Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/gK2aqLyacYNLut1v3SVo1JeIzsU.roa
File: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (raw, json)
Hash identifier: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=
Subject key identifier: 80:AD:9A:A8:BC:9A:71:83:4B:BA:DD:6F:DD:25:68:D4:97:88:CE:C5
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 01941FFAB5EFCDAD6C60F925A383C8B1B957
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/gK2aqLyacYNLut1v3SVo1JeIzsU.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31007
IP address blocks: 91.235.114.0/23 maxlen: 23
194.6.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b5:ef:cd:ad:6c:60:f9:25:a3:83:c8:b1:b9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80ad9aa8bc9a71834bbadd6fdd2568d49788cec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:d4:44:56:44:84:0e:01:27:b6:df:c5:bc:
16:52:f6:79:9c:82:57:33:bf:97:1c:b6:50:f3:1d:
3f:94:79:9d:cf:c0:07:f1:17:10:5c:59:14:5f:92:
0e:f9:a7:7b:97:5c:3f:aa:26:7c:7f:66:47:a5:e0:
84:b0:b0:44:3c:7a:bc:e4:f6:2a:d2:8a:ce:32:d9:
9c:0e:63:49:df:c7:28:8d:a5:35:3b:c9:ad:3c:71:
d3:a4:26:86:46:3c:ba:38:66:39:29:c9:0e:32:f2:
49:9e:1a:01:68:87:73:2e:ef:50:3c:48:a7:5f:d0:
c8:a1:3e:49:1f:56:0a:54:2b:59:67:0a:3a:a4:03:
fd:f8:78:b5:d0:20:44:6c:88:bd:5f:69:f6:c0:b2:
c3:aa:95:ac:0d:a7:58:62:42:5d:de:69:6c:10:81:
ee:ed:9e:fd:8f:1f:ce:69:46:ba:54:26:45:45:87:
aa:59:45:1f:42:72:85:e8:23:0d:69:93:bf:d7:83:
91:1d:99:b3:c3:4c:fd:14:1d:5a:08:3a:b3:aa:0a:
b4:be:22:04:d3:9a:03:07:38:64:f4:a5:2d:58:94:
c1:d8:c7:4b:0c:63:37:36:0a:ad:5f:ab:0d:66:18:
0c:b1:57:b9:ba:1a:b1:d1:9a:81:44:59:c9:f6:4e:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AD:9A:A8:BC:9A:71:83:4B:BA:DD:6F:DD:25:68:D4:97:88:CE:C5
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/gK2aqLyacYNLut1v3SVo1JeIzsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.114.0/23
194.6.249.0/24
Signature Algorithm: sha256WithRSAEncryption
56:97:a1:1b:fa:f3:b6:08:f8:d5:9c:e9:4e:a9:e6:77:6b:f6:
56:f0:3a:62:91:a2:1f:60:32:bf:55:1b:2d:4b:47:d2:2d:b3:
70:d1:43:24:6f:10:cc:18:90:43:a9:e4:81:6e:5a:cd:50:fa:
61:49:05:23:83:1d:12:71:3a:58:a2:46:5d:6e:f7:61:b5:66:
44:b5:30:b3:b7:6d:39:6e:80:63:d2:90:d1:53:a7:63:06:9b:
8e:ff:4a:46:68:54:16:58:86:5d:eb:93:c5:f0:09:b0:53:f8:
5f:92:b8:b4:fa:78:52:a6:de:0e:49:76:8d:87:33:2b:c0:7a:
b3:17:d5:9e:7d:ef:4b:95:5b:8b:1d:d8:dd:23:67:ad:de:08:
7c:62:6e:14:72:75:38:b5:4a:da:26:20:f1:8a:a8:28:8f:df:
9c:21:96:5b:bc:b5:3c:39:db:35:12:9e:08:cb:d8:a6:ac:f3:
b5:63:65:29:47:ec:87:02:9f:b0:e1:ba:66:88:f2:75:1c:a9:
56:29:9f:28:6e:e5:d1:09:d0:5a:4d:14:4c:0f:23:30:eb:f3:
22:e7:22:43:06:f4:46:5f:02:44:41:25:ee:1e:39:71:10:17:
7d:60:41:ca:c2:67:00:59:b4:8a:ae:97:ef:94:28:f6:50:41:
7f:21:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:05 2025 by rpki-client