Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/_BsLA-Yq0byQhwlqjwrfokOt_ao.roa
File: _BsLA-Yq0byQhwlqjwrfokOt_ao.roa (raw, json)
Hash identifier: nUVtATfYPG2WeBzHlW5fiB+hmlpSz5V9uTVR1MUQR8o=
Subject key identifier: FC:1B:0B:03:E6:2A:D1:BC:90:87:09:6A:8F:0A:DF:A2:43:AD:FD:AA
Certificate issuer: /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial: 019425FC24CEDFDBC0C356984F066AD1D2C9
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/_BsLA-Yq0byQhwlqjwrfokOt_ao.roa
Signing time: Thu 02 Jan 2025 07:47:48 +0000
ROA not before: Thu 02 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48275
IP address blocks: 91.207.180.0/24 maxlen: 32
91.207.181.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:24:ce:df:db:c0:c3:56:98:4f:06:6a:d1:d2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Validity
Not Before: Jan 2 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc1b0b03e62ad1bc9087096a8f0adfa243adfdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:5e:a6:e3:a5:7f:57:a1:f1:fb:69:b4:0d:
3a:94:e0:88:4e:0a:93:33:2b:4f:d7:b4:be:3d:5b:
b5:4d:88:47:75:c8:35:50:bb:d7:fe:df:19:2a:1e:
ce:26:85:d4:a8:47:23:22:67:34:ae:ff:19:dd:f4:
4b:99:ec:71:15:27:d6:7f:2d:14:29:35:38:00:7f:
07:c9:cb:71:0d:3a:e5:dd:44:93:8a:d1:af:26:28:
c6:88:fb:da:38:1e:07:3a:0f:6e:9b:6d:14:63:0e:
40:bd:74:f6:20:98:09:fa:be:88:97:be:a5:3b:28:
1b:c5:fc:0e:21:6f:ee:2e:0d:f5:39:ce:e9:32:b5:
a7:0a:93:6a:31:e9:51:95:e0:49:39:5d:fc:40:b1:
5d:47:03:fa:ff:86:f4:07:c7:ce:b5:c9:1a:2c:e8:
35:8d:54:43:a7:05:89:d2:f6:32:0c:f0:4b:a6:e2:
f0:b7:d6:dc:54:3a:a8:24:ff:46:9d:b9:f5:8d:97:
fc:9d:8a:33:97:ce:76:d2:65:1f:f3:15:9c:55:76:
fd:35:1f:76:84:dc:7c:87:a6:3a:6c:b4:2e:92:78:
39:00:7e:3b:e3:4e:84:10:e2:e4:fd:13:8c:c9:f1:
95:34:1e:1b:18:8b:1d:f3:a2:95:16:2a:db:26:11:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1B:0B:03:E6:2A:D1:BC:90:87:09:6A:8F:0A:DF:A2:43:AD:FD:AA
X509v3 Authority Key Identifier:
keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/_BsLA-Yq0byQhwlqjwrfokOt_ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.180.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:73:73:99:74:72:57:bf:46:01:38:41:36:f5:7b:5f:d0:99:
ee:29:a0:8a:d0:28:37:ab:7b:27:c8:1e:9e:d4:2c:0a:f9:ba:
4e:82:d4:2b:db:d2:0a:92:5a:e6:df:27:25:7a:1c:a7:61:bf:
87:88:92:fb:3a:35:62:3d:2d:90:84:c9:dc:5f:6c:d5:de:97:
39:51:6c:38:20:52:0a:90:d0:c5:56:ee:0c:d2:33:4b:12:8e:
82:41:7e:2c:4d:e3:50:b9:58:62:95:79:8a:5c:13:df:b5:24:
6a:11:86:80:ff:39:26:03:e7:04:bc:e0:c6:d3:e0:c0:b5:60:
1d:d6:66:a0:6c:20:6c:4c:c5:27:61:18:86:00:fb:96:f4:5c:
11:86:3e:80:3c:e1:49:ac:e2:65:26:97:4b:66:7a:0f:02:78:
bf:2c:05:e0:67:e8:5a:61:8e:75:3a:4b:79:af:81:b3:9d:cd:
69:3d:9e:47:42:fd:3f:e8:67:e9:0d:2e:c8:41:63:29:7e:c9:
88:70:22:45:34:7e:83:18:26:2d:b6:7e:3e:b9:fd:d4:64:f3:
c4:bd:22:e6:4e:08:b8:00:0a:22:6f:bd:f2:be:dd:43:3e:d6:
1f:e6:2d:93:fe:38:84:cd:8d:36:24:92:14:3c:dc:32:c5:23:
d3:89:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:04 2025 by rpki-client