Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/RSYdG5gg-YCPUfslf96tr_CDk9g.roa
File: RSYdG5gg-YCPUfslf96tr_CDk9g.roa (raw, json)
Hash identifier: M9FWyf6d3I10rIL5aBwIBRBiTbEoITfpKpVAl4zvaYE=
Subject key identifier: 45:26:1D:1B:98:20:F9:80:8F:51:FB:25:7F:DE:AD:AF:F0:83:93:D8
Certificate issuer: /CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Certificate serial: 019425221A7E04C20B26450FAD515517F2AC
Authority key identifier: 0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/RSYdG5gg-YCPUfslf96tr_CDk9g.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34121
IP address blocks: 91.201.184.0/22 maxlen: 24
2001:678:d8c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1a:7e:04:c2:0b:26:45:0f:ad:51:55:17:f2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45261d1b9820f9808f51fb257fdeadaff08393d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:ac:97:60:12:1e:7d:f7:fd:e8:df:e7:1b:
5e:2c:15:f1:53:56:39:9e:7a:b2:35:06:44:13:c8:
31:af:fe:e5:fe:5e:e7:2c:7c:c5:0e:d4:8b:6b:3b:
ee:c0:c4:18:07:b7:cd:17:15:10:44:55:fb:8c:b1:
ec:0f:ab:0d:c3:9c:ce:ae:5d:ef:2f:75:69:98:89:
f7:37:a6:fd:fd:a9:96:34:e9:e1:c5:88:0f:78:62:
60:9b:a1:40:9b:d2:72:91:4c:40:4e:ef:51:7a:19:
fd:22:c6:1c:02:64:26:ef:f7:8b:dd:23:03:dc:f8:
c6:d6:b1:53:f2:c9:22:3b:5b:f1:86:f4:8f:57:f0:
b7:a4:bb:fe:8b:93:30:b5:d9:c8:12:92:cf:1c:c2:
49:75:b5:4d:3f:4a:e3:6e:b7:f8:95:95:a0:f1:46:
37:44:f3:92:ee:b3:b6:cf:a9:ae:36:d0:7b:86:0f:
79:b6:d2:c2:91:57:66:7e:86:8d:26:50:b2:88:9b:
44:7f:42:5d:3c:14:16:a7:75:e1:a5:6c:8f:98:74:
3e:b9:20:a5:bb:ba:43:8f:25:8b:9e:eb:77:91:f5:
6d:50:a5:b3:be:71:39:82:0d:41:89:97:c2:a7:68:
34:50:d4:b1:97:8f:1b:25:97:a0:d5:58:c9:70:76:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:1D:1B:98:20:F9:80:8F:51:FB:25:7F:DE:AD:AF:F0:83:93:D8
X509v3 Authority Key Identifier:
keyid:0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/RSYdG5gg-YCPUfslf96tr_CDk9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.184.0/22
IPv6:
2001:678:d8c::/48
Signature Algorithm: sha256WithRSAEncryption
71:33:54:7c:39:88:0f:8e:d0:30:d1:5e:a8:47:28:2f:30:96:
43:ee:94:fd:74:c2:55:75:b1:ef:8d:71:d9:18:34:3d:df:b5:
17:7d:de:81:da:1c:94:76:85:12:a8:75:ab:b6:7a:ff:2d:d3:
ec:e3:a9:03:24:af:18:5b:ab:23:a5:cc:e0:96:f2:36:e1:a2:
89:3c:5f:b3:a4:36:a5:8b:98:f3:ce:e8:6a:a8:68:64:f8:38:
57:f4:a2:53:39:60:8f:bc:4b:6f:5a:a1:20:a1:2c:a4:6e:41:
e8:b7:50:40:54:bb:d5:3c:3a:bf:39:49:0e:80:aa:39:56:7e:
e1:96:53:c0:c3:6d:10:50:d7:41:bc:88:4d:6b:c3:6b:9c:1f:
c7:2a:41:29:99:bd:6c:44:e8:96:20:e8:20:c6:18:2b:f7:54:
a4:1c:6a:db:aa:77:8f:7f:48:04:4e:8a:95:87:d2:7b:b0:69:
50:9c:f6:41:db:c3:61:3d:95:85:eb:2f:e4:b1:64:a7:8c:5d:
06:48:69:f7:d7:d6:bc:18:f1:4b:b3:5b:17:a9:e0:01:1b:1a:
01:30:0b:35:eb:c2:1b:44:46:8e:fc:77:65:3e:ac:b4:71:bf:
e2:80:60:f0:6b:98:5a:85:6b:65:7e:e2:57:cb:13:04:d6:50:
ec:b3:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:32 2025 by rpki-client