Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/30wxplZBtekiYfq89WhRrKa7cbQ.roa
File: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (raw, json)
Hash identifier: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=
Subject key identifier: DF:4C:31:A6:56:41:B5:E9:22:61:FA:BC:F5:68:51:AC:A6:BB:71:B4
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 019421B186070FD5FB632F21F0853A4F3ECC
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/30wxplZBtekiYfq89WhRrKa7cbQ.roa
Signing time: Wed 01 Jan 2025 11:47:49 +0000
ROA not before: Wed 01 Jan 2025 11:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213027
IP address blocks: 91.203.106.0/24 maxlen: 24
2001:678:f70::/48 maxlen: 48
2001:678:f74::/48 maxlen: 48
2a11:a00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:86:07:0f:d5:fb:63:2f:21:f0:85:3a:4f:3e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: Jan 1 11:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4c31a65641b5e92261fabcf56851aca6bb71b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:99:6e:e5:d8:e5:8a:22:8b:97:ef:7d:67:
fe:6c:1e:d7:08:f3:67:73:8b:42:5d:fc:99:1c:60:
54:e0:0c:7b:4e:eb:f3:f9:52:f5:79:07:91:ba:62:
7e:7b:aa:97:4b:c2:65:dc:9b:61:92:40:51:59:fe:
fa:73:fd:90:dc:95:47:5f:1b:02:61:9e:4d:fd:6f:
da:cf:11:12:56:35:79:18:88:05:11:67:58:97:90:
1f:2f:06:3b:5e:72:06:8c:8d:8e:27:8b:5c:28:9c:
0b:d4:a3:7b:d8:22:92:86:af:c5:7c:00:d3:88:b0:
26:cf:60:9c:07:26:d9:73:a2:16:fa:56:96:4d:60:
12:f2:e2:4d:c7:11:32:ea:b8:c1:3d:13:b5:5e:aa:
d2:71:e3:14:88:e0:0e:2d:a4:a4:15:ad:ba:0f:7a:
2a:26:40:d7:0b:06:12:4f:0e:8c:7f:41:af:39:bb:
e2:76:f3:b8:f6:05:2d:c9:90:13:3c:2b:31:7d:fc:
e8:8c:f9:7c:d8:fc:d3:b7:6a:a2:43:ae:77:74:dc:
f2:80:d6:33:b3:89:83:67:78:1c:cf:c3:35:d5:ce:
06:6a:e7:99:4d:92:8e:f8:d8:68:f2:25:df:c8:c8:
09:95:f4:01:5e:d1:60:a8:18:de:58:1a:11:0a:16:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4C:31:A6:56:41:B5:E9:22:61:FA:BC:F5:68:51:AC:A6:BB:71:B4
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/30wxplZBtekiYfq89WhRrKa7cbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.106.0/24
IPv6:
2001:678:f70::/48
2001:678:f74::/48
2a11:a00::/29
Signature Algorithm: sha256WithRSAEncryption
3a:f4:46:61:8a:77:94:75:ff:94:04:32:72:6a:42:15:56:e1:
4a:5d:e9:5d:3a:a9:b5:01:b5:3a:43:0a:fd:41:73:f8:8e:5f:
e3:05:a1:04:ca:0c:fb:53:07:f8:90:fe:ad:88:2d:91:8d:96:
8a:4a:93:c9:9a:b2:fa:5b:d4:3c:93:6a:b5:16:a3:f7:b0:52:
2e:e3:c4:95:c0:60:23:92:b0:7e:56:da:fb:ec:c9:6a:b0:6e:
28:85:e9:61:71:37:87:b8:06:1f:ce:cf:85:5a:b6:45:72:9f:
02:45:eb:11:a7:1e:97:53:c4:e3:49:9b:5c:1d:d4:ac:14:9a:
31:e8:a2:38:81:f4:43:bf:ad:0e:ac:7c:73:ab:db:94:ae:44:
15:8f:9d:b1:39:e0:70:58:1b:4c:31:b2:58:06:dc:3d:06:3c:
84:6c:2d:b1:cc:50:5f:b3:f2:50:64:a3:f8:fb:6e:06:92:6c:
8c:b1:f7:18:37:ae:ae:7b:ec:e8:36:23:59:d7:f8:96:6d:8f:
39:9c:a3:2c:d1:33:0c:77:97:36:53:2b:6d:a8:4a:0d:37:08:
a5:3e:a4:3c:24:83:5a:c5:56:16:26:a8:b7:38:3c:82:7f:46:
f4:b3:8a:7d:14:34:52:08:6f:3b:78:1f:ef:94:8e:56:ec:65:
ca:cc:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:47 2025 by rpki-client