Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/Xn7HlAmazqZObEY4Svfv4ZbMChM.roa
File: Xn7HlAmazqZObEY4Svfv4ZbMChM.roa (raw, json)
Hash identifier: 900LVbegyuqsxm1Su/VFGub5Wi1DlW68cWbr8g1USwo=
Subject key identifier: 5E:7E:C7:94:09:9A:CE:A6:4E:6C:46:38:4A:F7:EF:E1:96:CC:0A:13
Certificate issuer: /CN=a1020772f628b8fb51f3475136b77feb4b2698be
Certificate serial: 019421441CE34BCFFFC82F3E3A048095B39F
Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/Xn7HlAmazqZObEY4Svfv4ZbMChM.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43566
IP address blocks: 91.199.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1c:e3:4b:cf:ff:c8:2f:3e:3a:04:80:95:b3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e7ec794099acea64e6c46384af7efe196cc0a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:55:5f:b0:b2:ef:a9:60:f8:67:7b:7d:22:
d5:6b:2f:48:a2:67:67:93:78:8f:fb:ed:10:0a:d4:
1b:60:d4:4e:35:f0:8b:2c:0e:c4:ba:56:08:af:99:
5d:7c:44:71:21:2c:fc:3c:0e:c3:7a:74:fb:91:df:
a6:8f:7f:0d:ca:a2:2c:05:70:99:24:98:69:08:37:
29:6d:0f:42:22:e5:af:a9:c0:b9:2a:50:92:6e:69:
92:29:1b:e1:b5:2d:75:f8:69:b1:b8:9b:9c:bd:bb:
d8:7f:8f:15:7b:90:ed:f3:14:df:4d:8f:43:8d:4e:
ce:86:06:87:20:eb:e7:4b:47:3e:0f:d7:81:20:bb:
09:86:8e:dd:56:33:c7:22:98:97:01:0f:26:b0:bf:
7b:eb:0a:ce:74:0d:d3:d4:5d:69:43:a6:77:dc:7e:
fb:5c:37:4b:ce:6b:e8:38:13:73:57:a8:a4:7a:8b:
18:fe:c5:9b:39:f0:74:dc:36:af:b9:fe:2a:09:e6:
52:37:60:83:d1:f8:20:ca:dc:d0:13:de:1e:e2:6b:
05:61:d3:19:69:3d:c4:b6:65:cc:2e:24:15:b0:98:
28:35:57:fc:66:f0:cc:f7:c3:9a:45:2c:fa:ae:d8:
d2:6d:8d:82:51:94:88:89:c7:28:69:50:be:7a:b2:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7E:C7:94:09:9A:CE:A6:4E:6C:46:38:4A:F7:EF:E1:96:CC:0A:13
X509v3 Authority Key Identifier:
keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/Xn7HlAmazqZObEY4Svfv4ZbMChM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.83.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7c:b4:29:fa:78:77:f7:87:9e:b5:4f:fd:c8:41:22:2b:9c:
45:76:0a:5a:d3:48:ff:ea:77:d5:ab:10:6d:aa:5a:fb:47:bf:
f3:f1:39:a0:36:7b:e4:5e:bb:15:86:c3:82:88:91:5a:5d:b9:
af:4e:e7:a4:95:ec:51:a8:e9:6b:8e:c7:8d:c5:01:6a:87:af:
7e:75:09:f5:3a:06:58:e7:64:85:e8:b7:0c:7f:d8:98:be:d3:
2d:25:11:bd:a5:51:78:26:f2:3c:58:b0:00:2d:cc:a5:8d:08:
03:65:80:d5:19:83:15:0f:01:8b:17:4d:6d:5a:54:5b:86:bb:
cb:50:00:94:91:bb:40:10:c3:e0:37:14:33:8f:95:ae:5b:9a:
cb:59:13:e5:4e:77:7b:ee:32:52:6c:e0:9d:d3:5f:8d:f9:ec:
23:e5:fe:80:62:5f:93:7e:81:e0:b0:bf:d4:bf:f2:23:62:e1:
4c:56:e1:22:ee:38:05:b5:c1:09:44:87:f9:89:d3:6a:04:ae:
d5:9d:6d:3a:04:31:67:ce:10:b6:f0:b4:b8:e2:fb:76:0b:5c:
07:d0:c9:ae:e9:49:ed:e7:e4:fb:43:6b:7e:1d:82:d1:2d:35:
6a:2e:05:57:b4:2c:9f:a4:a3:c8:ae:f8:0d:0c:b5:06:db:a4:
c1:8a:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:33 2025 by rpki-client