Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/uzvmNQ0pgtrY10LKNgJ6yOXsS5s.roa
File: uzvmNQ0pgtrY10LKNgJ6yOXsS5s.roa (raw, json)
Hash identifier: ZBPgBE/CsBRr5T5PtgMnf/CgF6zh+6Fb3HpBKws0VjE=
Subject key identifier: BB:3B:E6:35:0D:29:82:DA:D8:D7:42:CA:36:02:7A:C8:E5:EC:4B:9B
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 018C8683AF49CE10BDB6E34BE3CACACE81AE
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/uzvmNQ0pgtrY10LKNgJ6yOXsS5s.roa
Signing time: Wed 20 Dec 2023 09:17:06 +0000
ROA not before: Wed 20 Dec 2023 09:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 91.216.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:83:af:49:ce:10:bd:b6:e3:4b:e3:ca:ca:ce:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Dec 20 09:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb3be6350d2982dad8d742ca36027ac8e5ec4b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:74:65:b2:f9:df:18:33:f6:37:49:03:38:41:
df:d7:76:6b:55:7a:08:6d:25:2f:59:98:59:49:6d:
34:25:f0:80:d0:79:a9:c5:4b:73:e3:f5:12:83:8d:
2a:26:59:37:3b:f6:ed:e5:cb:d1:de:e7:f8:b7:0d:
f1:3c:f9:19:ca:92:b0:c7:e1:4b:d8:d4:75:6d:3d:
52:36:c2:8b:79:66:a5:9e:64:52:dd:48:92:15:9f:
ab:a5:8e:f0:0d:6c:27:ef:71:86:b5:87:89:ed:f6:
e9:c1:e4:de:af:08:c1:90:b8:4a:3d:20:a1:c2:ce:
28:da:c2:b2:98:62:21:77:94:60:c6:ee:d7:07:b7:
31:a8:a2:c1:8e:27:ea:f5:35:21:76:9c:d6:22:11:
11:bd:6c:a1:10:15:e0:cd:e2:01:88:c5:30:c8:a6:
b5:5a:88:a5:1b:c2:39:d5:7a:1f:32:06:00:8a:c8:
d7:ac:c7:98:f3:ae:d0:1c:f1:b4:f8:e2:41:52:db:
6e:70:23:06:c3:b6:97:f1:71:e2:35:de:24:4d:ac:
e1:10:fd:e2:e7:e7:65:f8:5e:c2:06:76:03:80:d4:
96:dd:aa:f7:6b:da:6b:47:a2:f1:19:82:9d:7c:31:
1a:46:63:2c:06:4f:63:c0:99:26:ab:3b:03:b8:ae:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:E6:35:0D:29:82:DA:D8:D7:42:CA:36:02:7A:C8:E5:EC:4B:9B
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/uzvmNQ0pgtrY10LKNgJ6yOXsS5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:98:e2:f0:6b:1d:13:59:71:7c:fd:5b:fd:55:62:c5:e5:e4:
a7:c7:f3:8d:e3:23:f9:31:9c:f7:dd:c9:a4:99:aa:94:38:13:
4c:f7:d7:55:e4:38:13:b9:b5:f3:29:c9:5f:b8:22:b9:2a:a6:
af:60:60:28:36:65:07:a0:1e:c0:8a:84:e4:e0:fc:50:1a:b5:
a9:3f:d9:15:fe:07:fe:83:ab:21:63:dd:92:93:53:45:20:22:
a4:e1:3a:75:b4:d6:c2:a0:05:d8:ce:32:1c:7d:f3:15:63:00:
e4:d0:cb:99:82:41:e4:8c:26:0a:b0:23:66:2d:26:a5:a7:4a:
2e:1f:41:6d:62:27:1e:09:af:ec:d8:9c:df:6f:42:b0:a9:d6:
e8:49:8a:d1:4b:0a:c7:93:fc:c9:78:b7:2b:80:bd:d2:f9:90:
cd:1d:6a:71:dd:b8:76:1d:5d:dc:0f:90:c4:18:8f:e1:b8:aa:
ef:ca:0d:49:ee:2a:7d:41:99:07:42:0b:af:fd:9c:d5:61:16:
f5:e6:80:bf:61:d0:1a:31:32:75:c1:b1:30:b6:7b:e6:5a:b1:
50:ed:09:62:97:67:46:b4:3d:74:cc:97:47:b7:b5:19:c1:2d:
af:69:7b:2c:f1:58:2f:ba:85:03:03:72:1a:87:87:b0:f6:55:
9a:09:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:37 2025 by rpki-client