Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/aElB0_w7iL_LUpRU29R2Y75Dhrc.roa
File: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (raw, json)
Hash identifier: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=
Subject key identifier: 68:49:41:D3:FC:3B:88:BF:CB:52:94:54:DB:D4:76:63:BE:43:86:B7
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 019426D9A688545C883F118B9F28C6DCE174
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/aElB0_w7iL_LUpRU29R2Y75Dhrc.roa
Signing time: Thu 02 Jan 2025 11:49:45 +0000
ROA not before: Thu 02 Jan 2025 11:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198559
IP address blocks: 91.241.30.0/24 maxlen: 24
2001:67c:2a58::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a6:88:54:5c:88:3f:11:8b:9f:28:c6:dc:e1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=684941d3fc3b88bfcb529454dbd47663be4386b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:6f:b1:b9:49:19:fd:9c:12:e3:24:d2:7a:
f1:a7:94:78:f6:dc:10:6e:d7:41:14:4d:7a:0c:89:
bf:47:13:21:2e:24:a2:60:86:32:ff:4a:30:97:de:
9a:73:f7:13:e4:0f:85:09:17:5f:a1:6c:ba:1b:14:
28:5e:41:cf:7c:69:5f:17:32:7f:c3:54:23:3d:1e:
51:6e:7e:d6:00:ac:fc:ac:a4:b9:a9:dd:65:a1:95:
fa:88:cf:8d:97:0b:8f:cb:ae:97:27:9a:95:75:2a:
1c:a9:6e:35:4d:95:60:cf:58:a2:b8:21:12:59:bd:
86:9d:4d:fb:49:30:07:75:f4:cc:92:10:aa:7e:f2:
ec:c0:d3:9f:96:fb:25:a7:25:b4:82:15:8c:cf:61:
0a:c0:31:a2:c2:92:3b:7a:ba:79:08:b7:47:c5:57:
94:1a:6d:f5:cb:09:4c:60:3f:72:c9:08:d0:87:68:
a3:43:e9:db:dc:53:cc:3c:79:73:ba:d3:40:df:7d:
a0:f4:9d:52:fa:e8:87:6e:d6:36:45:da:c3:ed:92:
48:bb:f7:c8:7c:f2:07:3c:fb:eb:07:43:19:be:c4:
21:c5:85:04:b0:c8:1b:40:74:cd:41:0b:33:85:a0:
dc:7d:2f:c4:ce:09:84:b2:4c:ee:b7:6a:7d:d1:63:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:49:41:D3:FC:3B:88:BF:CB:52:94:54:DB:D4:76:63:BE:43:86:B7
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/aElB0_w7iL_LUpRU29R2Y75Dhrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.30.0/24
IPv6:
2001:67c:2a58::/48
Signature Algorithm: sha256WithRSAEncryption
83:cf:d9:44:45:c5:b7:8e:c6:cf:81:a3:5b:73:39:dd:4a:a7:
2c:03:14:f9:4b:4f:ae:06:5b:26:ee:68:09:e9:fc:f8:14:fd:
04:1c:0e:48:e1:a4:c7:fa:36:55:6d:04:cb:1f:5d:0a:a6:d3:
e6:8a:00:04:83:cf:db:61:64:fc:5e:10:40:ec:c5:96:cd:20:
2a:58:cb:1e:ca:5d:c8:bb:93:12:58:57:f1:04:7e:97:8a:f9:
ec:27:5e:2c:f8:f6:d9:4a:5f:85:81:d0:80:7e:1f:f1:2c:79:
9f:8c:c1:e1:82:70:d3:9e:43:1f:b9:9b:8a:af:aa:ba:0c:48:
77:58:05:d3:f1:d8:d2:1b:93:08:3a:9e:cc:06:b5:19:5d:80:
4d:41:7c:56:17:23:8e:59:f2:1c:e2:cf:1f:71:5d:3a:4d:91:
ff:1e:11:2d:1a:88:3e:9c:a7:3a:13:05:d9:37:58:41:2b:28:
37:4d:26:29:f5:ac:3d:30:c6:93:e3:a8:a7:c9:45:49:1f:cd:
9e:ec:a5:58:c8:79:e7:3f:de:9d:9b:b2:7a:81:b9:1a:b5:3a:
dd:68:f3:f2:3c:d2:ec:98:58:86:bf:ca:dd:e2:af:5e:1c:39:
a8:e1:ce:bb:02:68:b7:c1:96:87:ab:dd:72:c2:4a:17:42:ac:
7b:55:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:51 2025 by rpki-client