Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/hSEnnP78MO0E0NAe-uG4HhQActY.roa
File: hSEnnP78MO0E0NAe-uG4HhQActY.roa (raw, json)
Hash identifier: 1ZUrDCa754wl8N3UfM4AUuNSIdpq2/Gef/87JOPbk78=
Subject key identifier: 85:21:27:9C:FE:FC:30:ED:04:D0:D0:1E:FA:E1:B8:1E:14:00:72:D6
Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial: 019425FC27A5F8B4074381E173AD237F7159
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/hSEnnP78MO0E0NAe-uG4HhQActY.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210165
IP address blocks: 91.225.1.0/24 maxlen: 24
2a12:3440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:27:a5:f8:b4:07:43:81:e1:73:ad:23:7f:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8521279cfefc30ed04d0d01efae1b81e140072d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:6c:4b:55:af:11:a8:55:c9:c9:bb:05:c9:
d4:ed:56:a8:d8:1f:6b:18:f8:1f:cc:cf:70:69:60:
98:92:76:1d:91:a7:23:1c:f7:e8:5f:ab:b8:de:79:
b0:dd:ad:f1:b1:44:db:38:ae:8a:d9:d4:45:00:7b:
43:10:1c:1b:a7:9c:26:8c:43:4b:16:0c:ee:17:04:
33:7c:21:65:05:64:95:7a:14:fc:fb:98:1e:94:24:
4e:8a:bd:b3:a4:91:1c:16:f1:be:6f:59:50:74:1c:
15:af:f8:e7:ea:d6:e6:b8:38:b2:5e:5b:ee:38:77:
de:3f:83:0a:9b:44:57:84:8d:6f:71:2c:86:3c:5b:
8d:e7:85:0b:11:6c:b5:49:e3:89:be:61:12:9b:c2:
0e:60:4e:4e:22:24:31:83:08:f1:17:26:76:3e:af:
a5:78:1a:e9:34:24:76:62:78:c4:25:a8:e9:e1:9b:
24:7f:4e:0a:6c:6a:55:cf:6d:77:7f:d1:e6:17:6f:
29:51:62:7c:9d:d1:29:0d:93:66:66:35:da:4c:9c:
6f:7b:1f:b0:bb:37:45:00:42:9c:e3:aa:20:3c:40:
a6:13:71:cb:32:0e:a6:14:23:e1:9f:18:a9:dd:3e:
e4:ad:21:36:51:6b:6a:26:55:5c:0f:90:8f:a6:62:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:27:9C:FE:FC:30:ED:04:D0:D0:1E:FA:E1:B8:1E:14:00:72:D6
X509v3 Authority Key Identifier:
keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/hSEnnP78MO0E0NAe-uG4HhQActY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.1.0/24
IPv6:
2a12:3440::/29
Signature Algorithm: sha256WithRSAEncryption
87:41:f7:b4:b3:c1:4c:d3:6a:1b:3c:48:1b:72:4f:bd:dc:54:
7f:91:47:d5:02:1d:3c:f9:a4:8b:ff:3b:fe:cb:81:ab:68:ed:
78:ee:c6:34:66:1c:f6:44:de:9e:ea:8f:c2:24:8b:9e:f7:08:
39:43:1c:e8:dc:ca:22:bf:29:db:c8:08:f3:e9:bc:48:63:78:
05:14:2a:d9:aa:a3:14:25:82:41:74:54:68:60:2d:61:f5:1a:
0a:7e:36:3f:87:cc:a3:e5:c9:09:5a:1f:48:06:4a:57:08:45:
2c:bf:01:1a:e3:65:e4:2e:2e:14:08:92:55:17:34:b3:7f:91:
e4:74:66:e2:92:e8:67:8b:a0:e2:88:86:18:2b:f3:9c:46:5b:
11:80:75:9b:ed:b5:97:14:ea:86:25:24:47:4b:a1:f0:be:52:
f2:76:79:07:38:07:60:e9:cc:4d:93:cd:0f:7a:97:8d:ff:f6:
20:e1:e6:19:94:21:ab:17:cf:9e:5a:dd:0b:7f:8d:78:dd:af:
3b:5b:63:53:8a:1c:1b:fb:17:bb:e4:cd:78:64:cf:55:0f:7e:
95:02:89:61:e0:f2:52:12:22:22:af:61:62:a6:9a:42:dc:f8:
d8:be:68:39:cb:91:c8:0f:42:1b:4f:e7:a5:33:19:12:4b:b6:
e0:d7:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:04 2025 by rpki-client