Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/M4-LdIp_MqHF6qgOq3JN4pLRykA.roa
File: M4-LdIp_MqHF6qgOq3JN4pLRykA.roa (raw, json)
Hash identifier: zv5zfgWQAHHHUjh71ZARM/6yiSaQ31Ra+x9XeFztt3g=
Subject key identifier: 33:8F:8B:74:8A:7F:32:A1:C5:EA:A8:0E:AB:72:4D:E2:92:D1:CA:40
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0194221FFDF9129A6B7EADC1C7EB4C5ADB7B
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/M4-LdIp_MqHF6qgOq3JN4pLRykA.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43444
IP address blocks: 91.132.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fd:f9:12:9a:6b:7e:ad:c1:c7:eb:4c:5a:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=338f8b748a7f32a1c5eaa80eab724de292d1ca40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:45:06:f7:63:c0:ba:99:6e:2d:d3:fe:04:
40:00:93:7c:03:f9:5e:69:87:59:7c:23:05:c0:ec:
68:7e:d1:0f:5e:e6:29:06:ca:cc:47:2f:4a:a7:f5:
2b:59:8d:bf:c8:04:7e:4f:10:d0:85:1d:4e:61:2c:
ec:0d:48:b5:96:47:c0:f9:1f:dd:80:09:ab:56:e9:
ca:52:2e:fe:ee:17:b8:1c:3c:96:de:d5:f0:82:39:
fd:c1:b8:8b:43:ce:77:45:82:ed:e4:27:0d:a1:5f:
5b:1f:29:4a:35:bc:38:ae:ec:28:3b:d8:16:01:7c:
2b:0e:3c:43:d2:8c:97:88:79:ba:77:52:ad:ff:8b:
49:e9:6f:a8:6d:80:ee:dc:34:5d:b7:d6:e1:d9:33:
7f:d1:0a:48:bf:5f:34:b6:a9:b6:2d:8c:94:b9:51:
0d:f3:92:17:c4:69:fc:ab:ee:15:72:b5:6b:23:3a:
8a:a5:2f:ca:8c:21:13:fa:2d:08:20:ed:31:9c:32:
55:10:49:b9:25:ec:27:f2:3a:55:94:57:79:2e:d9:
12:44:9e:9a:8f:47:ee:ff:26:df:38:5b:e5:55:60:
7b:e9:08:ed:23:49:02:69:dc:15:d9:19:13:2f:be:
bb:e9:65:7b:a8:8a:42:45:b4:c9:5a:47:37:a7:df:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:8B:74:8A:7F:32:A1:C5:EA:A8:0E:AB:72:4D:E2:92:D1:CA:40
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/M4-LdIp_MqHF6qgOq3JN4pLRykA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.198.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f7:00:40:56:39:6c:60:10:e5:ed:c6:61:d9:b5:c0:85:89:
aa:de:5f:aa:6b:32:9a:62:45:fa:1a:03:f7:dd:1b:77:9a:35:
fb:d2:2d:92:03:77:3d:3a:af:1f:da:eb:e7:df:6c:af:05:e0:
59:89:1d:4d:f5:fa:2d:f5:2e:b8:c8:41:54:d7:44:54:5a:56:
22:88:8e:77:4c:3d:1b:84:70:64:c1:aa:23:5a:00:b3:20:12:
56:99:28:44:6e:9d:d7:53:1e:c4:d1:80:ea:37:d4:a7:22:99:
14:18:c3:f6:40:21:97:22:ee:ff:a0:46:1a:8d:26:ec:2f:52:
cd:7a:1c:aa:bb:82:17:00:2f:20:5f:3a:f2:c1:5a:76:c3:11:
3f:9a:52:86:e7:e5:8b:4e:c5:88:be:c7:97:05:1a:d3:47:67:
ee:a7:71:bd:ca:05:fa:cc:b1:e5:17:0a:f3:dc:84:cf:7e:f1:
2c:ae:5c:d6:d3:28:67:5a:37:fc:d5:43:1c:f1:a4:b9:19:d6:
57:8c:b3:55:26:d5:ce:ef:fb:72:7b:3b:1f:60:79:f5:db:59:
57:3e:63:37:72:c4:85:cf:c0:0b:eb:37:e3:d2:4d:92:7e:a5:
52:d6:a4:e6:05:5d:b6:f7:77:30:0a:1d:ab:36:e1:27:f9:40:
da:d0:3d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:04:37 2025 by rpki-client