Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/D9UwjTTIVSq-ihbBzbLtDqj0TSA.roa
File: D9UwjTTIVSq-ihbBzbLtDqj0TSA.roa (raw, json)
Hash identifier: rj0H3X+Fbqm8F6mdqzMASIZnbBVH6KtzIfLMtx1VNSc=
Subject key identifier: 0F:D5:30:8D:34:C8:55:2A:BE:8A:16:C1:CD:B2:ED:0E:A8:F4:4D:20
Certificate issuer: /CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Certificate serial: 0150D1BB
Authority key identifier: C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/D9UwjTTIVSq-ihbBzbLtDqj0TSA.roa
Signing time: Sat 01 Jan 2022 13:01:45 +0000
ROA not before: Sat 01 Jan 2022 13:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210512
IP address blocks: 91.195.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22073787 (0x150d1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Validity
Not Before: Jan 1 13:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fd5308d34c8552abe8a16c1cdb2ed0ea8f44d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:db:a9:9c:f1:d4:dc:4d:4b:96:77:9b:3d:
99:e9:7a:9d:f3:04:de:74:4e:18:7d:05:9f:83:83:
93:d6:79:e5:b5:73:3b:4d:24:97:ed:b6:bb:85:0c:
3c:69:36:ac:15:16:54:b1:0a:d0:96:cd:19:42:48:
83:b2:83:b6:48:18:09:45:35:72:52:2d:e5:85:fb:
9e:8e:a2:47:63:77:76:40:2e:7a:62:39:e8:be:32:
58:7a:bf:6c:e2:25:43:39:a2:b4:76:fc:83:0a:57:
59:84:70:52:51:1d:4b:de:ad:67:8b:b8:a1:c5:75:
ab:c2:83:89:47:b1:c8:f4:12:8b:b7:e0:4e:a5:1a:
f5:fd:de:36:c6:2a:61:1c:c5:d5:13:3a:b9:94:41:
8e:a9:fb:ed:ad:96:c5:82:c3:69:7a:d5:7f:85:24:
2f:d3:b0:65:92:52:74:9f:57:eb:91:6d:bd:a1:d7:
5f:ab:9d:f8:33:15:2b:bf:fd:55:f4:97:fd:1e:97:
52:f9:e8:dd:aa:a0:5c:d5:37:d9:4d:1f:d8:56:d2:
34:36:4b:7e:80:d5:4a:f9:cf:97:09:b9:b7:10:fe:
94:d5:42:ed:7f:0d:f0:cd:cb:92:2e:2b:47:34:13:
a5:35:31:8c:c0:75:1c:27:99:ea:50:84:f6:3e:e3:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:30:8D:34:C8:55:2A:BE:8A:16:C1:CD:B2:ED:0E:A8:F4:4D:20
X509v3 Authority Key Identifier:
keyid:C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/D9UwjTTIVSq-ihbBzbLtDqj0TSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/yUy0Im5tJMHg6WhXiKX51ZQxLMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.125.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2f:b5:d0:ee:75:8b:d3:6a:08:c6:94:f7:4e:f2:cd:d7:0d:
ed:bd:1f:eb:ab:0b:96:21:5f:56:bc:c3:ab:a8:ce:43:a8:a5:
63:61:ea:62:ef:3e:13:ed:d6:21:fa:cd:3e:d6:b0:05:0f:86:
d3:89:e9:be:3c:8f:7a:78:23:03:1e:15:f9:49:b1:e1:71:dd:
90:d3:d4:67:b7:60:63:1b:e4:92:04:9f:65:47:8f:c4:93:e8:
60:04:ad:33:51:91:3f:7f:d9:07:5a:c6:c6:05:04:03:4f:a5:
f2:a5:0d:66:cd:dc:12:5c:8b:be:2a:3a:c1:9c:a4:c6:46:52:
2f:14:10:c8:62:bc:90:14:5f:b1:72:94:3a:b1:e9:e6:02:71:
55:cb:ce:48:28:9e:6a:fa:94:0a:67:1b:ad:fc:5f:fc:e0:5f:
56:36:28:e6:60:6c:54:6c:42:5a:1f:b2:33:31:8a:9a:50:eb:
72:33:45:c4:62:a9:cc:5b:7f:ae:e5:1d:6c:fc:b1:b7:aa:38:
6b:5e:16:a5:e1:86:cf:c3:26:78:d8:fb:32:4a:d7:fb:69:8f:
f3:e3:8a:3d:24:60:c9:53:f4:28:b0:ef:22:e3:be:44:1e:ec:
f6:7c:35:a8:5b:6c:20:1d:1f:ec:e2:f8:94:da:bd:0e:07:f3:
56:f5:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:33 2025 by rpki-client