Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/nTgIOzlODWBk_QKm4tERqOAYlxM.roa
File: nTgIOzlODWBk_QKm4tERqOAYlxM.roa (raw, json)
Hash identifier: 1pMb/0/t+7PTVSQmLH/AhVpC0yG2OWpkazITYhqFU4o=
Subject key identifier: 9D:38:08:3B:39:4E:0D:60:64:FD:02:A6:E2:D1:11:A8:E0:18:97:13
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 01896498F0EC91F2A39D047F0FB065EEC457
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/nTgIOzlODWBk_QKm4tERqOAYlxM.roa
Signing time: Mon 17 Jul 2023 16:04:52 +0000
ROA not before: Mon 17 Jul 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 91.188.221.0/24 maxlen: 24
92.119.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:98:f0:ec:91:f2:a3:9d:04:7f:0f:b0:65:ee:c4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jul 17 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d38083b394e0d6064fd02a6e2d111a8e0189713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:3d:89:34:69:a0:26:0f:bc:cf:a0:4d:c4:
de:e5:0e:02:cc:31:dc:7d:86:35:b6:5c:46:58:c5:
44:7a:e9:49:c3:26:a7:1e:c0:6c:9f:cc:bf:81:22:
b9:88:6d:22:29:67:ed:1f:40:b3:60:e2:6f:97:21:
f0:f2:be:6e:2a:27:29:c7:9e:28:88:74:41:2c:58:
04:c3:b4:23:2e:c4:14:d6:aa:02:8e:f1:23:e5:c9:
be:f1:93:b7:bf:d5:65:15:28:35:ac:25:9d:0f:35:
94:b6:e5:78:d6:c8:69:11:63:5a:8a:78:37:90:c5:
49:56:55:1e:98:84:0c:57:5c:82:83:64:97:fb:0b:
37:b5:5d:81:4d:f8:d9:d1:85:7f:3d:ea:67:8e:c8:
4e:e7:06:b7:09:0e:7b:ff:5b:c7:0a:63:b6:d4:48:
9a:f3:71:e0:41:80:28:16:3e:44:93:26:7b:e8:2c:
85:8a:23:1e:4c:1f:35:60:9b:44:57:3a:6e:e4:3d:
22:b1:3b:c8:f4:20:e7:8b:a2:94:5b:33:ca:b7:30:
b6:5a:2d:7f:81:dd:8c:29:fd:9c:43:6e:fc:f1:bb:
30:a8:57:e7:92:3c:e5:69:4b:b6:0d:28:c0:1b:e3:
57:bb:64:83:fc:bd:99:4a:8f:36:f1:d0:3d:67:d5:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:38:08:3B:39:4E:0D:60:64:FD:02:A6:E2:D1:11:A8:E0:18:97:13
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/nTgIOzlODWBk_QKm4tERqOAYlxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.221.0/24
92.119.162.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d6:33:aa:fc:38:e4:38:d6:6d:a0:90:55:65:1e:27:37:90:
31:66:09:db:67:cc:4e:86:99:2b:ca:35:43:08:83:17:f9:f8:
0c:fb:8f:6b:75:d8:71:0c:73:9d:25:6b:b5:17:5a:80:66:e7:
45:68:69:27:f7:ee:f9:94:1b:69:b1:a6:75:d5:ef:bc:3d:a9:
ab:ee:55:97:98:26:fe:26:f5:41:f2:20:46:f4:0c:03:4f:9a:
aa:19:57:4a:7a:98:8b:c0:23:2f:5f:5f:07:c8:df:3c:8b:fb:
50:ea:ba:8a:a5:b8:cb:d6:b4:1b:f6:5a:75:8a:43:20:39:a3:
eb:57:09:29:30:bd:fe:92:13:bc:c1:c5:00:da:31:49:a5:d9:
82:7e:7f:13:83:1b:4e:9a:4b:3d:8c:50:3f:9e:1c:97:7f:da:
d9:bc:1e:eb:dd:8a:07:d3:35:44:9c:d2:dd:26:9d:a7:e5:7c:
c3:2d:59:47:24:d2:2a:4c:a3:8c:74:de:84:c6:b0:12:54:4f:
c1:00:b1:e6:87:69:c0:80:2c:64:fa:e4:59:32:a2:4a:9d:c7:
e8:36:c2:f2:74:96:55:40:a3:7b:12:38:0a:a6:27:2b:b2:92:
eb:4e:88:fd:cc:2c:4a:fb:c3:f4:cb:7b:07:e0:5e:6f:a5:af:
20:53:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:43 2025 by rpki-client