cf:a5:28:21:1d:37:e1:bb:cf:7d:
88:50:5a:83:ff:f5:e2:96:f2:35:38:a8:55:06:a1:
f7:91:05:7c:de:39:2c:2c:8f:7d:fe:05:7e:a3:92:
b0:02:06:ff:27:46:62:b6:2a:dd:77:a9:eb:90:96:
4a:5f:81:74:92:2a:1d:ef:36:93:2b:57:01:9c:86:
63:0c:7b:d8:7e:71:ad:a5:e8:57:d1:13:fd:f4:86:
82:e5:f9:92:00:da:cd:3f:6f:c1:fa:90:ed:d7:38:
58:b1:34:b3:12:df:a6:fa:c5:f4:4d:ad:57:41:f7:
d5:1b:01:54:96:b5:58:8f:fd:b0:a9:d3:8d:2f:29:
10:20:17:f4:3a:aa:76:63:b0:38:cf:df:a5:9c:31:
7a:16:3d:64:83:8a:5c:7d:50:03:77:b7:68:1c:e6:
d1:6e:8f:72:58:ca:35:0d:2a:10:b1:54:db:90:d0:
6d:b4:4c:80:3a:26:d9:77:b2:02:fa:72:1e:e4:f8:
07:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:87:37:7F:24:F9:98:48:9C:05:37:29:94:71:A4:08:71:AE:D4:35
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r4c3fyT5mEicBTcplHGkCHGu1DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ba:4b:7e:95:c7:96:69:36:fa:90:41:8c:35:38:63:4d:23:
b9:88:a1:d5:c8:a4:d0:16:12:59:1a:fe:8f:cf:ef:92:14:fc:
ae:9b:47:e9:c3:90:82:8c:31:07:37:2e:3a:df:1a:7b:2e:1a:
04:72:0a:97:09:e4:64:92:f8:ba:8c:7e:7e:7e:91:06:17:9f:
57:0a:c4:bf:60:40:55:a8:4b:92:51:9b:1e:ea:34:e3:d4:8b:
52:57:6f:84:2c:bc:e9:24:a6:50:7e:22:11:c7:74:8e:8f:e5:
cf:87:1c:01:0a:de:6a:a9:16:a9:01:28:d1:8b:42:ae:b9:77:
4e:71:74:a3:71:49:01:f8:5a:41:46:1c:1c:0c:29:d0:a5:1c:
dc:4b:35:4d:02:1e:f0:8e:9c:dc:c2:41:69:1b:1c:9d:34:92:
ab:d4:2a:82:cd:29:fb:f8:9c:18:cf:1e:77:76:17:d9:ec:21:
e9:90:26:8e:11:b4:8d:b9:b4:8c:9f:f7:bb:ed:10:cf:46:05:
43:1e:a7:ff:15:01:a9:e2:11:12:62:cc:80:77:19:e2:8b:9d:
21:10:09:a9:f1:5c:15:09:ec:d4:66:9d:6d:06:32:9b:09:ae:
7e:fc:6d:78:8a:10:d2:9b:f9:ff:f8:42:08:5b:d9:26:37:17:
a1:a9:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:37:14 2025 by rpki-client