Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa
File: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (raw, json)
Hash identifier: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=
Subject key identifier: FB:0B:78:28:FE:19:CA:BB:CF:2D:ED:79:AB:B3:D5:F3:B8:F9:A2:E7
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 01941FFA1393D1CE2569C0E7AC84F788CE54
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44524
IP address blocks: 91.199.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:13:93:d1:ce:25:69:c0:e7:ac:84:f7:88:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb0b7828fe19cabbcf2ded79abb3d5f3b8f9a2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:f7:bb:4a:cf:ef:2a:c6:9d:ec:3b:82:7a:
7b:2d:b6:cc:07:05:f3:24:dd:91:c1:c3:de:79:54:
02:af:f2:3f:5d:02:12:8a:ee:58:35:f4:6e:b9:f6:
d6:1a:7f:b4:15:f7:a1:a2:8a:74:bc:2e:c7:30:0d:
0c:97:cc:97:58:f4:1a:ed:14:a1:c7:d9:47:4c:b6:
4c:50:d5:3a:64:2e:56:3f:77:51:fb:21:2b:d0:69:
2d:94:f0:26:b5:33:65:58:85:8e:da:07:63:d2:c3:
2e:e5:a2:c2:dd:75:9e:4b:1c:d7:7a:f5:01:0b:45:
7d:79:29:81:e7:3c:04:1f:68:9c:8b:90:e5:40:7e:
7a:0e:c0:3d:ed:33:30:00:c3:f3:50:6d:84:7e:88:
e3:45:29:3d:cc:e7:fc:58:35:aa:a1:73:6c:69:4f:
ce:4e:7d:e4:f6:93:df:f4:6a:75:31:cc:56:73:60:
90:8e:3b:24:51:18:dc:65:21:a9:cf:72:8f:1c:a4:
40:42:03:9b:2e:9e:1f:c0:b0:65:5a:c2:48:b0:18:
c7:29:86:80:2d:0d:a1:c9:1a:39:56:42:58:4c:88:
b4:77:51:89:ff:8c:24:36:03:d7:fc:c0:b2:8a:f0:
45:2d:42:df:96:1d:a7:d8:21:b0:95:71:9b:bc:28:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:78:28:FE:19:CA:BB:CF:2D:ED:79:AB:B3:D5:F3:B8:F9:A2:E7
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9c:f8:00:c3:d0:7c:37:08:34:60:c1:b8:57:69:4e:57:b9:
3a:be:03:f9:8b:37:91:a3:07:49:51:2d:55:b8:f6:98:a7:f6:
6c:86:1c:7a:7c:78:cc:3b:34:4b:ad:b8:34:2e:4f:c3:ad:39:
55:dc:41:a9:ef:36:0d:88:e4:5e:9b:3c:6e:01:a7:5d:82:c7:
0a:ba:64:12:8f:f4:e4:b4:5a:37:6e:d1:5c:eb:eb:8b:6e:30:
a8:53:9c:d6:31:f8:f1:ab:b5:77:b5:d9:03:4e:f9:b6:ac:ef:
f6:52:01:28:6f:ca:2e:32:b1:f9:d9:ce:d9:e3:ae:74:41:48:
a3:70:37:8a:8e:d4:3e:23:60:d9:34:9b:c4:b9:4f:02:12:71:
c4:62:0e:8a:89:5a:54:d8:6d:a5:a6:3d:26:d4:2a:f3:ce:a8:
13:d8:ec:d9:0a:b3:11:25:36:12:dc:57:64:de:c6:1f:2b:4d:
d8:12:b7:d4:a6:eb:04:a3:bb:46:5a:d4:54:f0:12:c8:38:71:
72:51:30:db:48:da:9c:2b:17:0f:5f:b9:84:39:c9:36:88:07:
33:04:62:ff:46:e0:e9:ab:b1:98:24:12:4a:e0:4f:fd:06:8d:
f0:f9:4e:bc:a0:f1:45:32:98:c9:7c:fb:42:97:0e:7f:b4:3e:
24:a2:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:53 2025 by rpki-client