Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa
File: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (raw, json)
Hash identifier: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=
Subject key identifier: 1F:D6:23:E9:7A:DF:61:58:AA:3B:2E:57:E9:57:94:64:94:E2:E6:D2
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0194221FA40C5B00CE58F2F3C1FDD5B3D04E
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34235
IP address blocks: 5.179.192.0/21 maxlen: 21
91.223.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a4:0c:5b:00:ce:58:f2:f3:c1:fd:d5:b3:d0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd623e97adf6158aa3b2e57e957946494e2e6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:35:f9:f3:cd:0a:ce:db:18:c1:4f:74:8b:
5d:44:4f:92:e9:cc:b9:a8:37:1b:0b:76:67:eb:9c:
c0:f4:8b:94:00:35:b9:50:73:d9:42:d4:d2:67:98:
e3:d7:e2:8d:94:22:49:31:12:a0:b5:41:93:4f:28:
7e:55:36:fa:69:33:d0:b1:2f:6e:df:f1:49:90:7c:
8d:8f:15:5c:ea:3f:62:53:41:ab:06:e2:92:03:50:
df:ef:f4:1d:59:0a:ad:34:64:f1:34:00:e1:f4:3b:
ef:bf:12:7e:c8:05:76:f0:0c:c4:fe:d5:bb:ab:ee:
83:b7:91:75:15:2d:5a:86:08:de:6f:ed:2d:ef:df:
15:83:06:ee:99:ce:14:66:9d:86:86:87:41:a4:08:
4a:e7:c7:07:5f:ed:36:9c:01:16:5a:84:c4:60:71:
3d:b4:9b:1d:21:2e:10:bf:ae:36:3a:24:b2:7f:34:
55:d0:5e:27:d1:e6:8c:38:d0:a1:29:ba:12:15:09:
c2:06:59:05:54:89:c0:d0:99:1f:97:2d:90:1c:80:
e4:0a:98:eb:55:28:c4:9b:08:96:bf:7a:a9:42:80:
ed:96:38:37:f0:9f:bc:e2:ab:f6:02:1b:68:c0:a5:
87:c1:f8:09:9f:be:e5:fb:48:a0:24:00:4e:94:37:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:23:E9:7A:DF:61:58:AA:3B:2E:57:E9:57:94:64:94:E2:E6:D2
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.192.0/21
91.223.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b4:01:68:05:cf:72:b9:70:66:c9:5e:e2:2c:73:b2:89:f6:
bc:79:3a:c3:8c:1c:fa:c8:a4:23:20:c9:41:e6:da:cd:bd:a6:
9f:d7:43:0c:ac:4b:89:1a:99:9d:68:26:7f:8e:46:7e:68:a0:
73:d2:dc:2c:2e:3c:b7:5e:02:61:30:dd:5d:d2:59:1d:27:89:
47:c9:85:e5:f9:26:4d:82:18:1c:f8:6a:cc:b0:2b:31:e8:38:
5e:73:7e:50:14:90:b9:09:21:dc:bc:80:e9:56:e7:13:01:92:
a8:b9:72:fd:69:9e:50:c3:3b:27:df:2a:2e:98:a2:16:f8:f6:
5c:0a:07:e2:e5:fc:ef:04:e0:ca:93:44:55:14:be:36:22:70:
37:fc:65:c5:7b:f9:c0:07:3e:91:7e:98:32:2f:ae:f3:af:f9:
e5:d5:cf:7e:62:e8:8b:33:17:bb:bb:70:e1:20:30:94:b6:ef:
34:ba:ad:77:36:34:8c:e9:e8:c1:f3:35:94:b1:b7:08:c5:89:
87:27:7b:12:c0:7f:08:56:7b:03:6a:af:84:cd:03:f2:30:a8:
7d:20:1d:59:f5:e6:19:44:ea:ab:f2:15:02:ae:a5:7c:33:33:
49:60:d3:8d:09:8a:ea:3b:d4:bf:48:74:ad:31:69:2a:01:33:
1c:20:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:56 2025 by rpki-client