Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/p_i4xl5EipcKtC3SPVXhIuYprDw.roa
File: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (raw, json)
Hash identifier: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=
Subject key identifier: A7:F8:B8:C6:5E:44:8A:97:0A:B4:2D:D2:3D:55:E1:22:E6:29:AC:3C
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 0194258F34203414E482476B17F11F5D741C
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/p_i4xl5EipcKtC3SPVXhIuYprDw.roa
Signing time: Thu 02 Jan 2025 05:48:49 +0000
ROA not before: Thu 02 Jan 2025 05:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 91.208.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:34:20:34:14:e4:82:47:6b:17:f1:1f:5d:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f8b8c65e448a970ab42dd23d55e122e629ac3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:bc:1c:26:4d:0d:ac:33:79:08:7e:da:d6:
75:f8:7e:35:f0:bb:b1:35:04:db:b2:78:d0:6e:69:
78:f9:eb:d9:b4:93:87:fb:dd:a2:1a:1d:67:4b:67:
15:4d:42:28:de:3e:89:0d:de:da:d4:f5:91:8f:2c:
ed:c9:ff:f6:8f:3b:c4:34:c6:ef:00:b0:92:19:8d:
8e:9a:d0:85:49:5c:07:d6:30:cf:b2:5b:be:84:18:
05:dc:1b:20:18:66:03:85:2d:8a:e6:50:d7:62:8b:
2a:2d:c6:2e:a1:52:3c:60:f1:55:98:45:c5:72:82:
00:af:d1:12:fa:71:d8:cc:12:41:6e:02:18:ac:82:
10:b5:15:28:34:3a:dd:56:9d:b0:bf:2a:0e:48:a4:
af:04:c3:9d:db:a2:36:b3:93:9b:90:1f:65:a5:2f:
0b:2d:ce:de:2d:de:a7:82:b8:35:47:71:c4:e3:ed:
4b:bc:d4:d1:d5:a7:46:09:7a:05:55:f7:47:2f:c8:
08:0d:d6:e0:34:f3:b0:62:51:05:fd:1a:65:71:83:
3a:a7:8f:a1:5f:31:f0:5d:30:dd:d1:bc:73:06:0e:
62:e3:74:d4:57:c7:ed:2a:d1:56:16:53:b6:34:62:
b4:47:a9:07:14:b3:30:1a:16:d8:fd:ed:64:a6:8f:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:B8:C6:5E:44:8A:97:0A:B4:2D:D2:3D:55:E1:22:E6:29:AC:3C
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/p_i4xl5EipcKtC3SPVXhIuYprDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:68:4a:3a:c3:71:19:7a:18:82:77:3c:c5:f6:68:b3:92:e1:
94:fe:64:4a:2b:55:76:02:93:a6:25:79:fb:c2:40:fb:15:68:
1c:4f:65:59:33:03:f8:66:03:b9:ed:5e:ae:97:a4:e4:73:36:
8c:c2:ef:54:14:76:d3:83:07:bf:aa:7b:86:3d:dc:d0:33:c4:
2b:74:4a:e3:93:e6:23:04:c7:14:23:a8:de:d6:77:01:fc:3b:
93:22:75:3b:29:61:53:4d:dd:77:3b:5d:d9:72:f2:75:86:0b:
a8:ed:6c:ac:be:e9:85:d5:a2:41:5c:ce:f1:f0:62:b6:fb:9c:
8d:3b:0c:bf:a1:8a:ae:6e:c3:15:3d:fa:28:5c:da:08:c1:f7:
cc:7b:ed:3e:47:13:fb:39:50:ed:f5:88:a8:60:de:b2:2b:e2:
bc:93:68:42:30:cd:65:c8:a2:4e:2a:24:09:d7:f5:c5:de:bb:
95:e6:eb:ac:4c:f1:de:a9:ff:7a:d5:64:a1:c3:ba:82:59:d6:
79:86:5d:47:1f:c7:08:f6:06:ef:03:b4:5c:ee:a2:0c:27:c7:
68:2b:72:53:a1:b1:64:42:f3:dd:b9:4a:ae:08:cd:30:9e:ad:
57:e4:3d:16:21:f8:43:0d:15:86:e1:38:4c:de:e8:d3:96:de:
3d:0b:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:17:39 2025 by rpki-client