Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa
File: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (raw, json)
Hash identifier: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=
Subject key identifier: D1:1E:1C:4E:89:B6:37:71:5F:CB:E6:B7:E8:08:B4:CB:F9:70:47:B3
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 0194228E42A056B830AECFFDAF9E3F628EB1
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.208.28.0/24 maxlen: 24
193.105.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:42:a0:56:b8:30:ae:cf:fd:af:9e:3f:62:8e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d11e1c4e89b637715fcbe6b7e808b4cbf97047b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:c6:5f:d7:45:3a:5d:08:b4:8d:9c:7c:9c:
31:0e:1e:a1:0d:73:22:5e:14:71:e7:2c:fa:42:f5:
33:0d:b5:17:c8:38:f2:07:8d:0b:bc:3d:d3:bc:2b:
b6:94:ba:b4:f3:9b:08:50:41:59:25:35:62:5e:b7:
bc:b3:2a:91:89:f4:cd:80:aa:d5:0a:18:ec:82:c0:
81:55:11:60:3d:8a:ec:49:83:ef:79:d4:8a:37:32:
ce:31:8c:e5:89:b5:69:2e:8b:f1:ba:06:9e:ae:2d:
fc:ee:be:58:10:91:1d:c7:4c:31:50:1b:ae:90:37:
05:e8:c3:30:ef:7f:31:08:95:2b:26:40:22:75:df:
fe:21:34:a3:61:00:56:23:0c:7a:c2:39:75:f5:46:
4f:d7:0d:20:67:b4:fb:27:48:f3:d2:7d:8a:e0:94:
e3:b9:c1:e5:2e:bb:28:87:ec:ea:0f:0c:2f:73:af:
4f:29:43:36:8d:e5:a7:00:4c:a4:02:fa:ee:2f:b1:
5a:77:5d:5a:cc:83:ef:a8:4d:b9:9b:6a:d3:1b:0a:
50:f0:63:53:f2:c7:ec:62:a1:31:aa:99:e6:34:5e:
df:d1:98:54:7d:42:8b:d3:1f:ba:47:93:22:a0:1f:
92:47:98:d3:dc:69:79:74:fe:15:4f:d0:b8:f7:f8:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:1C:4E:89:B6:37:71:5F:CB:E6:B7:E8:08:B4:CB:F9:70:47:B3
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.28.0/24
193.105.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:63:bd:89:cb:f5:ce:82:18:a7:ef:4c:70:9b:f6:7d:d7:f2:
35:4f:53:ba:8c:57:4f:0a:57:93:85:da:3d:ae:a6:a0:2f:1d:
21:18:3a:79:50:31:de:35:d3:78:57:e4:d3:ae:ec:5c:d2:06:
46:78:f0:c1:10:29:3a:ef:12:c8:c3:2d:37:93:1e:e4:ec:8d:
4d:b4:81:13:42:d6:37:6a:73:b6:01:aa:82:1e:fb:87:2d:ef:
07:bd:aa:9f:51:19:5c:e4:23:90:a5:7d:80:70:f5:ac:aa:49:
d3:08:99:2b:d2:6e:88:f7:c7:e3:ef:b6:ea:20:16:76:7f:35:
c1:42:01:04:33:ca:0d:33:34:4c:65:9f:be:e1:32:b9:d4:ab:
7b:3c:1e:45:ba:a1:cf:4e:42:e8:01:a3:e9:62:73:e1:e3:30:
3a:96:9a:2f:0c:2a:a4:65:87:41:d9:43:a6:ec:bf:7a:72:46:
48:c7:d5:c7:d2:71:85:46:bd:a4:58:99:b4:0d:89:e7:eb:dc:
5e:d4:79:95:3a:98:ed:b7:43:42:80:fa:46:fe:83:7d:e2:dd:
37:df:6b:4c:dd:5b:af:26:2d:ec:26:40:73:6d:24:69:e0:28:
35:0f:ad:88:b5:60:57:85:a7:1b:d8:56:52:79:18:c9:36:d1:
2f:fb:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:35:55 2025 by rpki-client