Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa
File: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (raw, json)
Hash identifier: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=
Subject key identifier: 0E:04:E9:2E:B4:51:AA:E1:D2:5E:FC:62:2D:90:7E:16:1F:58:78:6E
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01942827FF211E4FF8F441A6922DACF518F0
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa
Signing time: Thu 02 Jan 2025 17:54:57 +0000
ROA not before: Thu 02 Jan 2025 17:54:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206760
IP address blocks: 91.107.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ff:21:1e:4f:f8:f4:41:a6:92:2d:ac:f5:18:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 2 17:54:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e04e92eb451aae1d25efc622d907e161f58786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:67:fb:e2:b4:04:6e:21:71:a4:1a:2b:df:
6f:4a:6c:0a:8f:46:be:bb:6b:fc:df:e1:1b:b2:60:
06:31:ac:42:44:b9:5e:15:fb:9f:cc:cd:56:70:da:
16:45:26:bf:53:54:75:06:c8:3d:2e:48:47:3c:8e:
30:49:a7:4b:00:4c:fc:ec:91:3c:f3:3b:92:8e:d6:
bb:b1:09:36:37:9e:be:ac:ce:df:13:ce:6f:ce:85:
90:6f:1e:f9:4b:22:ac:d7:d9:ca:43:8d:d2:fb:7d:
04:d2:3e:29:d1:1f:32:b0:a9:88:49:0e:4f:b9:75:
28:e6:e9:c9:66:bf:b6:ed:2a:29:e5:a8:95:64:32:
20:7f:66:db:ea:9a:3b:36:21:90:e5:67:9f:54:ad:
22:a4:5c:f9:bc:b1:17:7c:2e:26:b4:72:23:df:ee:
a6:9f:e8:7b:8a:f0:df:ba:28:f3:c2:d5:b2:6c:0c:
31:a0:60:1e:07:f5:08:83:ad:49:16:43:db:32:2a:
ca:b7:6f:42:90:1b:ff:53:0a:38:43:05:bb:23:b1:
c3:2b:e7:94:46:73:31:10:ad:f7:9f:99:b4:ba:e3:
7f:e1:4c:a4:ac:b6:1f:4e:d1:30:65:81:b8:19:c2:
5e:6a:6b:72:3e:26:37:42:6f:c3:e1:d3:4a:55:85:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:E9:2E:B4:51:AA:E1:D2:5E:FC:62:2D:90:7E:16:1F:58:78:6E
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.118.0/24
Signature Algorithm: sha256WithRSAEncryption
49:88:d4:40:2d:2b:0d:b0:0a:95:1e:7d:86:ff:91:5e:21:ce:
76:0c:81:23:8d:1f:70:2e:10:1e:c8:71:b8:6e:98:30:0e:64:
b5:89:b0:5b:cf:0e:10:54:f5:a0:66:42:2b:77:53:4e:26:9c:
d0:e2:a1:1f:82:00:5a:c6:e8:43:aa:d2:41:5b:2f:4a:5a:38:
90:b3:00:38:ac:ef:73:cd:7a:e9:86:89:4b:a3:97:d3:d6:fb:
68:38:82:d3:f8:d8:ea:a6:e2:bf:0d:51:ab:ee:01:36:ff:f2:
da:87:45:f2:41:86:ac:85:f5:4d:d9:ee:e1:96:3c:32:4e:88:
7a:d1:d4:0b:54:89:ff:96:e5:5f:cb:57:66:d1:96:6f:9a:4e:
bd:62:57:4a:82:6c:6b:d5:85:9e:dd:73:07:93:1f:c7:3a:92:
a3:a2:4f:6e:92:8a:68:95:9b:6f:fd:a9:72:02:59:c3:e6:0a:
f3:02:e5:bf:6a:d9:1f:34:ab:4d:58:93:76:32:ce:51:8d:36:
f9:49:88:f8:71:51:52:45:76:79:17:30:43:c3:f2:72:70:b7:
c3:7d:41:17:91:24:52:1b:1f:2d:49:af:6f:3e:27:6a:eb:27:
e3:82:96:0f:49:4a:6b:db:7f:6e:bb:0e:67:90:f2:c0:34:97:
03:48:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:02 2025 by rpki-client