Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/F6thJua_pfK1T5A75geE8te-p5Y.roa
File: F6thJua_pfK1T5A75geE8te-p5Y.roa (raw, json)
Hash identifier: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=
Subject key identifier: 17:AB:61:26:E6:BF:A5:F2:B5:4F:90:3B:E6:07:84:F2:D7:BE:A7:96
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 019425FD066D2E63D0E71959B516941932DF
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/F6thJua_pfK1T5A75geE8te-p5Y.roa
Signing time: Thu 02 Jan 2025 07:48:46 +0000
ROA not before: Thu 02 Jan 2025 07:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 91.204.182.0/24 maxlen: 24
91.204.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:06:6d:2e:63:d0:e7:19:59:b5:16:94:19:32:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 2 07:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17ab6126e6bfa5f2b54f903be60784f2d7bea796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:c3:d6:7e:86:8d:6c:b3:8e:c0:c6:2d:8d:
96:7a:02:96:a4:d4:a3:a6:eb:56:01:96:b6:c5:e3:
41:0e:13:d7:4c:f6:c9:9b:aa:69:b7:fa:a1:6d:57:
df:80:39:a8:8e:23:95:0c:bb:44:37:3d:bf:14:e0:
9c:e5:cf:9f:97:1a:1a:17:2f:aa:45:32:ed:ba:09:
0c:7d:a0:c8:ef:26:2c:59:9a:2e:ce:91:a8:5d:2b:
bb:7c:27:2d:01:70:de:2c:c0:fe:e0:00:da:37:92:
05:ae:ff:ff:0d:5c:f3:f1:73:2a:fc:3b:31:e6:bb:
d9:94:d0:13:3b:ea:b1:b4:28:02:83:38:28:4a:c3:
e1:45:8b:12:fa:66:55:1a:89:66:b7:29:0b:c9:a8:
04:37:83:22:1a:27:18:d9:db:49:6f:03:e2:6c:3d:
57:57:f4:77:f8:13:7b:9b:03:16:df:02:40:f1:ca:
19:2e:bf:fd:ec:00:44:5c:3d:61:72:d2:8b:33:f1:
c0:2d:77:bd:d4:a4:b2:96:77:7a:67:ae:f2:f4:5f:
3e:91:7f:0a:cc:99:d8:17:80:22:ea:62:6c:73:59:
4a:29:09:32:3a:65:ce:ea:65:e7:db:db:09:69:d3:
1b:7e:62:00:bd:12:99:6d:51:ee:83:60:c5:b7:1f:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:61:26:E6:BF:A5:F2:B5:4F:90:3B:E6:07:84:F2:D7:BE:A7:96
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/F6thJua_pfK1T5A75geE8te-p5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.182.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:bd:de:86:05:69:57:13:db:2e:65:e5:fc:59:43:42:42:fb:
70:ea:3b:17:56:ac:09:fd:47:f2:a2:5e:7a:82:ee:05:cb:c2:
07:01:bb:4a:cf:7a:c6:47:53:20:e7:38:e5:50:1f:c2:86:54:
e8:1e:03:16:cd:c8:bd:ed:26:eb:6b:6b:0a:33:72:f4:5a:98:
4b:b9:8e:b3:99:5a:de:cc:95:93:47:48:2f:7d:ab:03:49:80:
67:53:ea:a5:58:32:d9:fb:83:48:7e:ef:3e:78:44:c7:91:c9:
4b:b0:f5:a2:c8:e5:75:da:d4:16:57:e4:b2:d6:0a:f5:b7:53:
96:d4:60:17:b6:be:6d:e4:bf:d8:38:a7:bc:e8:45:22:f6:d8:
1d:ee:ef:7f:23:54:39:06:d3:90:1a:b1:76:f6:e0:d7:98:3d:
96:a3:4f:d0:29:fb:eb:31:be:46:4a:8f:67:c6:39:23:03:4a:
31:6b:cd:b4:0d:d4:98:5a:a5:f0:87:43:ea:e3:ec:16:d8:44:
ae:98:12:5d:1f:10:35:8c:a7:ed:c9:2a:a4:37:c7:73:04:ef:
f2:ca:06:5e:53:b1:1a:c8:f2:ee:80:79:ff:46:8e:9a:0c:f9:
c2:5a:4c:0f:2a:c3:77:ae:cc:90:3f:1c:59:fd:b5:cc:c9:a8:
c4:e8:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:17 2025 by rpki-client