Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/N0FfK1xtF1a1AWIxdrqcyyISdks.roa
File: N0FfK1xtF1a1AWIxdrqcyyISdks.roa (raw, json)
Hash identifier: QMPeRf8X/HzIc4d0IVaLfjH7HwCXcrG5Pizu41s4EB4=
Subject key identifier: 37:41:5F:2B:5C:6D:17:56:B5:01:62:31:76:BA:9C:CB:22:12:76:4B
Certificate issuer: /CN=0b4326f84c150160c720765998fe8fa53ca2e2e8
Certificate serial: 01856D78804C0F19D677CFE66CCB111909FB
Authority key identifier: 0B:43:26:F8:4C:15:01:60:C7:20:76:59:98:FE:8F:A5:3C:A2:E2:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/N0FfK1xtF1a1AWIxdrqcyyISdks.roa
Signing time: Sun 01 Jan 2023 13:14:51 +0000
ROA not before: Sun 01 Jan 2023 13:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55331
IP address blocks: 91.237.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:80:4c:0f:19:d6:77:cf:e6:6c:cb:11:19:09:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4326f84c150160c720765998fe8fa53ca2e2e8
Validity
Not Before: Jan 1 13:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37415f2b5c6d1756b501623176ba9ccb2212764b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:fa:14:e7:2e:76:35:f7:4f:e8:f4:61:26:
91:d9:d6:26:df:df:71:81:99:f9:e8:45:0c:ff:00:
c3:1e:97:97:b5:93:af:a0:3a:a8:99:f2:5b:83:cf:
35:81:1d:b9:ef:74:8d:47:e0:20:c0:76:27:84:5d:
51:a8:b7:6a:c6:03:32:de:1a:02:38:2a:49:3c:2d:
6a:26:aa:f4:f3:00:d9:cb:a0:99:86:fc:e1:60:82:
f6:8f:ec:93:20:89:91:5e:df:14:d5:d8:f4:2b:31:
36:b3:55:58:d1:b6:e0:7f:a8:e6:a1:d5:61:46:17:
c4:ea:b5:34:b9:2a:80:14:33:55:75:c9:fa:13:b1:
74:99:cd:40:0a:b7:91:97:db:8d:b5:4a:29:fc:62:
8f:21:b6:8f:15:10:d3:9f:90:a6:86:8f:ee:34:42:
1a:09:d0:f0:7e:8b:79:e7:af:cc:be:e9:b4:b2:b0:
5d:d1:b6:fe:57:fb:2d:7d:c5:b1:b9:83:94:34:ba:
0d:0c:93:ca:11:8d:f9:9b:e2:e6:f0:e5:8a:28:81:
38:9a:30:6c:b9:4b:12:1f:72:32:27:9f:3e:9f:6c:
fe:23:2a:33:af:0d:af:cf:1b:30:3f:d8:73:2c:a8:
8d:a6:13:1b:a4:49:3e:1b:5e:82:3f:50:3c:96:6c:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:41:5F:2B:5C:6D:17:56:B5:01:62:31:76:BA:9C:CB:22:12:76:4B
X509v3 Authority Key Identifier:
keyid:0B:43:26:F8:4C:15:01:60:C7:20:76:59:98:FE:8F:A5:3C:A2:E2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/N0FfK1xtF1a1AWIxdrqcyyISdks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fc:b2:0a:6d:2d:a7:e7:2a:81:2b:6c:dc:8b:b6:0c:48:c5:
b0:98:8b:60:17:18:d6:ab:99:35:bd:f8:7c:95:82:8a:3a:85:
00:f8:9c:ef:53:70:62:fa:65:a4:22:d6:3a:f8:0c:5a:3a:ef:
4b:c2:5e:28:f7:36:b1:9c:2d:68:68:a7:ca:36:b5:3b:e4:ea:
57:1f:f0:c5:41:d2:09:e9:d3:15:da:d1:75:b9:c5:35:9a:53:
cf:3c:aa:0e:9a:93:af:60:03:b2:ed:37:59:13:3e:9a:a9:41:
ee:66:c5:69:21:ac:7d:29:2b:17:f8:55:63:13:a3:ef:2a:e4:
03:7d:62:a0:f9:e8:82:b3:f9:12:be:07:3d:77:a4:ce:70:91:
3d:67:bd:98:4f:7c:7d:81:53:36:73:a5:07:58:7b:b3:68:98:
50:10:d9:8a:dd:6f:da:2e:64:24:bd:64:c4:a4:b2:de:35:af:
13:1c:78:7d:f9:4d:13:9c:9f:b1:32:e1:82:e8:49:c5:a1:9c:
e9:16:d9:03:c5:d9:80:7d:40:61:50:7a:12:d3:e6:0d:87:13:
96:35:ff:ea:f4:79:68:99:0d:7c:78:6d:a2:e5:a6:da:41:89:
86:4d:05:be:50:89:86:4c:b4:76:20:e9:c4:e8:56:a5:ac:35:
43:74:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:19:40 2025 by rpki-client