Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/p_9inuYDdp5y0a2pR7IT5FJWxkA.roa
File: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (raw, json)
Hash identifier: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=
Subject key identifier: A7:FF:62:9E:E6:03:76:9E:72:D1:AD:A9:47:B2:13:E4:52:56:C6:40
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 0194221FFE745780C06266570D3737A2B16D
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/p_9inuYDdp5y0a2pR7IT5FJWxkA.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 91.223.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fe:74:57:80:c0:62:66:57:0d:37:37:a2:b1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ff629ee603769e72d1ada947b213e45256c640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:ad:71:26:37:0d:72:be:14:b2:80:0e:11:
3e:d0:c0:ed:cb:49:ea:07:80:f4:8d:79:66:1e:99:
56:84:ec:37:0c:87:aa:9b:b8:18:aa:81:9b:46:a3:
01:b3:8d:bf:33:31:a6:21:5b:fd:c5:0a:b9:64:03:
07:3a:fe:4e:d0:03:34:fa:86:82:e9:61:f5:b6:db:
2a:b3:3b:40:86:2d:3a:48:0e:75:f3:71:f8:d4:e8:
25:ba:2c:77:9d:44:7a:85:04:77:c6:ec:4f:69:1b:
00:48:e8:50:d7:d6:e3:9a:13:15:80:23:a2:77:4c:
da:87:b8:15:32:ae:d5:86:69:e0:b4:62:16:1d:da:
36:78:26:66:53:59:13:25:81:dd:0f:c9:4c:00:61:
0f:75:74:d1:90:c5:a0:07:c7:e1:79:4a:1f:54:41:
eb:26:a3:7a:c2:9f:3e:74:dc:27:1b:b9:67:58:34:
f0:06:1a:ac:a3:1e:c7:12:dc:14:3d:62:f5:f0:75:
a2:be:b0:b2:ba:77:4d:7a:e3:15:85:cd:eb:a1:e4:
19:3b:02:1f:6d:fb:c4:5f:76:f1:da:38:e3:bb:7f:
0a:bc:b8:73:a8:66:af:0d:11:9b:01:ce:94:63:50:
55:41:7f:65:3a:d9:f3:7d:91:87:db:ec:6e:bf:db:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:62:9E:E6:03:76:9E:72:D1:AD:A9:47:B2:13:E4:52:56:C6:40
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/p_9inuYDdp5y0a2pR7IT5FJWxkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:56:b4:88:1d:9b:40:7b:d4:5f:ff:a2:92:b4:37:72:0b:6f:
08:8d:f8:f7:b9:7b:23:8c:d8:34:7c:2c:e9:36:29:7e:d3:21:
02:27:90:0b:7d:0a:4a:a7:59:f9:23:2f:ac:c3:33:74:4e:07:
fe:a7:0c:23:6a:e4:e6:a2:8d:e7:e5:85:0a:de:d0:b3:92:aa:
ad:d0:95:66:dc:85:ff:e0:aa:da:eb:fa:67:f3:7d:f6:fc:b5:
72:78:41:f2:38:7e:b1:9b:b8:68:75:da:25:e7:03:a6:95:bc:
bf:eb:03:ab:46:23:fc:aa:c4:81:b5:47:d5:fc:fe:5c:62:d0:
2c:87:58:fb:28:66:1a:b4:4b:cd:31:2e:7c:4b:08:23:14:4d:
6b:95:dd:1b:fd:73:91:61:bc:71:06:eb:41:25:fd:0a:59:17:
26:70:4a:83:19:cc:96:28:15:7e:6a:72:b1:a4:2e:91:88:d7:
10:3a:37:cf:7e:68:64:c1:0d:6d:07:cf:a0:bb:2d:94:97:0e:
94:10:0e:31:61:19:05:73:01:5a:7d:cf:9a:f2:97:64:4f:64:
f9:98:50:f8:43:e4:5d:84:ff:9f:9d:c5:0e:3a:14:3a:17:26:
ed:7f:a2:76:c5:bd:09:0a:30:26:5f:44:23:c2:fd:ac:90:70:
42:95:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:43 2025 by rpki-client