Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/KE2Kl2utsUvHpt-c4smFQJF0LuE.roa
File: KE2Kl2utsUvHpt-c4smFQJF0LuE.roa (raw, json)
Hash identifier: iI0waX0t6mW7DdwMyQO/vbkTVqg0aNq6VMeaB2Q+awY=
Subject key identifier: 28:4D:8A:97:6B:AD:B1:4B:C7:A6:DF:9C:E2:C9:85:40:91:74:2E:E1
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214CD784A8762C97E6D45503C93D66
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/KE2Kl2utsUvHpt-c4smFQJF0LuE.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 91.190.189.0/24 maxlen: 24
92.61.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4c:d7:84:a8:76:2c:97:e6:d4:55:03:c9:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=284d8a976badb14bc7a6df9ce2c9854091742ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:b3:c5:2d:7d:88:e5:04:c8:ee:8a:35:94:
b4:b4:51:f1:cb:88:63:29:7a:21:72:db:c0:31:82:
1f:4e:5a:bb:db:40:21:ec:70:55:fa:b8:f4:4a:75:
d4:60:da:0a:e4:c4:ee:b1:17:d2:a8:8c:31:71:0a:
1d:d0:e7:88:64:1a:62:33:3b:50:46:d9:42:b1:3a:
8d:bf:e6:da:95:67:1b:34:9d:3d:6b:76:ef:1f:24:
a7:4f:7f:60:c2:38:a0:fa:80:ce:bf:da:7a:86:07:
22:ea:27:09:7a:00:41:8e:ce:13:f8:11:82:17:85:
25:66:7f:fb:ee:71:3f:73:3b:ba:fe:fb:5f:18:a5:
6e:a3:aa:03:f7:7a:8d:a0:87:37:35:05:77:29:7b:
be:9b:de:36:91:dc:07:90:49:d2:5f:5a:c8:5f:fa:
71:81:6a:e1:3c:cc:ff:95:fd:02:7f:3d:6a:d9:42:
b0:51:e3:4a:69:79:62:ed:6f:a6:db:dc:44:54:bb:
1a:a8:e2:7a:ec:bf:24:b5:66:83:7a:47:fd:d4:73:
62:c5:d5:1f:50:05:ee:83:cb:0a:44:02:2d:cc:fc:
3b:9d:41:4c:65:ff:d6:f4:90:f8:0f:12:5f:3d:7c:
77:7e:15:02:20:56:95:96:5d:27:27:60:af:d8:c6:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:8A:97:6B:AD:B1:4B:C7:A6:DF:9C:E2:C9:85:40:91:74:2E:E1
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/KE2Kl2utsUvHpt-c4smFQJF0LuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.189.0/24
92.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4f:b5:af:c1:73:82:5d:b0:d2:33:21:99:f4:ae:1a:82:e1:
b4:3c:6b:a5:57:ea:6c:6b:2f:70:24:6b:61:7a:1d:25:36:8e:
e4:10:9f:fa:a6:53:e3:bc:07:b7:9c:4d:90:f4:bd:59:5d:5f:
b8:6f:40:65:0c:59:2f:a0:89:26:0a:a1:e9:6d:25:7d:7e:c1:
ce:c0:51:75:d7:3e:f7:56:02:33:07:ef:ea:7c:72:09:2f:f1:
1d:73:94:de:01:2f:31:f9:d7:7a:07:20:e7:e6:ff:60:62:06:
6f:dc:dc:9c:46:77:68:59:2a:bc:d3:76:88:4f:7c:12:a3:ef:
b8:aa:96:2a:d1:c8:03:88:05:0c:cf:46:59:a0:c2:5c:ea:25:
56:b8:34:c1:eb:c6:4e:3d:80:b3:1b:84:01:5d:24:d5:65:8f:
b1:e6:f8:58:2e:fe:14:b5:aa:55:1a:bc:71:47:d6:19:43:1e:
5a:91:f3:3e:a3:f8:0f:23:8f:f6:19:30:88:92:4c:4e:41:4b:
17:7f:91:94:a5:53:53:be:13:37:05:aa:89:98:d5:06:d2:22:
d7:96:b5:58:fb:e8:19:e5:45:3d:54:36:0c:19:44:08:48:87:
0e:d1:aa:58:f2:8a:93:73:d7:b5:ca:e1:2b:0c:03:d1:57:85:
05:eb:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:31 2025 by rpki-client