Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/rJOG1wKAKCxZh5niPNA4FH37mIc.roa
File: rJOG1wKAKCxZh5niPNA4FH37mIc.roa (raw, json)
Hash identifier: X4QsRK+QpuGnJBsier1FeNXw4mgUeL4O+Xn8bqgXMxU=
Subject key identifier: AC:93:86:D7:02:80:28:2C:59:87:99:E2:3C:D0:38:14:7D:FB:98:87
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 0194236908DB3D9ED36DFA4336D1BD4F0857
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/rJOG1wKAKCxZh5niPNA4FH37mIc.roa
Signing time: Wed 01 Jan 2025 19:47:53 +0000
ROA not before: Wed 01 Jan 2025 19:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206423
IP address blocks: 91.199.8.0/24 maxlen: 32
2001:67c:2f84::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:08:db:3d:9e:d3:6d:fa:43:36:d1:bd:4f:08:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Jan 1 19:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac9386d70280282c598799e23cd038147dfb9887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:d0:f7:12:b1:11:6f:7e:44:9a:ad:d7:4e:
68:3b:8c:55:06:82:83:e9:50:b4:ea:0c:51:45:37:
71:04:74:b9:0b:84:b5:f6:9f:7d:70:71:57:76:81:
f8:f5:ac:b1:26:3e:bb:b3:72:dd:4b:e6:fc:75:05:
9b:1a:80:82:bf:8d:a6:d7:d0:7b:1e:1f:8c:39:b9:
a5:c3:60:d6:15:06:3a:84:47:2e:88:72:9a:25:0a:
23:5a:37:38:7f:e1:f7:86:e0:6c:e4:8e:d0:fb:08:
64:58:10:1e:e5:a8:ac:13:7e:69:aa:13:b1:c6:a1:
c5:27:9f:e6:c3:b8:ca:35:b0:6d:65:81:7e:8c:69:
5f:94:be:f8:43:ff:93:de:ce:7e:24:67:ef:1a:a9:
93:e0:c3:61:b1:d7:68:f3:57:79:e3:77:22:c9:20:
8f:e4:32:e4:18:f9:7b:63:b3:e9:57:72:26:fe:36:
f5:90:ed:1c:c6:46:39:3a:4b:e6:64:19:e3:83:42:
21:03:af:30:15:58:60:6e:8d:30:5f:33:a8:3d:76:
ef:74:f1:3b:23:91:24:93:d6:9d:7d:6a:41:85:1c:
d8:be:3a:69:fa:2f:05:44:7e:5e:9c:b6:0e:cb:98:
f5:e0:90:61:7d:fe:b9:d5:0b:c1:f4:65:17:87:85:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:93:86:D7:02:80:28:2C:59:87:99:E2:3C:D0:38:14:7D:FB:98:87
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/rJOG1wKAKCxZh5niPNA4FH37mIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.8.0/24
IPv6:
2001:67c:2f84::/48
Signature Algorithm: sha256WithRSAEncryption
55:35:98:8a:99:bd:57:dc:b6:f5:b7:c3:ed:56:92:ed:f3:b8:
1b:01:91:1a:10:a8:5b:64:e7:1f:0e:0b:83:4f:73:5a:58:c5:
8d:36:62:a0:50:b3:96:cd:bc:75:8a:b5:7f:c1:b1:00:24:ae:
2c:6d:7e:ff:78:ce:ab:06:34:ae:fa:f2:2b:54:88:7f:6c:c8:
94:ef:79:fd:bd:f8:d1:fc:54:c0:ff:50:78:10:5d:94:56:42:
fb:d1:c5:db:08:b9:29:a1:7a:f7:75:86:f2:28:42:83:ef:d9:
e9:a0:eb:fe:44:54:38:20:1b:82:77:f6:85:da:26:f9:33:73:
df:36:d3:2c:35:39:23:98:8c:50:20:14:24:14:f4:c6:14:bc:
25:64:a4:86:15:5b:6a:ce:39:e4:0d:a4:e7:87:36:55:53:f4:
82:5a:8f:96:f3:a5:35:cf:4f:7f:7d:75:94:42:d6:81:5b:d3:
3f:5e:cb:37:1f:a8:29:dd:54:02:0c:06:8e:84:50:c2:75:e7:
52:84:d6:fd:72:68:32:58:f2:cb:16:d6:4c:7e:f9:fb:45:52:
9c:d7:72:2c:41:58:d5:89:b0:5c:90:a8:0f:d8:69:ef:a9:91:
b3:ce:eb:c8:c7:01:04:eb:e9:76:df:6b:96:96:1b:11:b2:d5:
ae:13:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:13 2025 by rpki-client