Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/keun2IRw7haIIKkVfKP-snALaeQ.roa
File: keun2IRw7haIIKkVfKP-snALaeQ.roa (raw, json)
Hash identifier: YB+3CYxlHEJ9vwl2a7w4/uVnP5GuPShO8QVbYUihRFU=
Subject key identifier: 91:EB:A7:D8:84:70:EE:16:88:20:A9:15:7C:A3:FE:B2:70:0B:69:E4
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214A30F810845CDEE7129797FDA624
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/keun2IRw7haIIKkVfKP-snALaeQ.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 77.111.119.0/24 maxlen: 24
91.190.187.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4a:30:f8:10:84:5c:de:e7:12:97:97:fd:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91eba7d88470ee168820a9157ca3feb2700b69e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:c1:a0:6e:9f:d1:4c:f9:f5:c9:e2:fa:d6:
03:71:c7:ca:00:07:15:47:7a:60:ab:ed:4d:9f:02:
ef:41:e0:f5:e9:fb:3b:54:5a:3e:7d:a7:9a:d5:c7:
1e:15:1c:bd:fb:ce:7b:00:bb:61:bc:90:f5:81:df:
77:c4:05:21:e2:97:11:1d:42:ed:a0:c1:da:44:ad:
5b:ae:56:37:f6:41:78:c5:50:c2:b6:bb:ca:2d:c5:
45:9f:5f:bd:0d:ad:a5:71:9f:af:37:f8:1e:64:de:
6b:d8:db:dd:12:dd:23:e7:7d:e7:1b:81:c5:d9:63:
8c:d3:7c:9f:9c:58:c2:27:5d:8b:ba:c7:bd:20:48:
8e:5b:c3:81:71:ef:ca:7e:61:83:8d:01:05:54:b1:
e6:4c:00:93:36:79:28:0b:83:a8:da:4f:87:22:54:
91:88:26:26:23:b2:dd:38:5e:41:56:ff:31:7b:f6:
ac:8f:91:91:12:16:f4:4c:d6:9c:6a:f5:50:29:6b:
07:56:0e:87:68:ad:09:a3:44:87:62:c9:6c:fc:3d:
d2:fb:d6:c7:e7:9a:db:a7:4d:e9:ec:a2:ac:ec:91:
18:b5:02:b9:07:dd:aa:a3:7d:dd:d5:16:d4:ee:ba:
0f:9d:7e:83:27:2f:ad:58:9e:14:d4:c5:da:b7:f1:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EB:A7:D8:84:70:EE:16:88:20:A9:15:7C:A3:FE:B2:70:0B:69:E4
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/keun2IRw7haIIKkVfKP-snALaeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.119.0/24
91.190.187.0/24
92.61.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:3d:1f:62:67:e4:71:4c:72:ad:83:bf:78:9b:57:b9:df:b4:
fc:fd:3d:b2:56:36:e2:4a:af:4f:70:bf:ee:89:ab:d4:c1:8f:
2f:74:27:d5:2f:b4:6d:20:a0:9d:3c:89:46:7e:89:4f:30:a5:
16:bd:2d:c8:ed:08:cf:4c:43:8e:8e:4a:af:b3:d5:31:90:41:
88:aa:05:8a:88:a5:59:92:ac:cd:d7:6f:49:71:dc:f6:ba:36:
ac:01:09:ed:ea:b3:cd:e4:43:40:3e:24:46:f0:59:96:0b:17:
56:14:f7:79:83:c9:be:81:ac:27:25:05:fb:bf:d0:79:60:22:
5f:e5:5e:89:d6:ed:7a:8d:04:14:68:a3:15:f1:5c:3a:2e:7c:
b5:96:50:12:20:0a:60:e8:46:52:aa:01:fd:ba:e9:38:98:00:
f5:ce:e8:64:0d:64:21:0b:51:ae:06:9d:60:be:13:2a:51:46:
32:26:64:9e:f7:8f:33:23:0d:ce:fa:7e:1f:c5:7b:b2:94:6c:
d2:09:a2:ff:fc:1a:15:2e:47:8b:39:ee:bb:4a:6a:33:db:35:
75:b7:dc:d3:c0:01:d7:55:24:00:08:f7:2c:10:f0:11:c4:86:
5c:aa:91:86:7b:3a:04:de:38:9f:2c:7f:9b:8a:57:b4:1b:23:
3f:b0:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:58:22 2025 by rpki-client