Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/AQ9l8YICv6G1imQ1WjVsjg3ifZU.roa
File: AQ9l8YICv6G1imQ1WjVsjg3ifZU.roa (raw, json)
Hash identifier: LmAUKtfOnHJXJON5ZAcUATH9fhTSbd4V04lPGijWLVM=
Subject key identifier: 01:0F:65:F1:82:02:BF:A1:B5:8A:64:35:5A:35:6C:8E:0D:E2:7D:95
Certificate issuer: /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial: 01856C13782E6B1B384CC1ED505E13F26148
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/AQ9l8YICv6G1imQ1WjVsjg3ifZU.roa
Signing time: Sun 01 Jan 2023 06:44:53 +0000
ROA not before: Sun 01 Jan 2023 06:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.241.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:78:2e:6b:1b:38:4c:c1:ed:50:5e:13:f2:61:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Validity
Not Before: Jan 1 06:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=010f65f18202bfa1b58a64355a356c8e0de27d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:8e:84:fc:e4:59:94:0e:98:6b:ae:e6:71:
9d:c1:e5:f8:f9:13:e4:d2:1d:07:63:9d:79:0d:f5:
76:fc:9c:49:8e:e6:55:99:81:5c:50:4d:dc:dd:73:
74:b5:77:05:b0:bf:f5:ce:68:4c:c5:54:8b:97:4f:
91:7e:0b:ea:28:23:6e:e0:01:81:9e:84:36:0d:3f:
3b:06:6b:c9:98:c2:39:11:ed:e7:d5:da:7b:11:91:
00:04:bf:d5:a6:b6:8d:a4:2e:14:60:ed:8d:37:cc:
f3:ab:7f:db:ea:14:02:97:b7:f0:e1:06:8d:2d:72:
65:10:e7:f1:8c:99:bd:87:c0:2f:19:02:8e:ea:3d:
47:30:49:de:85:34:32:14:d1:b7:4a:a6:9c:0d:b0:
71:29:89:81:41:c5:db:e4:34:81:8a:26:d4:4c:85:
ee:a7:70:83:f3:ad:fa:cd:51:48:db:c0:7f:7b:0e:
50:44:50:10:db:37:24:75:93:8b:ff:c1:5f:e6:1a:
aa:49:d4:7a:61:be:cf:b0:93:c3:16:d8:53:c4:c5:
d3:90:20:04:a8:d8:2b:ba:2c:01:da:02:be:b1:c4:
9c:94:9e:91:c5:ac:e2:ae:bb:37:81:73:99:02:5f:
5c:9c:69:53:ee:8f:ed:4b:a6:6d:95:30:54:fc:3d:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:65:F1:82:02:BF:A1:B5:8A:64:35:5A:35:6C:8E:0D:E2:7D:95
X509v3 Authority Key Identifier:
keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/AQ9l8YICv6G1imQ1WjVsjg3ifZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:03:20:77:22:a0:f1:79:8c:19:08:7a:55:66:67:a4:13:e8:
63:79:c3:5c:36:b0:b8:29:d6:77:ec:dc:b3:c7:71:07:d6:4a:
a2:63:6f:7f:67:f9:91:04:a2:cb:29:46:5b:6c:93:d0:12:b7:
16:bc:7d:85:ae:37:89:68:57:20:a7:a5:e6:2a:12:be:25:c5:
43:57:ac:40:b3:47:86:39:99:c8:2e:9c:ba:4a:f0:3f:c0:3a:
32:ea:e5:5b:db:e1:e3:c6:5b:5c:f2:0b:d0:68:58:40:14:fd:
2a:85:4f:3b:30:be:a2:59:90:56:b2:cc:c7:ea:09:0f:c8:0e:
ea:6c:72:0c:58:cf:79:3e:f5:ee:48:1c:4e:ca:15:7a:f9:d9:
93:47:7d:44:81:6b:7b:ae:e9:8f:fa:48:07:96:f5:ba:70:70:
fb:65:ba:82:44:17:19:b3:48:85:90:c4:1d:bb:61:dd:e4:ff:
b9:7d:af:bf:62:c2:99:45:59:48:e3:d0:49:7d:cc:a6:7c:f7:
de:d3:af:81:d4:7c:6a:28:97:fc:cb:0f:aa:b3:a8:93:56:24:
84:94:3a:1b:b0:91:cf:af:ed:75:bc:a7:6f:84:69:37:ea:b6:
3a:ca:9f:1b:6a:e7:bf:5c:27:8f:57:b7:be:3e:c0:62:24:bf:
c1:c7:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:43:51 2025 by rpki-client