Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa
File: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (raw, json)
Hash identifier: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=
Subject key identifier: E0:20:84:76:03:55:F9:F1:96:50:2F:DA:18:7C:50:C1:B5:2C:38:A4
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 01942445821067C50086E96D3D9A88C19181
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52223
IP address blocks: 91.245.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:82:10:67:c5:00:86:e9:6d:3d:9a:88:c1:91:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e02084760355f9f196502fda187c50c1b52c38a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:f5:1c:ed:c8:0b:49:61:1a:d7:c2:f4:68:
4f:50:1a:26:0f:64:09:35:8e:c3:74:b7:db:c5:d7:
1b:c4:d0:7a:a1:7e:f2:96:96:4e:f1:8c:ea:85:97:
0f:2a:79:b3:d4:2d:0d:a7:de:96:7b:5b:4b:61:a8:
49:59:ac:73:da:32:d8:65:e7:9a:de:fe:92:a0:51:
9f:e3:27:4a:27:a4:e5:ea:26:2a:fa:d7:a2:e1:1a:
11:2f:c6:21:87:32:0a:e5:c3:01:88:19:34:a2:6b:
84:97:46:02:ef:da:37:90:18:51:e2:a8:6e:35:59:
b0:54:07:13:64:62:20:06:3a:cb:86:70:da:ca:f6:
10:fd:d3:f5:d7:f1:0b:ae:9b:01:6c:87:0f:9c:92:
0d:e5:9a:bf:6c:68:f3:bf:6b:ac:df:3c:17:d3:2d:
01:1c:5e:cd:07:a8:15:ec:2e:f2:2c:9c:4b:7d:8e:
a2:e9:a1:88:d3:da:97:5c:c9:8a:84:cc:a8:e2:fc:
72:88:fb:9a:2c:6b:9b:cc:7e:32:44:c0:f3:25:77:
81:a2:b0:22:6c:36:94:7e:0f:21:30:c7:05:a0:18:
e3:55:dd:51:89:0f:7e:45:53:08:c8:05:a9:bb:cc:
78:ea:13:ec:20:6a:79:f4:97:17:46:8a:9f:1a:29:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:84:76:03:55:F9:F1:96:50:2F:DA:18:7C:50:C1:B5:2C:38:A4
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.233.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6a:c3:aa:eb:59:4f:94:97:fe:13:91:bd:8c:f6:12:24:22:
b5:58:0c:fb:38:f6:b6:9c:c7:7f:33:8e:73:1b:27:b2:d0:d0:
e3:40:19:af:2e:4b:21:52:17:36:d9:6f:35:6e:83:f8:eb:df:
5d:ab:de:90:c9:06:6f:71:8e:e8:f4:e3:f6:d2:55:3b:a1:1b:
f1:a6:37:47:94:c8:1c:d8:9e:1e:76:d1:18:02:98:fc:86:5f:
81:25:50:d1:2a:a5:46:67:26:d7:c2:06:38:06:9a:b4:06:70:
0e:24:d3:ac:7c:06:0f:a2:9c:17:9c:08:76:1a:a6:18:ac:4e:
73:64:d3:97:f9:6d:7e:c8:5a:2c:b4:13:c4:91:f0:87:c0:67:
78:a8:6a:9d:db:3a:8a:56:ac:fb:20:1b:48:aa:ca:60:ac:69:
ed:02:db:e2:fa:2a:ca:1c:4d:c7:f5:79:17:6f:a7:af:92:e4:
02:cc:d4:dc:23:21:0a:03:10:51:9c:4a:42:ff:1e:82:ca:f6:
9a:00:19:de:43:f4:bf:7f:f2:37:7e:f4:82:8b:4b:a8:df:8d:
82:b1:7b:e7:47:0e:7e:d1:95:9f:50:aa:67:bd:bb:ca:f7:61:
d5:35:0a:2c:84:a7:74:c0:9a:2b:b4:29:fb:5d:28:e3:dc:3b:
a8:e6:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:31:54 2025 by rpki-client