Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa
File: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (raw, json)
Hash identifier: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=
Subject key identifier: CC:01:A4:BD:90:E2:E4:62:A6:ED:16:93:E6:A4:47:42:AF:58:DD:A2
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01942068331E03CB098CD17F8205CD37F2FE
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 91.193.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:1e:03:cb:09:8c:d1:7f:82:05:cd:37:f2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc01a4bd90e2e462a6ed1693e6a44742af58dda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:16:5c:1f:74:ae:ac:50:40:df:9f:98:bb:
57:2e:cd:67:88:99:cf:2a:06:12:fc:9a:82:1e:eb:
a3:80:e7:83:66:ee:39:af:a3:c4:8a:7a:85:16:3c:
bb:48:8e:43:21:85:64:62:6e:2d:7a:5b:4b:de:69:
55:af:bd:a3:53:45:93:01:df:10:b9:be:eb:29:8b:
26:24:f8:4d:4a:e2:a2:e2:60:d5:c6:84:14:c0:2c:
d2:07:59:68:e3:f1:bd:75:c8:0b:8f:89:c7:bd:e9:
7d:ba:97:33:0e:b0:19:b1:50:4c:41:13:89:83:5f:
e6:e9:2b:14:a5:60:d4:ca:a8:79:1e:18:d1:98:9b:
f8:67:63:94:85:10:7b:96:3f:13:50:0a:fd:c6:de:
04:98:9f:e8:f9:7f:26:d4:7b:22:fb:08:75:9b:61:
da:2a:14:b5:d6:44:09:97:61:ee:d2:2f:df:cf:31:
bf:da:38:95:2e:ce:b7:29:15:41:c0:55:f2:3f:66:
ae:c5:61:96:fb:2a:fd:c7:33:63:31:8c:16:3a:42:
6e:81:c9:43:e2:17:b5:a6:e6:ab:63:9d:70:af:37:
63:78:27:c2:0a:68:70:f7:86:02:fc:54:dc:14:65:
dc:1e:62:27:3b:6e:02:df:15:a3:f7:3b:c8:2f:1f:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:A4:BD:90:E2:E4:62:A6:ED:16:93:E6:A4:47:42:AF:58:DD:A2
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.233.0/24
Signature Algorithm: sha256WithRSAEncryption
31:28:39:7d:31:4e:73:11:94:07:01:29:d3:e6:0a:39:9f:f6:
1e:3c:9f:09:47:70:90:50:a5:ae:be:aa:52:9f:5a:75:b7:c9:
c9:c2:56:ef:2f:10:41:b9:38:0a:8b:75:f0:6c:b1:29:99:43:
27:e7:4e:bd:6b:1b:a2:b1:48:31:43:40:62:0e:1a:7f:41:69:
c4:93:e8:82:54:a0:1b:e8:5f:fe:e8:8f:51:37:e8:b3:3a:a8:
06:f3:f4:75:95:16:26:d5:f1:54:f9:07:1d:8e:88:4d:c8:bb:
24:24:84:87:98:03:05:dc:29:d4:e8:3f:c5:7e:1e:fd:d4:f0:
86:95:00:2b:de:a9:52:67:da:0c:59:5d:65:0d:1d:7a:2b:c8:
8c:c2:50:9c:1e:4e:ff:a2:82:6c:63:44:dc:f0:c3:5b:d8:da:
a6:ac:c6:4a:31:b5:96:fe:93:c2:46:ce:33:8e:39:47:dc:fc:
ba:b6:f1:ac:82:0c:f8:0d:94:55:fe:c8:9e:11:cf:6d:0d:b4:
4c:9e:63:12:7f:2d:98:24:28:e8:ce:e9:5d:45:c9:a1:4d:cf:
09:05:d5:0a:6b:ea:ca:b5:1d:46:1b:6d:5b:24:27:fc:91:8a:
bb:d3:44:d1:5f:10:92:af:cf:89:a8:02:b5:25:4b:f7:3d:5e:
ec:c9:78:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:59:42 2025 by rpki-client