Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/7pcaeO99_zDRbPK-NTdMJZ0i3ME.roa
File: 7pcaeO99_zDRbPK-NTdMJZ0i3ME.roa (raw, json)
Hash identifier: P4paL8l+/gr8n2+ufs079XO6dlW/NE7idqsJ68uPWzY=
Subject key identifier: EE:97:1A:78:EF:7D:FF:30:D1:6C:F2:BE:35:37:4C:25:9D:22:DC:C1
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5E0859AC22E5B75C18E42D7BD5F55
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/7pcaeO99_zDRbPK-NTdMJZ0i3ME.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215077
IP address blocks: 91.191.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e0:85:9a:c2:2e:5b:75:c1:8e:42:d7:bd:5f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee971a78ef7dff30d16cf2be35374c259d22dcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:e6:f7:87:84:39:bb:9f:57:cc:e3:93:8c:
d2:ca:0a:14:1c:72:b0:b8:ce:12:90:74:52:d7:94:
c8:d2:c9:84:a2:a5:e2:2e:2c:b6:87:b7:28:6e:7e:
d7:7e:4b:8e:a2:1b:26:6e:66:fc:83:ff:c6:15:c4:
0d:78:a5:a0:16:4f:45:4a:7f:be:ef:e3:b3:15:7c:
14:28:8c:7c:7c:8c:c1:43:9c:94:59:6b:3d:a1:cd:
49:90:12:e8:73:1a:66:e9:4d:83:ed:45:42:c1:15:
03:6d:c2:9a:3b:ab:c5:21:87:d4:b0:72:42:5c:1d:
2d:4d:d9:80:b4:57:c2:e4:04:4b:2e:11:be:0d:3b:
da:8f:4a:69:ce:40:2d:69:cd:78:53:fc:51:67:16:
af:28:de:28:5a:1f:99:63:31:d2:92:a1:36:84:68:
b3:43:70:19:fe:3e:89:2c:f7:9a:0a:a6:fe:a4:ea:
09:96:f7:37:7c:15:ac:a8:7f:16:b0:e5:89:e4:26:
09:0a:27:3a:57:48:e2:83:b8:76:ca:2b:83:c1:1d:
71:8b:ca:ce:cd:63:75:9d:42:72:7d:2f:53:a2:22:
6c:71:69:fb:ec:56:7d:1d:98:a1:c4:57:5c:bf:f4:
22:da:4a:c7:85:e5:2d:39:e6:f7:cc:09:d9:0e:ef:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:97:1A:78:EF:7D:FF:30:D1:6C:F2:BE:35:37:4C:25:9D:22:DC:C1
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/7pcaeO99_zDRbPK-NTdMJZ0i3ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.188.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cc:3e:b4:a3:72:8d:b6:a3:a8:40:ff:5d:8b:68:b4:c1:66:
59:e8:95:c6:21:c5:66:d4:22:1e:5b:d3:b7:3f:9a:d5:9a:04:
ed:21:b9:35:a0:ec:3b:1e:f3:31:ff:1d:02:0c:a0:bf:a9:df:
96:fd:e3:06:af:9d:d7:0b:5d:db:f3:f5:d8:07:04:0c:6e:82:
a2:42:d6:ac:79:e3:2f:56:ed:e5:e9:a4:49:d1:cc:71:8e:ba:
37:8c:5e:51:fe:bf:40:a6:11:3d:be:f4:64:6f:39:17:02:c9:
af:27:5e:c6:96:95:bf:f2:14:b5:05:8a:8a:f7:3b:9b:e8:81:
fe:21:02:26:0f:47:ec:5a:96:0e:e0:de:e2:41:78:88:35:f7:
61:8a:f5:4e:c9:d2:43:0b:1f:85:e5:7a:6e:8c:8e:5e:6f:73:
55:ca:71:2c:f3:e3:86:d9:31:0c:ed:2c:92:30:9f:d5:11:8d:
0f:38:90:cd:08:fd:e1:1a:92:26:b5:18:46:ea:10:ba:29:fa:
fe:e8:b4:e5:6a:74:2c:18:49:ce:a7:3d:3d:83:11:e4:7b:0d:
ed:4d:7a:54:25:16:cb:3d:51:b6:e3:49:54:c6:02:c4:dc:84:
48:bc:4c:d3:1b:9d:30:a7:e1:e5:8a:c0:a4:f5:ad:9e:8d:7a:
35:d5:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:51 2025 by rpki-client