Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sSyk2Go9b-ZSIbDEjA887FJtAqs.roa
File: sSyk2Go9b-ZSIbDEjA887FJtAqs.roa (raw, json)
Hash identifier: Hr4YLXHzWyVzk5Ncm83D3GjPMZlGrcn/XOlOLPRssPY=
Subject key identifier: B1:2C:A4:D8:6A:3D:6F:E6:52:21:B0:C4:8C:0F:3C:EC:52:6D:02:AB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC771E70FFD0CC99618A66300CA75F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sSyk2Go9b-ZSIbDEjA887FJtAqs.roa
Signing time: Thu 02 Jan 2025 07:48:10 +0000
ROA not before: Thu 02 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58232
IP address blocks: 91.246.49.0/24 maxlen: 24
91.247.177.0/24 maxlen: 24
188.253.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:77:1e:70:ff:d0:cc:99:61:8a:66:30:0c:a7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b12ca4d86a3d6fe65221b0c48c0f3cec526d02ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:b0:e3:5e:c9:6f:b8:1d:86:76:d7:8e:ca:
99:dd:b4:31:f0:05:2e:86:ca:92:17:39:a6:02:69:
5e:e9:f8:d6:52:dd:79:5d:8e:30:59:19:db:80:31:
6c:f9:20:d3:62:ce:3e:58:d2:42:88:a5:2f:19:89:
bd:43:9d:13:20:d4:81:ea:5f:6f:4b:69:71:43:d9:
4f:b6:7c:be:94:93:5c:23:1a:9f:87:51:06:32:c6:
74:e5:67:2f:75:56:b8:19:69:31:43:f7:80:7d:af:
ed:3e:08:50:7b:64:fd:0f:e2:3a:eb:43:5d:fb:7b:
ee:ca:9f:75:39:fb:20:8e:f5:a3:e4:1f:0c:32:c7:
c0:a8:00:cb:19:1e:f4:3e:c4:54:ce:ef:3e:99:24:
e1:fc:af:2f:c4:bf:cd:a2:97:b2:1d:34:93:1f:d6:
d9:74:40:67:8f:40:f2:98:96:9e:cf:5c:42:bc:90:
3c:01:9d:06:1b:0b:60:cd:b1:d1:c8:63:c6:14:b1:
03:cb:b1:61:b1:c8:b0:7a:02:22:82:ee:85:67:96:
8a:6e:7b:e5:47:1f:ae:06:ab:58:44:fe:4c:78:a1:
36:63:78:2d:bf:46:f4:92:4b:85:a2:76:4a:a9:43:
d7:d1:50:f0:0e:32:23:dd:db:47:9a:1c:ab:fc:56:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2C:A4:D8:6A:3D:6F:E6:52:21:B0:C4:8C:0F:3C:EC:52:6D:02:AB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sSyk2Go9b-ZSIbDEjA887FJtAqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.49.0/24
91.247.177.0/24
188.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6a:db:53:09:42:b9:5a:07:cd:d8:4c:5d:20:b7:4e:eb:95:
c5:a5:c9:ae:f4:17:02:c8:85:62:e4:91:c1:51:fa:f6:ac:e3:
c2:88:48:9a:ba:cb:94:3e:6d:d2:99:7d:f0:6b:69:f7:64:ec:
9a:59:7e:1e:13:f8:5c:13:6f:76:ff:b7:19:60:d8:0d:ac:89:
33:d5:1f:ac:4d:31:25:15:e3:a1:04:05:05:6c:59:7d:62:41:
2c:24:7a:77:a8:46:d0:e0:82:e7:36:42:e5:7a:50:aa:d8:ce:
2a:f6:c8:6a:cf:88:81:4b:25:69:49:64:e3:de:f2:c7:5d:85:
a7:8d:39:3d:f4:60:e0:cd:2d:14:1e:0b:44:30:0d:da:37:95:
54:93:7f:fb:52:6c:a7:23:67:58:f7:21:e1:04:ad:38:60:f4:
81:e6:b4:37:5a:2e:95:dc:e0:a1:61:56:d4:0c:00:3b:42:2a:
37:9b:93:eb:53:50:7e:eb:f8:14:87:c2:27:1a:a7:c7:1e:a7:
fa:38:4d:33:b3:f7:2d:85:a2:77:d1:9c:3c:6b:7e:fa:4a:c6:
cb:82:7d:d9:7c:d8:ac:0f:30:4b:7a:17:df:c1:f5:71:5a:69:
e3:d9:8f:88:53:b8:d0:71:5e:fc:e5:11:78:dc:49:e3:6c:58:
5e:7c:80:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:23:29 2025 by rpki-client