Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/IVdjVoN4btCTyMYmCO02k9GntBE.roa
File: IVdjVoN4btCTyMYmCO02k9GntBE.roa (raw, json)
Hash identifier: a5NdeKrzfcEUiEbmiEcDr8auHl1ryaiEhNrV1p0CNFw=
Subject key identifier: 21:57:63:56:83:78:6E:D0:93:C8:C6:26:08:ED:36:93:D1:A7:B4:11
Certificate issuer: /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial: 0194266A42896429835637D16C71CAC830B9
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/IVdjVoN4btCTyMYmCO02k9GntBE.roa
Signing time: Thu 02 Jan 2025 09:48:05 +0000
ROA not before: Thu 02 Jan 2025 09:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51729
IP address blocks: 91.220.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:42:89:64:29:83:56:37:d1:6c:71:ca:c8:30:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Validity
Not Before: Jan 2 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2157635683786ed093c8c62608ed3693d1a7b411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:d7:94:78:0d:35:80:f4:5b:88:6c:b5:20:
13:3f:4d:08:e6:81:c4:46:1d:1d:14:af:de:cb:02:
eb:0c:c8:c8:3a:54:db:d6:bc:5d:05:8e:2c:2a:09:
be:d1:a1:62:cb:9a:9f:05:cf:97:89:84:ad:91:d8:
e9:62:87:3b:d3:f7:63:f9:af:b9:f5:c7:4d:5a:8f:
0b:b7:35:03:c1:5a:8a:06:da:ca:34:db:8f:b1:a2:
5b:07:7a:8d:99:5a:7e:8b:02:6c:0b:f8:d1:08:02:
d1:09:8d:a8:e9:04:62:50:87:a9:c4:84:b9:26:a6:
3f:f3:d5:69:41:4b:51:9f:14:8f:68:78:e8:1e:b4:
00:bc:38:05:b3:f6:f9:4e:9f:c0:a7:4b:66:c6:57:
c0:9e:81:39:08:26:b7:1a:64:1c:44:68:33:2b:46:
0b:25:25:35:50:d2:b3:67:d2:28:57:2a:e1:75:49:
f9:ff:2f:af:c9:a5:28:f3:47:0d:2d:58:8f:61:d1:
09:6c:44:3b:48:d1:6b:1d:9b:2d:51:df:c9:df:68:
08:6f:df:c5:d0:eb:b9:f0:dd:a7:48:29:6b:c0:63:
4a:66:82:a0:a0:83:d0:c9:e8:bd:19:27:11:34:6f:
7f:b8:56:36:e2:3f:b2:ef:46:a2:b9:8f:1e:bf:90:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:57:63:56:83:78:6E:D0:93:C8:C6:26:08:ED:36:93:D1:A7:B4:11
X509v3 Authority Key Identifier:
keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/IVdjVoN4btCTyMYmCO02k9GntBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.65.0/24
Signature Algorithm: sha256WithRSAEncryption
48:38:2d:26:6b:2d:2f:49:04:75:7a:07:7d:fb:41:79:2c:7e:
bd:02:7f:27:e3:59:e8:46:b6:f3:29:0e:b4:c3:f0:00:d7:f7:
1d:7b:1e:67:1f:c9:49:c7:84:56:ae:88:b6:65:43:44:e8:8d:
27:38:2b:05:e1:62:28:1d:65:de:59:c9:19:2f:e4:58:a7:5e:
35:90:75:e4:c7:a7:d0:a4:6b:ca:a7:69:81:f1:31:a7:93:30:
48:8e:9a:b2:df:df:e3:35:40:ea:3e:42:4f:36:25:5a:c6:17:
62:79:a2:5c:93:2a:cf:90:b1:88:54:a2:54:eb:3a:36:b1:53:
fd:74:c7:2a:f9:3e:46:86:1b:72:a1:59:35:23:12:07:17:b0:
00:cb:e6:e2:0b:9c:3a:b4:8c:fa:66:6f:44:9a:55:11:36:68:
4f:c1:9a:95:5b:be:59:df:24:1a:36:11:ef:99:72:6c:e1:79:
75:01:34:e3:09:de:10:b7:dd:a7:35:b9:82:af:2e:ac:7c:8c:
e2:32:e0:b8:79:7a:b5:07:eb:ba:1f:07:6c:84:3b:3a:53:72:
27:bf:1f:7a:9f:f9:39:f5:4e:a7:41:ae:ab:23:21:b9:6b:74:
e1:59:5a:d6:c9:60:61:89:ab:9c:61:0d:c0:ec:cc:ba:07:af:
32:b8:7c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:37 2025 by rpki-client