Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/9gV15CGeCGZSehAqUVOKKMXOsbQ.roa
File: 9gV15CGeCGZSehAqUVOKKMXOsbQ.roa (raw, json)
Hash identifier: qIxAqAl6+H8EzDNFr+V4Lc/RXGDqS+8HRkJbTnyexNs=
Subject key identifier: F6:05:75:E4:21:9E:08:66:52:7A:10:2A:51:53:8A:28:C5:CE:B1:B4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A6FA83A35C4A64888AA57A6C20EBFFC
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/9gV15CGeCGZSehAqUVOKKMXOsbQ.roa
Signing time: Thu 09 Jan 2025 09:40:19 +0000
ROA not before: Thu 09 Jan 2025 09:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40065
IP address blocks: 91.148.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:6f:a8:3a:35:c4:a6:48:88:aa:57:a6:c2:0e:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f60575e4219e0866527a102a51538a28c5ceb1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:dd:09:ba:b0:7a:25:2b:40:7f:c7:d8:ad:
c9:0b:37:10:e3:91:2c:df:f0:c7:bd:4b:9f:f9:47:
14:a4:96:4c:9e:db:f6:5d:e3:57:3e:0b:f4:64:5a:
41:1a:86:f6:c2:85:48:c3:ee:44:31:71:5c:9f:9c:
78:09:8f:49:9d:ea:80:1d:14:e6:16:a1:6a:94:cf:
1a:07:30:36:e4:65:5e:6c:41:ec:b4:80:a4:c8:e4:
ba:91:67:78:fe:21:2e:51:94:67:34:af:bf:4f:5a:
b3:b6:7a:6d:9c:e5:10:e9:b6:fc:ea:21:89:ec:1b:
69:d1:24:b5:ae:af:0f:86:b7:d5:57:3b:a6:d0:2a:
f2:14:22:f6:cf:e1:d5:89:08:b7:45:29:91:9f:10:
62:a2:5a:e7:90:99:ce:4f:1c:de:84:0c:cc:5f:18:
8b:33:46:7a:8a:4f:23:10:ab:29:93:26:5d:97:22:
25:07:67:9c:14:15:27:27:06:e8:a0:a5:d1:e5:e7:
c6:f5:5f:f0:75:db:51:2f:ad:44:9b:86:ab:88:ed:
41:db:3a:59:78:8c:d5:2f:37:1b:8b:c0:9e:ba:16:
f4:6a:d9:36:b9:39:c0:76:be:0b:10:57:51:35:be:
e9:92:00:26:9e:7b:da:65:2b:5d:3b:85:18:c8:cd:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:75:E4:21:9E:08:66:52:7A:10:2A:51:53:8A:28:C5:CE:B1:B4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/9gV15CGeCGZSehAqUVOKKMXOsbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.133.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a4:37:d6:7e:12:3f:c2:a1:ff:4d:20:5d:91:04:87:01:dd:
a7:7d:33:97:a7:5c:d4:24:7d:4b:57:a4:ce:f5:bc:48:c3:10:
2c:76:02:89:f5:9f:5e:67:5e:51:3b:a8:65:60:75:b0:bd:16:
46:6e:c5:a9:91:57:ee:9f:02:fb:ad:3b:c7:ca:89:70:c9:10:
48:31:97:78:f3:f6:b0:ff:57:a6:0d:fb:ae:99:42:05:f5:eb:
c4:8c:cf:c1:0d:a8:5f:58:0b:3a:7f:6f:f6:a0:c9:0b:17:94:
b8:cb:ce:29:a6:f6:dd:46:25:20:7b:0f:e9:15:1e:2e:65:68:
ba:f2:96:de:07:f4:a1:29:f7:e2:1e:da:a8:23:88:6a:3e:93:
29:1a:81:05:65:4d:7c:df:24:46:77:47:06:04:62:87:62:51:
d9:4e:24:ba:72:3a:0d:85:47:4b:7d:70:e5:86:98:49:95:65:
40:94:63:7c:65:e7:0c:38:77:a3:a8:c7:68:88:d3:f2:b0:e4:
23:ca:32:e4:8c:c4:0d:ff:78:2f:0a:9c:99:20:fd:be:0c:24:
49:5b:3c:23:25:ea:ad:e5:38:16:5d:ae:22:e5:0f:40:51:9c:
0b:c5:8f:3d:c6:0b:bb:78:7c:cf:d6:13:60:52:63:ec:d5:9c:
8a:50:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:38 2025 by rpki-client