Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa
File: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (raw, json)
Hash identifier: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=
Subject key identifier: 89:D7:20:FA:D2:7F:0A:D1:A4:CE:A2:99:7D:42:AB:7D:1B:D5:43:F1
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 01942521769823E5DF580A2F21F5A431A033
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56432
IP address blocks: 91.223.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:76:98:23:e5:df:58:0a:2f:21:f5:a4:31:a0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89d720fad27f0ad1a4cea2997d42ab7d1bd543f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:26:36:07:23:92:c9:cb:40:23:88:04:b9:
d1:1a:54:30:eb:f9:9a:7a:e4:b5:da:09:83:9a:9e:
64:e5:8f:c0:41:99:41:03:cd:39:c4:49:e9:48:74:
65:64:c8:06:42:6e:3b:c8:b5:be:ba:c6:2c:30:82:
f0:36:7d:6e:8a:dc:c5:a9:95:85:98:1e:38:af:25:
cc:2f:7c:d8:f3:3d:4d:d0:08:36:9f:47:92:9f:78:
78:4d:42:68:64:fb:39:3a:ac:bb:66:1c:81:7d:c7:
89:28:a0:91:78:df:94:28:13:af:6d:32:fd:77:36:
13:8a:14:36:60:1b:12:81:25:99:bf:c7:0a:3f:b2:
62:48:6d:71:22:e2:26:10:53:f6:39:26:bf:d2:43:
68:e9:95:d2:68:88:f3:21:83:cf:c0:e7:bc:9e:7f:
1d:0c:56:53:6d:e1:01:f8:db:bb:97:42:79:29:fc:
fa:36:73:39:06:e1:93:36:46:3b:ed:3c:e1:2b:e3:
85:48:cb:b0:a2:8e:15:a4:d0:aa:34:9a:dd:a5:bb:
79:8c:d0:ad:6d:b5:a1:f6:51:aa:6b:36:f7:75:d8:
fa:f3:7c:08:b8:84:8d:9f:07:3c:c3:10:45:74:14:
eb:cc:7d:2d:82:7e:9d:99:d4:55:d1:e7:ad:af:ce:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:20:FA:D2:7F:0A:D1:A4:CE:A2:99:7D:42:AB:7D:1B:D5:43:F1
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.148.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:47:ea:8e:1d:93:e8:df:16:8f:d7:6c:b5:42:01:f5:97:43:
be:2e:70:84:8f:99:3a:cd:ee:e1:01:69:07:cf:f0:34:19:74:
06:c4:cc:bb:61:23:3b:4c:4b:c5:77:28:21:6a:65:5f:5b:14:
49:04:9c:ce:8a:a5:ef:12:fd:8c:94:71:c7:cc:da:98:19:8a:
b8:ab:83:ad:7d:9d:c2:f2:a6:bd:a1:8d:75:25:ed:a0:a1:02:
b5:39:14:64:37:d9:fb:f3:cd:cd:53:c6:b7:2c:5c:f3:d3:2e:
7d:19:24:0b:ea:08:30:49:d1:8a:f7:70:b6:1c:29:2d:51:47:
7d:fb:16:bf:72:82:cb:20:32:6b:a4:63:22:42:cf:69:93:31:
13:72:92:0f:10:ec:a5:b0:13:9e:94:fa:66:52:9b:5f:9a:4d:
b6:21:59:de:18:c5:f6:71:5f:18:fa:5e:e9:e4:7f:da:f3:ce:
c4:02:ae:57:62:3a:39:f2:70:c6:21:2e:11:55:df:85:f3:f3:
50:24:9b:4f:33:a9:c4:48:51:80:90:c2:05:b0:58:96:33:74:
6f:f8:67:d6:11:2c:04:18:94:36:cb:7c:4b:bd:07:6b:02:c8:
c0:fc:c4:cd:d3:eb:75:a4:96:f2:54:5e:4f:45:df:5d:f7:f9:
44:7d:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:54 2025 by rpki-client