Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/x8ghvFiQy8y7__Pm7K2GUSehU3A.roa
File: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (raw, json)
Hash identifier: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=
Subject key identifier: C7:C8:21:BC:58:90:CB:CC:BB:FF:F3:E6:EC:AD:86:51:27:A1:53:70
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019427B51EB9A5B65B7F9FE7F92ADCACF880
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/x8ghvFiQy8y7__Pm7K2GUSehU3A.roa
Signing time: Thu 02 Jan 2025 15:49:28 +0000
ROA not before: Thu 02 Jan 2025 15:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 91.223.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:1e:b9:a5:b6:5b:7f:9f:e7:f9:2a:dc:ac:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Jan 2 15:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7c821bc5890cbccbbfff3e6ecad865127a15370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:18:b7:d2:65:26:55:92:74:ee:8c:b2:30:
3d:35:bc:ea:2f:81:a6:b2:d7:13:b9:8d:35:5f:af:
91:47:bb:00:4c:91:c7:a1:c3:65:60:d6:49:38:9a:
8e:a3:6c:3a:f6:91:3c:00:82:f4:cc:00:66:8b:c2:
d0:7c:2c:9f:c1:55:b9:88:21:83:e1:76:81:47:13:
c2:bf:f7:49:18:4f:92:8c:e0:91:1e:1a:4f:08:a9:
f1:da:07:dd:dc:11:ae:fb:10:6e:b6:0a:9c:db:ce:
25:38:47:6b:56:ad:5a:0c:85:fb:00:85:c8:c3:ac:
de:e3:fc:9f:d7:49:9a:43:e9:0d:49:cb:80:30:22:
31:62:b0:f6:a8:82:cb:e8:2b:41:7a:df:85:c4:20:
68:c1:b3:c3:52:1c:d1:9a:70:22:07:56:34:0f:a3:
1c:47:d0:52:74:12:06:59:ca:ea:ab:e2:f6:05:46:
9a:e2:b7:65:2e:8f:3f:52:1e:8c:20:fa:fd:b9:2a:
f4:6d:55:90:70:60:4a:6c:01:bb:1d:5b:4d:a9:e8:
9c:b1:d5:41:e2:3f:44:69:e6:9b:b1:38:dc:c5:45:
60:9f:f5:07:5e:f1:0a:de:1b:b6:14:b3:42:48:05:
64:2a:62:38:54:6c:ab:8a:03:43:f4:f1:c0:0a:9d:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:21:BC:58:90:CB:CC:BB:FF:F3:E6:EC:AD:86:51:27:A1:53:70
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/x8ghvFiQy8y7__Pm7K2GUSehU3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:69:e6:3f:e0:ff:61:c1:15:e0:64:93:25:08:64:1b:28:67:
6f:ec:b4:eb:37:f9:07:1e:65:a2:bd:02:ea:0c:8d:40:10:72:
b8:d7:f6:d1:cb:ce:b9:ec:53:54:85:f7:28:5a:f6:1d:2c:7b:
5f:46:5f:9b:8b:08:62:01:c6:1d:32:79:55:fa:59:54:61:6a:
4e:63:93:a4:4c:9b:b9:e7:01:fb:10:c2:58:04:f1:d9:8f:0c:
d3:0a:95:22:2c:a2:3b:f2:78:15:b2:ca:78:2c:dc:93:bd:e1:
3c:d2:3e:7c:9d:61:2a:cd:44:71:1d:4e:f1:b5:19:48:bd:f4:
f9:0f:9f:cf:b0:8a:74:66:f8:fe:53:1d:05:db:7c:23:00:f9:
70:c4:d0:f2:d6:c9:5a:f3:45:f6:2d:67:2c:c1:d7:5b:c6:5b:
d2:f4:cc:a4:0d:a8:91:15:01:a9:0d:12:5f:3f:fa:f6:da:22:
26:7e:ce:ef:1b:2e:99:95:06:e2:46:f0:a9:01:6a:af:ae:9a:
06:71:f0:cf:f8:f3:0b:46:4c:46:5b:26:b1:64:04:14:c2:90:
b1:65:31:76:66:26:37:f7:f7:54:f9:98:f1:92:79:a3:c7:fd:
fc:8c:86:a6:68:b7:39:5c:19:57:02:9a:ec:93:6c:34:05:e9:
71:0b:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:11 2025 by rpki-client