Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/K4Lbu-PRsMurt2fUpQp-WCgArbs.roa
File: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (raw, json)
Hash identifier: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=
Subject key identifier: 2B:82:DB:BB:E3:D1:B0:CB:AB:B7:67:D4:A5:0A:7E:58:28:00:AD:BB
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 019424458F61983E8AEB1847487C33FFDC8C
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/K4Lbu-PRsMurt2fUpQp-WCgArbs.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.236.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8f:61:98:3e:8a:eb:18:47:48:7c:33:ff:dc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b82dbbbe3d1b0cbabb767d4a50a7e582800adbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:4a:89:30:7b:d1:8d:fa:56:da:a8:68:3d:
fe:93:2c:91:c5:56:0a:d4:cf:88:67:3d:25:ee:55:
b2:06:44:f6:04:41:0a:60:7c:7d:ac:f8:2a:7e:f0:
37:af:9b:36:ed:b7:ea:24:ac:83:08:cc:58:11:f4:
e2:86:6a:85:c7:40:cd:b0:db:13:39:87:9e:37:27:
c6:05:02:a9:95:0a:43:d1:48:0c:3a:67:fd:9c:ea:
08:b6:16:52:46:87:f2:b8:67:ab:41:fe:48:43:26:
25:60:60:55:8e:a1:e2:10:e5:63:ad:5f:24:9b:fc:
93:b6:c9:db:8c:e4:82:6b:a0:4a:b4:ee:ca:2d:81:
b5:9c:31:01:51:29:c7:c8:f8:57:d5:e7:05:5b:54:
b2:b9:94:30:98:6a:52:5d:40:2b:91:b8:8f:8c:58:
19:15:8c:62:1f:0f:28:ea:ce:3f:e1:8f:83:8d:6a:
87:94:26:30:d7:a8:d6:90:f3:b3:c2:40:7d:0d:aa:
aa:ea:09:7f:5a:38:a5:42:18:b8:42:36:71:4c:a8:
3e:ed:37:7e:4e:c2:c2:54:ce:96:88:80:02:07:13:
36:f3:5d:41:59:9e:6c:9b:90:c6:0b:cc:5e:d4:09:
54:06:19:21:e9:44:82:90:70:9a:20:0c:9e:89:e9:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:82:DB:BB:E3:D1:B0:CB:AB:B7:67:D4:A5:0A:7E:58:28:00:AD:BB
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/K4Lbu-PRsMurt2fUpQp-WCgArbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4a:fa:b7:69:a2:15:0c:36:3c:b0:18:1d:08:b0:bd:83:4d:
92:f6:ec:b0:1b:3b:3e:c3:86:b4:e1:17:ce:6c:64:d3:20:5c:
4d:35:ee:7f:2f:99:0e:93:b4:04:a4:ae:1a:74:85:f4:de:cb:
1c:12:dc:9d:6d:b4:27:8c:89:5d:02:45:d0:e8:52:ca:0d:77:
7d:5b:29:ca:ab:8c:33:0e:60:bf:ea:0f:31:66:8d:e1:8e:a1:
c4:aa:c8:e0:1e:cf:9f:ca:5c:f6:cd:74:dc:0a:88:17:e3:a2:
d0:8c:c5:2b:97:2e:73:10:68:05:85:26:69:f5:f5:80:8e:ef:
c7:df:e0:7e:fd:04:08:40:94:c6:3e:05:96:0f:b6:54:96:63:
d5:a8:bf:f7:2a:cb:c7:b3:06:ac:3f:7d:6d:b0:d8:e1:28:99:
42:05:52:86:87:27:71:e8:0f:bc:9b:05:58:1c:64:96:0a:28:
61:ca:1b:a4:62:2e:31:a7:f8:45:8c:9c:8a:b4:30:46:be:3a:
0d:5c:d5:7c:08:7e:be:ed:03:47:b4:70:42:79:c5:19:e2:7c:
4c:46:e9:62:2d:22:b7:c7:ea:ac:dd:04:38:ac:53:3f:09:8a:
8b:e6:35:5e:96:02:06:93:8a:59:26:d8:b9:26:1a:a8:f3:0a:
84:bf:57:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:23:41 2025 by rpki-client