Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/KiJzynW70gOM8utuToFlDE5SLhE.roa
File: KiJzynW70gOM8utuToFlDE5SLhE.roa (raw, json)
Hash identifier: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=
Subject key identifier: 2A:22:73:CA:75:BB:D2:03:8C:F2:EB:6E:4E:81:65:0C:4E:52:2E:11
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 019501AE5936B5707174760F68BCD433B81A
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/KiJzynW70gOM8utuToFlDE5SLhE.roa
Signing time: Thu 13 Feb 2025 23:39:18 +0000
ROA not before: Thu 13 Feb 2025 23:39:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47694
IP address blocks: 91.211.16.0/22 maxlen: 24
91.211.19.0/24 maxlen: 24
176.124.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:01:ae:59:36:b5:70:71:74:76:0f:68:bc:d4:33:b8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Feb 13 23:39:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a2273ca75bbd2038cf2eb6e4e81650c4e522e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:4f:21:98:62:bb:70:9b:1d:2b:f9:5a:67:
36:2e:26:00:57:2c:d1:77:f3:65:e5:24:19:58:d1:
60:33:f3:77:c4:bd:b7:ad:86:00:25:c1:50:69:70:
d4:c7:30:85:da:ca:58:d0:e3:b8:6e:2e:d5:0e:5d:
29:1e:63:15:53:ce:81:40:58:c1:72:32:24:1e:51:
70:24:f1:5a:7f:99:90:90:02:54:49:3d:d9:b2:fb:
61:d3:58:bf:74:3f:2a:de:68:f5:f1:db:b3:d0:3c:
5d:2a:1a:01:9f:c2:77:9a:8a:ff:07:ec:9c:7e:bd:
a0:70:06:ca:ad:ce:a5:1f:bf:39:b2:32:8a:21:33:
50:56:dd:27:99:ce:f2:9d:54:61:ab:28:0c:95:73:
35:4d:c1:46:99:fa:fa:cf:b7:dd:e4:a2:d4:56:8d:
5c:9e:38:33:69:ba:79:3c:3a:77:d6:34:01:32:99:
57:b5:ea:d8:65:5b:4a:16:5a:2a:79:4e:85:d2:e5:
db:fe:b2:3d:b1:46:35:21:02:5a:7a:da:b9:92:90:
1a:79:bf:dd:6a:8b:ff:0e:cc:a8:c1:8e:e7:ab:14:
41:8a:c0:ba:70:28:89:78:54:fd:fe:a4:4c:2b:f7:
fd:79:d0:83:cc:d0:24:61:42:ee:44:4d:6b:5c:89:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:22:73:CA:75:BB:D2:03:8C:F2:EB:6E:4E:81:65:0C:4E:52:2E:11
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/KiJzynW70gOM8utuToFlDE5SLhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.16.0/22
176.124.12.0/24
Signature Algorithm: sha256WithRSAEncryption
89:15:c7:e0:72:03:9e:f5:8a:dc:29:98:c7:55:04:02:fb:5e:
dd:7b:97:ea:40:47:39:35:dd:db:0b:c4:42:af:e4:3e:c6:d9:
f8:93:5c:e5:e4:16:42:17:36:2a:59:99:30:7d:6c:e2:10:51:
44:14:0b:4d:57:3e:31:6a:82:bc:f4:73:68:86:61:ac:b5:0e:
ec:a9:a4:0f:a7:ed:10:cc:f5:25:5d:11:6f:13:68:69:7b:2f:
08:50:c1:9c:91:a6:91:87:f2:70:7d:3a:15:20:73:83:8c:da:
87:33:c8:49:d0:c6:12:96:c3:ca:79:01:9a:46:54:01:70:99:
9c:55:29:87:d3:9d:ad:f9:6c:5b:20:b0:bd:f9:d2:3b:1f:e4:
94:2a:de:5e:87:55:0d:71:72:97:d2:b0:03:c8:bd:5f:29:d2:
c7:30:e3:3d:02:4a:ea:ec:96:4e:07:43:d8:51:a8:ea:84:1c:
ec:a2:9f:74:31:06:4e:c4:b2:d1:20:d8:ce:b5:46:c8:7f:b9:
8e:0a:13:00:f2:cd:ae:fa:38:eb:fe:0e:72:b6:6c:2e:51:b3:
91:ff:3f:13:45:b9:8c:bb:ad:08:f6:88:d9:01:93:91:92:4f:
5a:49:9f:31:79:a8:05:ae:37:ab:54:15:fe:6d:71:e6:3b:4d:
58:c8:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:59 2025 by rpki-client