Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/y6zUASqLMYC9vOre4NE5oaCGRIY.roa
File: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (raw, json)
Hash identifier: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=
Subject key identifier: CB:AC:D4:01:2A:8B:31:80:BD:BC:EA:DE:E0:D1:39:A1:A0:86:44:86
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 019424B3FFF9B1FCDD669A6DE4FE6FCECE1D
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/y6zUASqLMYC9vOre4NE5oaCGRIY.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197600
IP address blocks: 91.223.160.0/24 maxlen: 24
2001:678:7b8::/48 maxlen: 48
2001:678:7bc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ff:f9:b1:fc:dd:66:9a:6d:e4:fe:6f:ce:ce:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbacd4012a8b3180bdbceadee0d139a1a0864486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:eb:05:55:db:08:e0:06:bf:9f:07:9f:30:
82:f1:df:f9:5d:95:14:71:78:61:b3:33:a4:fa:bd:
6b:25:24:bc:e8:fb:63:cf:58:f9:9c:47:87:d6:5d:
d2:54:bf:dd:29:a7:36:b5:d5:ad:ab:40:17:25:c6:
2b:57:d2:f4:5e:cf:67:70:98:c4:8a:8c:34:fd:92:
91:05:e2:24:56:78:01:20:21:d2:ae:95:99:6a:09:
41:6e:7d:4f:a2:45:ab:5c:de:2e:d7:fa:74:13:df:
5f:fb:07:13:e4:b3:49:85:3b:4e:97:44:b1:a3:04:
86:89:7e:56:3b:46:de:4c:21:af:1f:39:38:cd:ca:
d3:ac:6f:f9:5a:a7:a3:aa:3c:d2:61:bb:6c:c1:d5:
46:2b:e2:1a:38:be:5c:fc:85:5b:8c:37:bc:d7:08:
0b:5f:69:97:fb:87:72:f0:60:e8:e0:8d:c9:ca:eb:
78:4e:c4:a6:9b:1b:50:04:08:2d:3f:e2:43:92:e2:
16:a4:90:ca:36:92:ec:0a:44:76:03:2b:c3:78:d1:
03:cd:8d:fd:04:8a:54:6c:9b:2f:a5:6b:1f:1d:07:
1c:e9:dd:89:63:26:51:34:95:23:ff:3a:59:25:b2:
c0:88:35:6e:28:93:7b:0c:dd:d3:4e:fe:ce:1e:25:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:D4:01:2A:8B:31:80:BD:BC:EA:DE:E0:D1:39:A1:A0:86:44:86
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/y6zUASqLMYC9vOre4NE5oaCGRIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.160.0/24
IPv6:
2001:678:7b8::/48
2001:678:7bc::/48
Signature Algorithm: sha256WithRSAEncryption
4c:3c:13:cc:30:69:c5:54:f1:6e:08:ff:b3:0d:fd:84:22:29:
ca:b9:e3:1a:3e:ee:25:9d:05:c7:66:50:bb:da:4e:cb:82:c1:
ca:e1:31:5b:2b:d1:e2:04:48:2c:31:5f:4b:43:20:04:d2:78:
c9:2e:af:10:eb:75:e9:8f:a3:30:16:2c:df:96:9e:84:c7:6c:
9b:d9:75:e1:5d:13:33:9b:69:99:5e:89:5b:87:63:54:87:1f:
9d:13:29:ac:13:80:f7:96:bc:ac:e1:18:e0:b6:2a:46:94:8e:
e9:7e:3e:f0:cf:0d:92:63:5b:51:82:5d:0d:10:ef:da:79:65:
aa:67:0b:d8:77:60:7d:46:2f:d5:9a:f8:fc:03:39:36:28:78:
da:c8:2b:09:94:a9:00:5a:25:13:d2:5e:1d:a3:aa:41:5e:5c:
08:c0:20:61:06:f6:91:64:0e:8b:41:a3:24:1d:ea:55:e8:e9:
73:06:09:f9:5f:77:fb:6a:c7:3a:8f:5d:9e:66:29:58:1c:87:
53:65:68:9c:82:9b:0c:f6:a4:de:c1:11:2f:24:c0:a8:8b:b4:
3d:0d:17:0c:df:ff:75:21:d0:31:40:c7:52:86:3a:6c:75:bb:
ee:21:5a:7d:0c:c9:a3:c8:13:4e:a7:4c:50:1f:b7:5a:2e:94:
88:f0:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:41 2025 by rpki-client