Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/hOs9nIaVlgbTGSRX2cF-L9A292Q.roa
File: hOs9nIaVlgbTGSRX2cF-L9A292Q.roa (raw, json)
Hash identifier: 2H7Eh3LEgJqf2jRLorxXZOs950af5ymfMFZuDGRu8KE=
Subject key identifier: 84:EB:3D:9C:86:95:96:06:D3:19:24:57:D9:C1:7E:2F:D0:36:F7:64
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 01946101700C22F4F0A291EDD9A67871C7E9
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/hOs9nIaVlgbTGSRX2cF-L9A292Q.roa
Signing time: Mon 13 Jan 2025 18:51:11 +0000
ROA not before: Mon 13 Jan 2025 18:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 91.239.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:01:70:0c:22:f4:f0:a2:91:ed:d9:a6:78:71:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Jan 13 18:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84eb3d9c86959606d3192457d9c17e2fd036f764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:6e:f9:c5:e4:9c:c8:51:31:93:72:d2:5b:
e8:a2:1b:d5:6e:d2:04:ed:ae:42:48:39:96:82:26:
17:2d:6b:a8:f0:78:b9:12:a5:3e:b4:7e:cb:f1:7a:
17:26:a6:0f:63:01:ef:9d:16:8a:a8:9e:83:05:9e:
d8:03:6d:e7:57:3f:4f:27:47:c0:6a:89:05:85:40:
67:bb:a9:0b:c6:72:8c:82:1c:9d:f1:ec:80:20:cc:
e1:2a:59:01:d0:9c:96:5b:c1:e0:f1:92:b8:b7:e1:
73:ee:e6:75:ca:57:06:27:f7:b7:6d:f3:05:47:9b:
b7:8b:3d:b2:67:80:34:cc:c3:c5:c5:35:d6:4d:d3:
e7:dc:ca:2d:53:a8:ac:33:8e:3b:be:7c:58:af:e1:
f4:c2:b4:47:1c:18:58:76:ad:85:65:4f:2f:05:38:
a1:de:5a:17:6b:9b:bd:39:d5:a4:70:28:f7:80:b9:
02:94:9e:b3:67:d2:13:7d:25:db:38:79:bd:77:56:
b2:51:5f:13:43:a3:d7:7a:ed:56:98:89:f8:30:10:
b1:7f:51:53:6e:97:c0:a3:dd:25:25:2a:99:ca:9f:
e3:f0:54:9e:6c:4d:6a:56:04:e4:b3:4b:66:1d:2d:
93:a6:20:f6:e7:2c:f8:10:bc:00:a5:22:1d:44:11:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:3D:9C:86:95:96:06:D3:19:24:57:D9:C1:7E:2F:D0:36:F7:64
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/hOs9nIaVlgbTGSRX2cF-L9A292Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.216.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8c:e6:fa:f7:0f:46:31:32:00:d2:a4:84:61:dd:11:6d:d6:
7d:fd:cd:65:d2:34:db:df:f1:fc:03:6d:80:ab:bc:39:c1:41:
c0:8e:2a:f5:dd:fc:dd:25:28:74:cb:73:33:3e:26:4f:00:e7:
c6:1b:8d:9c:fe:44:3a:e9:d2:5a:c7:05:e2:a3:d6:c2:1d:15:
80:73:b5:a0:1e:56:25:8e:18:79:ed:7b:43:9e:fa:12:e4:77:
69:9b:5d:eb:c0:d1:25:b7:6a:a0:0f:36:2e:44:e6:95:fc:08:
56:52:b7:67:cb:a0:45:a9:f1:cd:05:54:0b:6e:ac:0c:a9:f4:
c5:d8:9b:84:77:52:70:af:8b:49:2f:d5:04:75:03:38:99:9d:
d2:d7:d7:e9:87:58:89:ae:7b:79:16:50:72:fe:2e:98:cf:97:
25:a4:f6:2e:5e:72:03:a9:79:48:4b:a1:d2:70:11:d1:32:55:
52:92:8d:80:56:e2:3e:e1:f1:0e:44:f5:7d:20:1d:04:37:6d:
d3:42:5f:e9:e5:82:26:09:4e:d0:5f:b7:48:22:62:6d:01:86:
f9:0e:27:00:a5:2c:8a:11:5d:7d:29:03:44:d2:90:da:eb:b8:
23:79:de:ec:b5:6d:cf:67:1b:73:ec:95:ec:77:33:5a:42:eb:
e5:c2:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:26 2025 by rpki-client