Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa
File: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (raw, json)
Hash identifier: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=
Subject key identifier: EE:7B:F0:31:D7:CB:E1:48:7C:24:B2:16:E0:AD:51:7E:84:77:FA:FC
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019426D97908E90B6B32D0ECCC39113547CD
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210517
IP address blocks: 91.241.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:79:08:e9:0b:6b:32:d0:ec:cc:39:11:35:47:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee7bf031d7cbe1487c24b216e0ad517e8477fafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f7:fe:95:a8:d9:33:25:f4:29:ae:d3:3d:b0:
df:45:24:0e:47:b4:0b:c3:8a:db:bc:d5:dd:00:23:
da:29:51:1e:97:0e:a2:98:63:48:2f:dc:6f:e8:99:
0e:10:d8:bf:df:8b:b3:23:60:10:0e:36:11:f0:0d:
87:9e:0e:2b:ca:56:90:6f:b4:9e:96:02:db:1a:2e:
a1:c9:1a:c6:93:3b:ee:2c:5b:14:7c:be:f6:1a:ef:
4f:94:2b:b8:33:63:f4:d3:d9:88:65:5d:82:19:fd:
28:d6:b0:fd:83:10:ee:af:7e:ed:ed:51:a7:30:c2:
db:27:35:5a:62:a5:5a:d4:9a:94:80:31:44:e2:e6:
16:1e:22:fd:43:51:7c:96:ae:42:75:4d:01:d9:1b:
cc:11:0a:36:f7:a2:04:e0:33:9a:d9:c2:5a:7d:23:
a0:bf:43:5c:fa:46:c5:20:a6:33:40:e4:ec:9e:6f:
99:9a:06:31:4c:58:4d:0e:16:41:51:2a:4a:47:52:
bb:6a:b5:63:23:53:ce:57:bc:60:7d:6c:3c:71:51:
7a:4e:a0:65:ee:4e:95:ba:f9:9c:9a:81:c1:ee:06:
52:8f:bc:29:f1:cd:51:84:51:37:9b:b6:a2:17:11:
24:bb:5f:06:03:e4:75:be:ac:37:de:a4:89:0d:17:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7B:F0:31:D7:CB:E1:48:7C:24:B2:16:E0:AD:51:7E:84:77:FA:FC
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:70:8b:25:d3:2c:ce:5f:49:3c:5a:e7:89:19:a2:53:28:f0:
4e:b1:0c:a3:38:54:b7:e5:9c:08:85:42:dc:c0:41:ff:62:ad:
eb:3c:81:10:24:2e:03:76:df:a4:49:bc:ee:d7:ff:58:a4:b9:
a3:98:21:7e:df:8b:59:a8:ad:c7:cb:41:24:5d:06:23:12:f2:
af:fc:55:e2:ed:cb:3b:37:e6:4a:57:9c:23:1e:7e:06:4d:8a:
55:37:96:24:72:6d:6f:2c:61:8d:a6:06:3d:40:a1:0b:b8:0c:
27:6f:fc:11:f2:bd:eb:98:6e:8a:62:6d:14:65:4e:89:11:43:
b1:9f:fa:c7:3c:54:4d:19:80:4e:1a:4c:92:78:a7:bb:45:4c:
b9:ac:1e:a5:9c:5c:bf:31:b1:a7:3a:1d:af:b3:ac:ac:74:ba:
e9:4e:64:ec:ab:fb:05:a7:e7:94:e8:d3:83:f0:d3:73:8a:b5:
71:79:d6:46:a0:4b:ba:51:c5:eb:b2:d3:96:5f:e4:10:29:59:
d7:d1:d5:74:60:60:09:1e:e4:fa:30:24:67:d5:e9:b7:64:72:
c0:d1:04:10:2b:30:05:96:77:12:62:48:72:f3:07:56:f0:61:
0f:05:2b:1c:1a:b6:7d:b4:4e:fc:0b:20:d9:35:16:bd:bf:9a:
ff:bd:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:52 2025 by rpki-client