Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/RmKCpldDj9gxKffsbiNvZSE7-UA.roa
File: RmKCpldDj9gxKffsbiNvZSE7-UA.roa (raw, json)
Hash identifier: iDmHhF/9qHUEZvvKH38pZKwG3I+mnXGsdU7Q5ORUe68=
Subject key identifier: 46:62:82:A6:57:43:8F:D8:31:29:F7:EC:6E:23:6F:65:21:3B:F9:40
Certificate issuer: /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial: 019421B22EEB853A0324F130BD7950C8D1DE
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/RmKCpldDj9gxKffsbiNvZSE7-UA.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31077
IP address blocks: 91.192.184.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2e:eb:85:3a:03:24:f1:30:bd:79:50:c8:d1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=466282a657438fd83129f7ec6e236f65213bf940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:76:07:ff:d6:4d:be:e0:98:ff:94:e2:b4:
41:21:df:da:6c:9b:0f:43:3e:89:92:93:d3:c3:61:
05:95:a0:fb:0f:4e:b2:7b:59:e8:b8:1d:7d:0b:64:
1b:08:47:fb:c7:a6:2c:c0:f0:29:2e:53:53:6c:1b:
ed:68:e0:22:67:d1:1e:a5:36:3c:bc:e5:77:18:ca:
09:51:a9:19:ed:f1:ca:75:d7:1f:ef:10:03:34:60:
ba:c7:dd:60:94:8a:03:da:b2:da:81:fa:4e:b5:29:
3d:37:e4:e4:13:ab:d6:e5:af:75:2e:36:f9:13:90:
b0:c8:ba:83:ba:38:45:ec:27:d1:a6:6e:45:47:8b:
14:b7:ee:f4:ea:d8:94:df:72:1b:65:d2:88:db:76:
ed:bb:6f:95:1b:6c:79:47:c5:9a:4d:c3:ac:e7:5e:
75:fd:a3:ae:b9:40:ec:f7:a9:46:7a:b6:0f:a2:17:
d7:07:ca:c4:d7:99:ac:f1:e7:7f:98:08:f0:54:2a:
85:eb:90:45:dc:95:46:d3:f3:2c:8d:88:2d:3f:56:
d8:9d:d2:9c:41:0e:2b:9b:3a:a7:4a:42:99:06:68:
1a:27:6a:7c:9a:9c:b0:d1:9d:2c:04:ed:d1:4d:e9:
10:bb:60:bb:b7:93:08:7e:08:f4:07:53:99:f7:5e:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:62:82:A6:57:43:8F:D8:31:29:F7:EC:6E:23:6F:65:21:3B:F9:40
X509v3 Authority Key Identifier:
keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/RmKCpldDj9gxKffsbiNvZSE7-UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:5b:ab:5e:72:fe:d0:29:e6:2c:c3:07:09:17:76:d7:7d:69:
b6:d7:18:a6:3c:15:c7:99:b9:98:13:ce:7d:7a:d1:8f:e2:01:
62:29:8d:59:b1:db:ec:c6:42:ed:b2:47:60:8f:6e:8d:0e:57:
5d:df:1a:7c:b5:33:03:52:30:e9:8d:ec:46:7d:81:38:f8:4d:
7d:c2:b5:0a:21:b5:aa:5c:08:8d:00:f9:c5:f7:95:51:03:f9:
91:07:ca:dc:d9:f3:5e:b0:25:12:1b:f6:74:9a:db:08:95:24:
e9:d0:22:4b:16:ff:ff:2a:37:81:15:3d:13:12:d7:fe:d8:be:
ef:1a:c1:58:af:93:18:d6:7f:15:37:41:59:0e:f7:22:ec:18:
58:f8:d3:04:55:99:40:6d:f1:b0:1b:b1:e4:80:6b:a8:5a:73:
00:50:1f:36:c5:52:b3:b5:79:18:a5:52:cc:db:08:27:e5:a3:
05:52:e8:84:7c:70:5c:67:f7:23:5a:fc:06:6a:70:13:be:be:
d2:20:00:40:7a:cd:3f:5e:42:7f:5a:2c:4d:b4:65:84:05:96:
0f:5e:25:1d:54:c9:d9:f9:99:3f:1e:93:0e:23:57:eb:7a:f1:
b9:b8:5f:b5:04:4f:8c:f2:fd:e0:7d:05:12:a3:72:9a:08:16:
8b:50:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:57:30 2025 by rpki-client