Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/j93BEME5b_K-Zki214QPN4kzqeg.roa
File: j93BEME5b_K-Zki214QPN4kzqeg.roa (raw, json)
Hash identifier: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=
Subject key identifier: 8F:DD:C1:10:C1:39:6F:F2:BE:66:48:B6:D7:84:0F:37:89:33:A9:E8
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0194221F969AC6CA86C0AE619A44A642CBEC
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/j93BEME5b_K-Zki214QPN4kzqeg.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 91.210.166.0/24 maxlen: 24
91.215.152.0/24 maxlen: 24
91.215.153.0/24 maxlen: 24
91.215.154.0/24 maxlen: 24
91.215.155.0/24 maxlen: 24
91.247.36.0/23 maxlen: 23
185.190.250.0/24 maxlen: 24
2001:67c:2f4c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:96:9a:c6:ca:86:c0:ae:61:9a:44:a6:42:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fddc110c1396ff2be6648b6d7840f378933a9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:80:13:01:de:74:53:a7:16:43:ad:f4:40:
c7:53:05:1c:c6:c8:99:35:88:3d:86:f7:91:1d:1a:
11:66:b4:ef:4a:9e:5d:6c:7e:1e:fb:ad:cd:09:7f:
1c:2b:ec:f1:e5:2d:9e:30:48:06:ea:c0:02:97:63:
19:b4:0d:1b:2b:e7:ee:8f:fe:a2:29:16:c4:2c:9b:
df:19:9a:f0:0c:80:23:01:8f:a3:30:97:45:bb:bf:
f8:72:ab:81:ef:90:e9:ad:89:6d:b2:12:a6:be:05:
86:68:be:6c:55:92:9d:7a:93:39:93:f4:29:43:f4:
0c:23:b5:01:c0:d8:8c:f4:85:8e:29:e2:48:3e:19:
bd:e9:a7:64:fa:29:d9:df:28:6d:0e:77:3f:f4:9a:
92:3b:e1:ea:94:14:2e:0e:72:b9:33:0e:4b:59:6f:
da:ea:18:3d:b7:14:71:3a:36:a6:5b:4b:c2:4d:c3:
3c:26:61:3a:b5:e5:ff:26:d3:5a:04:e9:19:4c:31:
9e:79:7c:0d:b1:82:8e:fa:2f:9b:b5:c0:30:60:5c:
33:64:16:11:91:20:f5:a3:c7:a9:8b:e3:8b:8c:fb:
b7:2c:a4:1a:85:d6:78:63:79:1f:25:d8:7d:e7:92:
9c:e6:6b:78:1e:80:47:0d:65:d7:51:d1:4a:de:3a:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DD:C1:10:C1:39:6F:F2:BE:66:48:B6:D7:84:0F:37:89:33:A9:E8
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/j93BEME5b_K-Zki214QPN4kzqeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.166.0/24
91.215.152.0/22
91.247.36.0/23
185.190.250.0/24
IPv6:
2001:67c:2f4c::/48
Signature Algorithm: sha256WithRSAEncryption
9f:02:d7:ba:95:03:cc:b6:b9:aa:2d:66:f3:85:d0:8e:4d:1a:
21:6f:65:4a:99:c5:7c:fd:9f:09:88:1e:82:d2:84:8f:ec:95:
f3:b8:0b:b6:42:be:f5:63:1a:12:5f:0a:91:07:9e:63:d0:db:
95:8b:bc:d2:48:65:ec:23:2b:bf:a0:fa:aa:89:1f:c9:2f:dc:
ec:5f:9c:91:f2:9c:34:a5:3e:07:93:47:69:3c:22:4b:12:1e:
85:5a:9c:63:ce:4f:7f:d4:05:3f:50:83:6e:97:af:55:c7:14:
34:e6:4b:69:aa:5a:bc:5a:19:ad:38:43:68:75:78:7f:70:9b:
70:9b:3d:d8:de:5d:dc:4c:ae:bb:69:46:45:e6:2c:4c:3b:af:
cc:4e:7c:e2:e7:ef:a1:a8:be:c2:f7:a3:fd:21:66:6f:9f:55:
0b:ba:e2:ee:a5:07:b1:67:d0:be:81:d2:28:1b:f9:a5:f8:f0:
33:a9:51:38:83:92:dc:96:5f:87:2b:6a:1c:d4:b0:0a:f2:8e:
f8:57:bc:70:4d:a2:e4:31:77:66:69:4d:e6:44:1d:90:b3:f6:
71:b2:47:d0:5d:c7:5a:e5:83:98:98:4a:3d:ca:ed:6f:f7:71:
66:ed:f3:b2:33:d7:40:8a:b4:03:e7:a6:d4:82:50:7a:7b:a2:
9b:cf:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:17:56 2025 by rpki-client