Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa
File: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (raw, json)
Hash identifier: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=
Subject key identifier: EE:4C:71:D8:10:73:EC:05:3B:1B:9E:CD:30:8C:4D:19:8E:44:46:F4
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019422FC12E16E1E97E36863670A4928CB36
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31367
IP address blocks: 91.216.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:e1:6e:1e:97:e3:68:63:67:0a:49:28:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee4c71d81073ec053b1b9ecd308c4d198e4446f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:99:bf:95:16:e7:18:7e:b8:dc:8f:6d:08:
f1:f6:fd:fd:e0:ef:60:02:62:bc:21:9e:74:4a:2b:
60:1f:e3:92:1f:b1:0f:e0:e9:e9:f4:30:0a:2e:23:
1d:6b:09:3b:45:18:25:a7:24:6e:62:9e:b3:5b:cb:
d6:81:ea:2c:d7:d8:61:bb:cd:da:15:e6:2a:bd:c4:
42:f1:d6:8a:c3:33:93:a6:77:5a:77:ce:45:0e:a8:
cb:55:89:51:fb:c5:e8:1d:0f:bd:33:df:2c:73:3e:
21:8c:8e:16:c4:86:b5:32:a7:c6:d4:8d:71:be:a1:
ec:71:a2:74:f3:04:c6:ed:40:18:6c:15:68:69:b1:
06:f7:09:8d:df:48:09:47:66:ee:62:57:43:e9:c5:
98:f1:90:c5:77:a7:4d:98:61:77:10:82:b2:15:0a:
c5:9b:0d:37:7a:a5:99:75:ac:38:d6:9d:96:b1:ca:
eb:53:e4:b6:68:24:f4:c9:3b:8f:37:cb:40:d1:94:
4a:fd:24:6e:9a:a4:2f:38:d7:35:e6:f0:18:d1:58:
31:73:00:0b:79:4d:0c:cb:9e:34:7a:b9:5d:58:12:
67:d6:e1:78:39:97:cd:5f:f1:01:03:67:c3:2f:b6:
ae:7b:85:3b:ad:2d:e8:a2:bd:16:d6:db:fb:a9:2b:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4C:71:D8:10:73:EC:05:3B:1B:9E:CD:30:8C:4D:19:8E:44:46:F4
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.11.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0b:89:12:10:ae:04:69:18:1f:f1:87:a4:7a:01:9d:90:d4:
03:46:1c:77:e9:06:a3:7d:f1:d2:6d:a6:98:f1:c2:cc:81:f8:
c5:d6:da:24:13:1d:ae:c5:75:64:94:5c:57:97:c0:b6:ec:a9:
04:84:d6:a7:26:39:13:27:69:57:ed:a3:8b:98:2d:9b:91:88:
29:ef:a4:57:01:eb:01:f6:b1:f0:9b:3c:f6:15:d3:06:9e:37:
ce:ca:05:69:71:42:d4:4c:d2:86:4d:1b:ed:43:13:a6:9c:e3:
60:e5:2f:21:e1:e4:c1:16:83:cb:45:78:41:41:ac:cc:1f:bc:
b9:41:b4:65:50:82:f0:db:ed:97:ff:95:45:c2:37:5e:a3:5f:
6d:96:fb:2c:73:b8:25:dc:9a:29:b8:72:20:8a:5e:0b:fd:6c:
c9:d5:55:71:d1:e1:46:40:bb:1d:4f:e6:b9:03:ff:53:12:68:
f0:6c:e6:17:89:b5:37:33:f9:e1:99:24:b7:e6:03:86:0a:26:
03:c0:b9:69:d1:9c:be:c7:6b:6a:da:52:2c:4e:c2:57:5f:b9:
cd:f9:5d:8f:47:04:4a:e5:ea:be:4c:44:fb:1e:e0:76:9d:e3:
ad:7e:5a:1b:23:33:ea:6d:8f:28:98:27:86:af:62:8f:2e:20:
d3:ca:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:32:37 2025 by rpki-client