Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/UXTqM7OJZrCNMf_WXfbtOToQRAk.roa
File: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (raw, json)
Hash identifier: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=
Subject key identifier: 51:74:EA:33:B3:89:66:B0:8D:31:FF:D6:5D:F6:ED:39:3A:10:44:09
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 019426D9B2C2A024554228DDADDF853C1BC5
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/UXTqM7OJZrCNMf_WXfbtOToQRAk.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 91.207.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b2:c2:a0:24:55:42:28:dd:ad:df:85:3c:1b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5174ea33b38966b08d31ffd65df6ed393a104409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:50:38:21:c1:f0:f2:f3:24:19:8a:b9:08:
e2:6f:2a:96:00:dc:aa:68:20:84:98:fa:af:5e:58:
a5:9a:bd:85:f3:b9:9d:95:a8:66:fa:c2:51:1b:fa:
c7:8a:8e:f2:b0:d8:e0:fc:bc:2f:12:b2:28:ae:13:
ed:eb:13:4f:2a:ba:fc:5a:b4:cd:db:ec:aa:85:36:
6e:9b:07:fc:02:1c:e3:17:af:08:67:1b:98:54:04:
49:c3:5c:02:a5:30:a8:8c:97:75:d9:0a:61:f7:85:
ec:56:fa:f7:02:ad:53:fc:50:05:76:11:54:75:91:
a6:5d:4d:50:09:fc:35:b2:a3:7c:9c:d4:a1:c5:c7:
0d:7b:4a:31:47:37:8c:38:c2:33:80:b5:c7:cb:84:
aa:03:bd:79:15:67:d8:38:ca:e1:b0:a9:21:e8:3a:
88:eb:03:c7:33:ce:ba:97:61:e8:5b:d4:e1:e9:27:
b7:75:be:a7:bb:05:1c:0d:c5:cd:5a:91:f0:ef:ae:
c0:c4:80:e4:57:68:b5:76:45:cf:7c:2f:d0:fc:a1:
bc:fc:e7:fe:29:b3:82:4e:b2:e2:9b:cc:20:59:3b:
13:73:12:97:b9:76:52:60:a9:e0:30:83:56:f4:28:
ac:f3:f3:0b:3f:87:3f:f5:1c:4e:a2:5e:55:94:f3:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:EA:33:B3:89:66:B0:8D:31:FF:D6:5D:F6:ED:39:3A:10:44:09
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/UXTqM7OJZrCNMf_WXfbtOToQRAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.116.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bc:62:a0:06:ce:57:97:a8:d2:c5:12:a6:99:bf:b0:be:e8:
cc:79:52:17:9e:bd:f5:89:20:26:9b:a2:ef:a4:76:be:51:8b:
af:b1:ca:08:26:8d:b6:56:df:6f:76:0c:d8:b5:d6:04:dc:08:
be:5a:1f:55:ac:23:5f:c9:48:30:2b:d3:73:ea:09:3a:c2:52:
fa:5b:e2:23:66:dd:65:7d:2d:71:b6:78:eb:af:67:90:5c:d5:
42:5e:cb:08:d1:a1:8f:a7:07:25:08:37:d0:f0:e5:d9:16:78:
ed:db:bd:71:89:5d:c4:18:0c:bb:83:ee:83:f4:0f:e3:30:77:
18:2e:e5:25:c1:7c:b8:4b:9f:b7:63:ec:32:fc:7c:1c:f3:1d:
7d:0f:7a:49:25:f2:b9:a0:a7:91:f5:dc:a9:6b:84:f3:9e:0f:
aa:6b:93:65:ca:95:75:1f:03:b6:0a:d2:c2:03:58:7e:35:2d:
e6:3c:28:eb:50:27:40:d3:1d:84:47:5c:a5:f4:b4:11:3b:70:
eb:55:10:f6:cf:90:94:b5:2b:8e:0d:01:73:0d:55:cf:53:e0:
0c:bd:87:70:a1:71:09:a4:73:5a:79:c9:15:39:43:38:c0:a7:
f3:f8:4a:f0:20:5e:89:8c:31:ac:b4:d0:f9:a5:dc:8f:f0:6d:
ff:ee:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:40 2025 by rpki-client