Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/uxtuL63qPRDpKVk1ikR7XA0jVWo.roa
File: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (raw, json)
Hash identifier: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=
Subject key identifier: BB:1B:6E:2F:AD:EA:3D:10:E9:29:59:35:8A:44:7B:5C:0D:23:55:6A
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 0194221F8AE9D53C809B49862EF74F2A300F
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/uxtuL63qPRDpKVk1ikR7XA0jVWo.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 91.240.185.0/24 maxlen: 24
91.240.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8a:e9:d5:3c:80:9b:49:86:2e:f7:4f:2a:30:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb1b6e2fadea3d10e92959358a447b5c0d23556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:04:44:41:6e:ed:7c:69:66:cb:55:c6:1f:
87:90:f7:cd:ef:ae:d7:57:bc:70:9e:d2:2b:85:e5:
6c:d0:f8:97:e6:f3:95:35:dd:4b:39:6f:fc:cf:f0:
8a:70:cc:79:d2:fa:86:89:30:ba:3f:ce:f5:f7:32:
8c:4f:1d:92:13:72:48:86:a7:59:17:6e:55:d4:25:
2e:89:a3:ae:f1:d9:74:ec:e9:02:9e:f8:c5:80:fb:
82:dc:b0:c9:62:e4:8a:21:d1:ea:37:e1:39:45:fb:
ad:6e:89:ee:6f:98:b8:14:17:a2:36:56:be:3c:1a:
65:ec:45:26:95:ab:5c:1c:ca:7f:fb:73:e9:23:92:
2f:56:fd:4c:46:56:f5:79:98:26:e6:95:66:1c:53:
35:2a:ad:4c:eb:4c:79:f6:7e:44:81:0c:2a:56:db:
14:c7:f5:41:ca:44:b6:b1:2a:c8:08:37:6c:3c:38:
f5:2d:12:d7:bd:4b:60:82:b8:24:70:b8:6e:28:ed:
17:e2:01:a2:d4:e3:75:df:59:57:1f:c8:70:8b:d1:
47:3e:25:55:17:10:59:d3:5f:47:c5:b9:be:2f:e3:
bc:72:fa:4f:7c:95:bd:53:9e:82:a6:13:1f:08:a8:
a7:b7:de:19:89:70:9d:7d:38:70:f8:c4:ee:7b:68:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1B:6E:2F:AD:EA:3D:10:E9:29:59:35:8A:44:7B:5C:0D:23:55:6A
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/uxtuL63qPRDpKVk1ikR7XA0jVWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.185.0-91.240.187.255
Signature Algorithm: sha256WithRSAEncryption
8b:07:f3:c4:61:19:82:e1:38:4d:cc:76:e8:67:4f:87:52:3a:
5e:09:f6:4a:29:f3:75:4a:ba:7c:70:e5:18:23:80:76:41:a0:
f6:55:37:83:56:a6:a2:b9:d7:4b:44:5a:c1:3b:37:d6:a1:56:
ff:23:7a:03:0c:35:e4:d1:33:6f:03:71:08:cc:fb:0e:8e:24:
99:77:ea:cd:ff:81:4c:3a:04:0a:fb:59:3e:35:42:0e:08:80:
33:01:c6:73:5e:2d:ca:f7:2c:63:33:68:09:87:8c:fe:eb:c9:
6d:3a:3d:ae:eb:b3:1f:61:d7:74:ea:11:5e:f2:93:a8:b3:5f:
c7:aa:5d:de:af:9c:27:5d:94:fa:3a:a0:e5:e4:a7:73:63:10:
4e:c9:19:53:64:35:fc:00:0b:92:7f:d8:8d:5f:d4:56:24:a1:
a2:49:e0:30:74:ec:91:3a:95:43:72:24:c2:ce:82:bf:36:b8:
b2:d8:b6:b2:74:a4:85:c8:34:33:c3:f8:2a:6e:88:50:90:a3:
5b:71:91:bc:94:a1:6f:b3:83:ab:43:93:14:c6:4e:bc:c9:f8:
76:be:76:83:7f:51:52:6a:da:37:0c:20:c4:5b:3d:19:48:e4:
9d:a6:85:50:2f:9b:c6:b0:09:77:b7:a5:3e:b3:30:f9:8f:ed:
de:af:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:01:06 2025 by rpki-client