Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/XOOVHbvdi1PyG7OFqAlrThvaXr0.roa
File: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (raw, json)
Hash identifier: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=
Subject key identifier: 5C:E3:95:1D:BB:DD:8B:53:F2:1B:B3:85:A8:09:6B:4E:1B:DA:5E:BD
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019424B31CCE15F3EC7B680F3B52F57E2E7F
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/XOOVHbvdi1PyG7OFqAlrThvaXr0.roa
Signing time: Thu 02 Jan 2025 01:48:25 +0000
ROA not before: Thu 02 Jan 2025 01:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 91.212.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:1c:ce:15:f3:ec:7b:68:0f:3b:52:f5:7e:2e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jan 2 01:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ce3951dbbdd8b53f21bb385a8096b4e1bda5ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:c9:12:94:83:f3:e7:a6:09:dd:21:a4:22:
57:b5:a3:0d:3d:e0:b7:bc:cd:c6:d2:f8:2d:30:ff:
0f:e2:99:a5:c2:77:77:b5:87:49:e0:fc:12:3f:12:
f9:96:43:77:84:db:10:74:57:c2:d0:a0:20:a5:08:
e6:d4:05:da:db:05:3d:17:09:13:b2:58:9b:01:49:
f6:c9:d2:89:6d:85:b6:3a:21:eb:95:8b:61:8d:8a:
c7:ab:6d:fd:70:c3:b2:51:bd:52:7c:1e:ee:0a:a7:
9c:82:3d:bc:79:7b:30:8c:2f:f6:14:07:7f:f3:7d:
fe:06:e2:7e:15:aa:e3:b9:61:5b:1b:78:5d:bb:ef:
96:82:ca:5c:5f:77:2b:db:7c:7b:b5:83:0e:97:29:
a5:23:16:70:76:7e:3e:3e:4c:77:90:2f:eb:ff:9e:
26:e1:4d:a7:68:be:c0:91:dd:76:41:ea:05:e4:dd:
41:bc:eb:4e:bc:a1:95:06:16:57:c5:ac:6f:90:53:
cc:c2:27:11:53:9c:3c:47:79:42:83:ba:29:8d:80:
34:26:fc:f7:57:52:e9:0f:31:f6:45:a4:b7:b2:d9:
ad:71:2a:9c:f9:82:6c:52:6c:3b:f1:47:95:6a:48:
f6:cb:81:a8:58:d0:55:9a:b3:e9:5b:46:44:82:5b:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E3:95:1D:BB:DD:8B:53:F2:1B:B3:85:A8:09:6B:4E:1B:DA:5E:BD
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/XOOVHbvdi1PyG7OFqAlrThvaXr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.67.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b4:c3:3e:e1:08:d9:6e:0e:ef:43:06:75:3d:a1:f9:66:d7:
c1:09:03:c5:b5:c6:c0:b2:2c:f3:ae:90:22:ef:a5:21:79:43:
e1:0b:fd:fd:87:47:00:b4:19:f3:31:42:0d:55:62:0c:db:6d:
89:53:c0:0b:64:56:72:0f:45:cb:62:cd:72:a6:6a:bb:aa:11:
20:bb:c5:38:e3:88:b2:2a:af:05:ed:fa:62:f8:e7:2f:72:da:
12:e7:a4:95:5e:82:61:6c:5f:47:03:c0:0f:6e:a4:ee:70:a8:
7e:a4:07:a4:11:c6:56:50:50:0f:0b:41:24:f3:71:7e:1e:02:
9c:b8:4d:1d:db:8f:c0:aa:3f:31:05:fc:20:ab:e7:c0:c1:cd:
36:b3:3d:8d:3c:0d:27:f7:8d:ad:07:19:13:c0:7e:03:0f:1d:
73:f2:3c:0a:dd:ad:e3:cd:7b:3f:a7:96:7c:77:32:7f:30:bc:
25:b2:60:69:e9:5f:07:11:27:81:d2:21:ad:83:f3:05:86:07:
bc:ef:0f:51:4e:1d:5d:2c:ea:3a:de:02:e3:8f:4d:8c:60:49:
8b:3f:30:42:40:27:61:62:31:94:02:4d:20:90:dc:58:65:76:
43:33:6d:e6:77:5c:e2:c2:e9:cd:1f:cb:30:41:7a:f5:d2:fb:
d2:25:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:28:16 2025 by rpki-client