Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/_DQ1KzWidoIdXZoVyvdN20rg8gM.roa
File: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (raw, json)
Hash identifier: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=
Subject key identifier: FC:34:35:2B:35:A2:76:82:1D:5D:9A:15:CA:F7:4D:DB:4A:E0:F2:03
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019424B3DD8CEAFFB0D1CCA8A39F23D03623
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/_DQ1KzWidoIdXZoVyvdN20rg8gM.roa
Signing time: Thu 02 Jan 2025 01:49:14 +0000
ROA not before: Thu 02 Jan 2025 01:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61276
IP address blocks: 91.190.156.0/24 maxlen: 24
2a11:6380::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:dd:8c:ea:ff:b0:d1:cc:a8:a3:9f:23:d0:36:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc34352b35a276821d5d9a15caf74ddb4ae0f203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:1e:d6:76:b5:fb:d1:da:34:41:7e:1a:66:
87:fd:f5:c5:51:c7:db:35:1c:41:a4:f8:ed:43:02:
ba:b1:ec:47:40:80:da:c7:0c:2f:57:81:99:6d:d4:
48:66:93:0f:5d:e7:89:59:1e:35:4e:69:0e:e6:23:
2d:ea:07:7e:1e:50:18:12:ab:f2:98:83:07:d3:58:
22:37:00:00:fa:db:83:64:1e:18:2a:de:82:0e:2a:
39:cc:a0:06:a0:63:09:e6:74:01:40:d8:7e:9c:c8:
47:0d:79:fe:b4:17:88:ff:07:c9:be:bc:b1:9e:61:
a0:55:64:3b:63:0f:a9:65:84:29:d3:f2:e9:a2:6f:
94:a3:23:d4:b2:af:26:b3:b1:a5:de:34:8f:e4:66:
ac:31:d8:e4:4f:a0:5e:6b:40:ce:97:1c:fd:90:85:
1c:e8:7b:d5:fa:cb:ab:9b:c9:4d:61:6d:da:d5:5c:
d0:52:12:e5:7f:f7:e1:3c:fa:d5:90:1e:52:10:08:
08:76:4d:c4:e6:6c:fc:6e:26:af:c6:5e:b2:ab:06:
15:15:bc:1b:0c:16:ab:12:e1:bd:39:7e:58:28:02:
6e:22:4f:6b:db:4c:72:7e:3c:5f:74:65:45:7a:47:
90:28:6a:f1:c9:e9:99:2c:fc:dd:e7:6c:65:b9:59:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:34:35:2B:35:A2:76:82:1D:5D:9A:15:CA:F7:4D:DB:4A:E0:F2:03
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/_DQ1KzWidoIdXZoVyvdN20rg8gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.156.0/24
IPv6:
2a11:6380::/29
Signature Algorithm: sha256WithRSAEncryption
01:b4:6d:cd:59:c3:c7:25:cc:10:a0:f7:75:af:ec:87:96:0f:
39:6f:6f:7f:f7:63:8e:18:aa:0a:8b:62:e4:ec:c7:4b:59:aa:
90:bd:95:ef:c6:ee:c8:93:e1:0b:9f:7a:f8:57:86:b9:2e:09:
65:a8:8f:aa:ef:9f:19:77:31:8f:4d:be:00:09:7f:fd:25:ea:
32:25:c5:32:db:04:e9:67:e0:4f:96:b0:b5:1f:76:59:c6:2a:
e2:03:c9:cb:22:ce:25:1c:f1:68:f0:6f:c4:ed:b8:b7:81:76:
9c:0e:7c:50:e1:45:eb:6b:13:2f:23:d9:4e:6f:f7:e9:61:12:
83:e1:bc:17:13:d5:d9:cf:18:62:39:3f:a5:f4:45:28:70:4f:
c9:c8:0b:88:1d:0f:a8:42:16:8c:3a:22:6b:74:b7:59:0d:50:
a6:6a:8a:a3:5a:56:34:51:20:6e:e2:4d:1d:cc:51:3f:ac:f6:
70:cc:ff:8a:ea:c6:12:bc:40:b1:b1:df:a1:aa:66:fd:57:3d:
09:2f:93:1e:c2:9c:55:d1:24:a9:59:4c:bc:3e:0e:70:69:bb:
8e:08:b7:7a:f3:f0:b8:1e:e2:08:3a:3e:81:2a:e8:65:0c:95:
f9:76:98:4b:eb:4a:da:3c:5c:a3:f1:5d:64:6f:de:3e:09:15:
d7:f3:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:03:19 2025 by rpki-client