Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/bZdT0ulPTuEtek-XjeB521ISo3Q.roa
File: bZdT0ulPTuEtek-XjeB521ISo3Q.roa (raw, json)
Hash identifier: xqCVBaD8DRJ1ySsOrVCJhTVB/lWPP6rfMVSRsmnbyQY=
Subject key identifier: 6D:97:53:D2:E9:4F:4E:E1:2D:7A:4F:97:8D:E0:79:DB:52:12:A3:74
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01942823FD7CB8F07E612E2F5597568D0C40
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/bZdT0ulPTuEtek-XjeB521ISo3Q.roa
Signing time: Thu 02 Jan 2025 17:50:34 +0000
ROA not before: Thu 02 Jan 2025 17:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 91.102.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:fd:7c:b8:f0:7e:61:2e:2f:55:97:56:8d:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 17:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d9753d2e94f4ee12d7a4f978de079db5212a374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:02:2a:28:9c:bf:d7:1a:34:94:f1:05:d2:
0c:83:d2:8f:0d:ce:91:b3:af:41:71:da:75:72:db:
a7:96:e7:51:e7:d3:5d:ab:fa:e3:a6:2f:5f:82:a7:
7d:8c:a0:e5:29:37:03:a0:86:5b:4a:56:e1:4e:b4:
3d:d8:13:ad:21:7b:bb:17:a0:f5:38:8f:25:55:3a:
8b:df:f7:37:38:08:bb:5f:f4:9a:0d:55:8b:c9:a3:
ba:30:93:9c:dc:aa:00:30:18:09:1a:38:2d:be:b8:
c1:c4:ad:e3:88:e3:f4:09:73:a6:e1:96:b1:9c:c5:
cf:1b:cb:00:24:e6:41:d7:49:40:d1:f8:f7:46:fc:
85:bb:55:df:b8:f2:6d:6b:ae:e2:2a:d6:ef:40:98:
16:ea:0c:0f:d2:1e:3d:9c:65:56:6a:40:cb:d7:69:
b7:2d:07:21:b2:7b:15:27:47:57:91:3c:d5:90:cc:
4a:df:90:48:1a:34:27:db:96:fc:a3:36:bd:ab:7b:
cc:ae:01:9b:7b:0b:59:3a:bf:6f:66:bc:6d:9a:e4:
15:30:9f:7b:6e:ab:ff:1d:b9:b3:32:7b:99:4f:46:
be:fb:93:bd:d7:2a:ef:d0:ff:40:3b:3e:45:64:ee:
d7:00:2e:f5:6e:ed:7b:04:48:13:26:25:ea:43:14:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:53:D2:E9:4F:4E:E1:2D:7A:4F:97:8D:E0:79:DB:52:12:A3:74
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/bZdT0ulPTuEtek-XjeB521ISo3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.167.0/24
Signature Algorithm: sha256WithRSAEncryption
42:df:f6:fa:0e:af:7c:92:61:45:7f:b9:76:1e:db:5d:6c:71:
93:b0:81:23:2a:8c:bc:7c:93:77:8b:6d:58:fd:6a:7c:f0:f6:
05:0e:9c:0a:2a:67:23:5c:ef:97:f0:27:d9:26:86:86:13:55:
1c:a7:26:fb:ec:3f:c6:08:97:76:1f:30:60:c2:bd:c6:d0:54:
17:99:2c:8c:ce:22:c0:17:e6:68:de:f3:b5:b6:df:7d:1e:fe:
81:92:df:54:55:28:8b:8f:8f:d2:71:ad:1e:69:6f:54:cf:71:
d8:7b:b8:4e:a2:00:ee:2b:f0:07:36:28:a2:c6:41:db:b2:d0:
82:ba:ea:07:62:47:20:af:22:b5:e9:e4:bd:d1:d7:9c:de:b9:
32:6d:5b:fe:1e:15:7a:62:da:fd:51:b4:6a:3e:2d:70:5c:a3:
4e:f1:93:3b:2b:5d:74:41:77:44:d5:f4:16:c0:8f:f1:37:b1:
c6:c5:3a:71:c2:72:df:69:1f:5b:7d:66:5c:f6:78:c7:2d:4b:
a6:7f:53:e4:4a:95:6b:de:5e:48:c0:d4:9b:c5:d4:88:d0:02:
1b:bd:ee:bf:83:ad:97:74:24:32:6f:9b:cb:e9:34:2c:bd:14:
71:bc:0a:bf:2e:3d:83:c1:f3:3d:b5:f7:52:42:5d:00:6b:94:
23:20:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:10 2025 by rpki-client