Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa
File: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (raw, json)
Hash identifier: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=
Subject key identifier: 4C:8F:5B:7F:37:D8:4F:F7:BD:51:7A:0D:49:24:6F:67:44:88:BD:CA
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019420D604FDB7844931E74BDBE6F599736E
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48078
IP address blocks: 91.210.24.0/22 maxlen: 22
91.210.24.0/24 maxlen: 24
91.210.25.0/24 maxlen: 24
91.210.26.0/24 maxlen: 24
91.210.27.0/24 maxlen: 24
91.215.88.0/22 maxlen: 22
91.215.88.0/24 maxlen: 24
91.215.89.0/24 maxlen: 24
91.215.90.0/24 maxlen: 24
91.215.91.0/24 maxlen: 24
185.15.60.0/22 maxlen: 22
185.15.60.0/24 maxlen: 24
185.15.61.0/24 maxlen: 24
185.15.62.0/24 maxlen: 24
185.15.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:04:fd:b7:84:49:31:e7:4b:db:e6:f5:99:73:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c8f5b7f37d84ff7bd517a0d49246f674488bdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:c2:5f:0f:53:8d:75:c3:51:bb:1f:a8:c3:
be:d7:31:0b:89:ac:b3:d5:b5:f9:d0:1e:df:de:3c:
6d:7a:c9:9b:4b:e0:7f:53:c0:4d:75:42:6b:03:ba:
6b:a9:96:f4:12:91:a7:75:a4:7f:18:db:bd:7a:17:
6a:84:1a:d0:1d:0d:11:7a:bf:83:19:c3:71:49:85:
86:1a:8e:8c:6e:3f:09:b1:33:45:d6:cb:05:e9:37:
a6:f9:3e:1b:fe:79:55:07:22:a0:1f:a5:02:ef:f2:
95:92:81:98:44:25:38:f6:cd:e2:e0:92:be:56:96:
c4:12:c5:43:c2:5f:68:08:f0:89:41:a9:e9:ec:4f:
c2:cb:b2:c8:f3:20:53:92:f6:eb:34:e5:9a:66:7b:
a0:8d:91:3b:c5:6a:47:71:39:53:40:f1:71:0e:41:
70:2e:61:3c:15:4a:6b:dc:59:ad:0f:2d:c6:ed:73:
08:ec:c1:c2:2b:91:c4:b9:5f:10:71:0a:e9:19:67:
20:8b:3b:a2:83:59:bb:96:21:cf:cd:1c:8e:e6:ec:
9e:fb:75:69:e8:4a:1d:48:f9:ea:d5:7a:0e:12:53:
8c:a7:9e:d5:15:5c:f4:3d:ee:73:33:5e:ff:f6:23:
7b:9e:34:cd:aa:a7:c2:da:a3:6c:bb:d3:d2:09:7f:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:5B:7F:37:D8:4F:F7:BD:51:7A:0D:49:24:6F:67:44:88:BD:CA
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.24.0/22
91.215.88.0/22
185.15.60.0/22
Signature Algorithm: sha256WithRSAEncryption
61:ec:90:8f:a6:6e:88:33:f2:15:b7:f8:2c:2c:23:8f:59:d9:
f1:77:07:cf:96:3a:36:4d:5c:5d:8c:99:d6:34:5c:b4:58:9a:
3e:2b:73:44:67:78:fa:e7:94:05:56:e3:88:5f:8f:6c:a5:c5:
0d:e6:9d:49:e3:f9:27:c5:90:02:ae:92:34:7d:05:c1:a9:de:
bd:f2:88:19:41:55:e5:36:ca:47:03:90:5f:34:c0:13:c2:6a:
88:4f:35:1f:ca:e7:7d:bc:0b:29:c8:67:7a:fa:93:57:fb:5c:
42:c2:7d:97:1b:7a:cc:ee:11:a1:23:52:bb:0e:ac:b1:9f:dc:
74:f0:89:b6:dc:fd:f5:70:4f:ae:81:97:9b:90:32:33:dc:64:
23:73:47:f8:4e:fa:67:84:9a:a3:41:b2:da:10:07:0f:27:b6:
18:72:c0:6b:0e:9d:3c:f9:97:59:7b:2d:9f:47:f0:46:a1:64:
45:e6:db:d4:bb:4c:d9:e3:50:b8:f7:4a:8b:f7:18:28:42:1b:
10:97:0b:72:75:55:8f:ae:6c:8b:67:01:36:ce:4e:e8:f1:b6:
9b:85:e6:c2:15:66:a1:8f:0f:72:b5:e0:bf:f2:ea:cf:f8:00:
98:2e:10:f7:b5:f9:d9:c7:fc:00:8c:6b:bf:aa:39:24:a5:69:
8a:70:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:22 2025 by rpki-client