Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/1bAxGY5qO4xV54QsH6dH5YqwKes.roa
File: 1bAxGY5qO4xV54QsH6dH5YqwKes.roa (raw, json)
Hash identifier: E42uV3NJLrPIE9xeD5wLXJwDkdw8IVRhghW/M8SKmks=
Subject key identifier: D5:B0:31:19:8E:6A:3B:8C:55:E7:84:2C:1F:A7:47:E5:8A:B0:29:EB
Certificate issuer: /CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Certificate serial: 019425FC4F56ABAA412B2E5DFE78720724EF
Authority key identifier: B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/1bAxGY5qO4xV54QsH6dH5YqwKes.roa
Signing time: Thu 02 Jan 2025 07:47:59 +0000
ROA not before: Thu 02 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41652
IP address blocks: 91.223.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4f:56:ab:aa:41:2b:2e:5d:fe:78:72:07:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Validity
Not Before: Jan 2 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5b031198e6a3b8c55e7842c1fa747e58ab029eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:dc:93:c9:63:2a:d9:3c:95:80:7f:29:05:
8a:bf:ae:b8:cc:97:af:45:72:c6:fd:2b:09:0c:f7:
21:1e:fc:3d:47:e5:0b:b5:68:b8:aa:34:39:22:47:
75:c2:4e:d9:bf:ec:ed:8e:27:ae:cf:4f:38:6c:9a:
84:40:29:06:14:e2:2a:ec:d8:ca:81:88:7d:6a:56:
91:c1:fb:33:95:1d:82:7c:e4:36:92:cf:c1:22:6e:
a2:07:04:ae:f1:57:b1:0a:a6:43:3d:91:0b:68:72:
14:7f:02:b1:4e:64:a9:c0:cb:e4:9d:a3:ab:d8:5b:
f6:e8:c2:68:4c:32:30:85:c7:f6:5a:bc:73:e8:30:
98:29:2d:06:57:07:df:54:b5:a4:5e:b8:94:be:e7:
b1:0f:17:2f:f2:1b:97:1d:cb:fb:68:29:2c:84:3f:
c1:35:cb:71:8e:80:ae:13:3d:8f:51:28:69:84:40:
be:19:69:69:06:b4:f7:20:45:cc:e9:5d:7f:96:f7:
20:b1:3b:ea:8b:bd:ba:bb:d0:ad:d5:f3:be:54:f3:
88:20:e4:70:47:ab:86:96:a4:b6:45:60:dd:6f:08:
c9:0d:35:3a:40:69:62:c4:15:c2:d4:00:7d:1d:bf:
11:3a:fe:29:d9:26:1b:1c:af:cf:2a:2c:bb:ea:6b:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B0:31:19:8E:6A:3B:8C:55:E7:84:2C:1F:A7:47:E5:8A:B0:29:EB
X509v3 Authority Key Identifier:
keyid:B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/1bAxGY5qO4xV54QsH6dH5YqwKes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f5:ee:85:7f:a5:bd:1f:a7:22:e8:8f:aa:a6:37:e0:55:d9:
38:e0:2f:c0:f3:cc:88:22:cc:b4:7a:50:66:a8:2f:6e:b0:aa:
8e:53:1c:34:f8:c9:40:20:07:9f:55:0c:f6:18:24:37:62:23:
ab:9f:94:33:74:60:91:96:ef:e4:34:ba:06:ab:dc:64:9a:49:
66:3d:29:45:e9:d8:44:b2:76:1c:1e:a4:bb:c3:1f:b2:38:cd:
d6:0e:74:57:a5:86:30:91:2f:a4:6f:00:5e:48:76:91:98:95:
29:17:77:c3:80:94:b5:f4:68:b7:89:61:e8:80:97:82:99:d0:
fa:bf:01:17:f3:82:6d:5c:6f:6f:72:57:c3:29:9b:b3:91:02:
e3:c2:72:e7:0a:f7:b8:38:55:13:cc:5d:22:a3:62:14:ef:11:
18:7a:04:d7:fe:a5:0b:d7:b7:cd:f8:64:bf:f1:d7:0e:86:09:
65:61:05:bf:40:8e:b3:39:b8:b1:0a:ac:be:5d:e2:51:08:c5:
a0:2a:24:4b:fa:7d:e8:24:8b:92:7c:c7:2b:ad:d9:5f:5c:50:
e8:ed:26:12:20:da:6d:05:4c:c8:66:7c:3e:de:a2:09:07:a3:
c2:c3:b2:da:6b:8e:12:25:db:f1:1e:20:08:96:26:f6:72:52:
13:75:14:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:20 2025 by rpki-client