Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/ALNKyGQyY09MK9vl3O2X07J6-JA.roa
File: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (raw, json)
Hash identifier: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=
Subject key identifier: 00:B3:4A:C8:64:32:63:4F:4C:2B:DB:E5:DC:ED:97:D3:B2:7A:F8:90
Certificate issuer: /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial: 019425FC9DC5919DCBB64BCAA51E9D6B2ABE
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/ALNKyGQyY09MK9vl3O2X07J6-JA.roa
Signing time: Thu 02 Jan 2025 07:48:19 +0000
ROA not before: Thu 02 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211007
IP address blocks: 91.208.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:9d:c5:91:9d:cb:b6:4b:ca:a5:1e:9d:6b:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
Validity
Not Before: Jan 2 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00b34ac86432634f4c2bdbe5dced97d3b27af890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:4c:9c:87:57:97:ef:80:f4:07:66:14:b2:
92:25:d2:df:35:17:54:62:bb:22:4c:9e:84:57:6b:
e9:a4:a2:a3:fb:49:e0:84:cf:b6:6a:36:ac:99:3a:
7c:2e:8f:79:92:11:89:be:33:aa:52:b0:a2:83:ce:
69:58:f6:8e:d4:72:b0:d1:86:33:e4:0e:b7:a1:2d:
30:b1:91:46:f7:0c:06:19:54:a5:01:e2:75:f5:b2:
1e:0f:33:db:b1:b3:81:ac:b5:58:58:15:e9:82:06:
bd:15:f8:9f:7a:c0:6f:ad:8a:d6:fc:24:87:99:57:
4f:b4:93:f1:e3:26:64:69:d3:83:78:03:de:75:fd:
2e:f8:36:87:65:b7:1f:e8:38:8e:47:a4:3e:e4:b1:
ec:e3:78:02:66:f3:f7:28:ab:71:5e:9e:99:11:39:
7e:c2:a4:ac:85:2a:bf:17:27:b7:ca:57:c0:e5:2f:
89:ab:32:2c:e8:fe:53:19:cc:45:89:75:f2:02:89:
db:6e:2c:fb:92:b1:f0:b0:9f:54:70:b2:61:5d:8a:
b9:4a:c7:41:e0:7c:68:6e:a9:25:ea:61:85:aa:04:
23:66:5b:66:d7:d5:63:ff:b3:f9:ab:40:b7:ad:58:
6b:e8:a5:b6:44:06:d1:99:5a:81:85:9f:15:32:eb:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:4A:C8:64:32:63:4F:4C:2B:DB:E5:DC:ED:97:D3:B2:7A:F8:90
X509v3 Authority Key Identifier:
keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/ALNKyGQyY09MK9vl3O2X07J6-JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.192.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ef:ac:82:ac:dd:83:66:4d:ca:fa:e2:68:03:82:aa:fd:b5:
6c:28:57:7a:75:e1:2c:13:e9:2c:ba:56:77:61:2d:f3:8f:4d:
3f:83:fd:f5:1d:ba:6a:d9:db:3c:72:ad:d6:7f:39:ed:65:65:
05:2a:37:47:eb:19:13:b0:3d:73:d9:4e:19:b2:87:10:3e:e6:
16:22:2e:40:d8:b8:2b:ad:86:09:e0:86:1c:6f:ee:58:89:64:
11:50:cf:a2:59:5d:65:9a:c6:27:00:62:af:2d:11:c4:f5:c3:
a3:c3:cb:10:8e:ee:1e:97:95:4c:86:19:32:07:16:bc:bb:4a:
a0:87:94:b9:98:49:b9:2f:c1:65:f8:9c:36:45:9a:3a:be:cd:
a7:6c:42:9c:59:fe:dd:03:dd:69:47:8e:50:90:d8:9a:32:cb:
7b:6b:10:f7:c9:12:15:f1:23:ac:78:aa:1d:bf:36:e6:c5:44:
b7:64:73:5e:8d:89:52:5e:30:96:bf:c2:f6:bd:7d:e6:79:f5:
db:66:d7:fc:8a:00:21:ea:4e:c9:63:59:aa:19:91:cc:2b:fe:
50:93:e4:06:20:ee:f3:55:73:0f:6e:a3:50:35:53:48:21:04:
ab:ce:56:91:d7:d5:9a:f7:cf:14:58:78:cc:ef:45:24:6e:1c:
1f:75:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:33 2025 by rpki-client