Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/r-zZtBtHKSlqIgPyswHVBPpJFCg.roa
File: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (raw, json)
Hash identifier: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=
Subject key identifier: AF:EC:D9:B4:1B:47:29:29:6A:22:03:F2:B3:01:D5:04:FA:49:14:28
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01952297B5F23259944E04238E6B80226D96
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/r-zZtBtHKSlqIgPyswHVBPpJFCg.roa
Signing time: Thu 20 Feb 2025 09:02:02 +0000
ROA not before: Thu 20 Feb 2025 09:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214196
IP address blocks: 91.92.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:97:b5:f2:32:59:94:4e:04:23:8e:6b:80:22:6d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 20 09:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afecd9b41b4729296a2203f2b301d504fa491428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:bc:3f:72:50:af:68:95:8e:29:b2:00:84:
44:ee:71:46:08:6e:eb:b5:c6:1c:aa:de:8c:fd:c8:
e4:37:c9:5d:b2:af:91:2d:95:24:27:a3:e1:13:8d:
d1:99:7d:8e:a8:bf:0a:48:4d:04:4e:69:86:38:21:
8f:8f:bb:d4:97:f6:d0:52:81:3c:3d:8a:89:6d:16:
8f:a5:bb:46:ea:52:79:f8:b6:07:0c:32:7a:7c:79:
b1:33:26:f7:ab:85:35:29:96:20:0b:af:ab:ab:33:
12:43:0b:9b:e9:b0:94:05:75:52:61:53:31:c8:63:
bb:b0:95:9c:af:15:4e:be:0a:fb:d6:d5:ab:ed:0b:
e8:33:35:d3:bc:bf:8b:85:1a:ef:af:df:c9:3e:20:
76:29:d5:8f:4a:5b:39:53:99:2f:c0:e0:30:e4:1f:
ee:8f:fd:d4:6b:42:86:ba:d4:a2:b4:83:4f:ba:e3:
30:fb:3f:db:cd:16:f3:c9:6c:07:d6:75:63:25:a6:
64:72:d8:82:a6:a0:83:97:2a:9a:3d:61:92:c4:ba:
a6:60:d8:bc:11:06:a5:09:f8:64:ce:4e:b5:e6:e9:
05:70:36:7e:91:a1:ee:3d:9a:29:ad:06:c8:61:d5:
95:58:23:1f:6e:c7:29:85:49:fe:43:ea:88:6a:89:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:D9:B4:1B:47:29:29:6A:22:03:F2:B3:01:D5:04:FA:49:14:28
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/r-zZtBtHKSlqIgPyswHVBPpJFCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d0:12:c8:b3:2e:4a:a2:a1:78:a4:7f:7b:5e:1a:fe:8f:62:
b1:00:a2:41:56:49:43:29:c6:e7:6c:c4:bd:c5:18:d3:5e:ca:
df:64:af:3a:22:ee:1f:05:13:e1:14:f5:96:67:63:5f:6f:2c:
3c:d1:97:d7:58:37:63:6a:df:82:2d:21:48:19:59:bf:9b:38:
f5:0e:72:88:51:9b:79:4c:ca:de:7d:68:22:43:72:df:fa:da:
cd:20:5e:47:89:cd:01:ed:10:88:31:a7:c0:c9:22:90:b4:f0:
c3:19:f4:87:7b:96:77:bf:92:09:ab:dd:4c:28:fb:29:89:13:
9e:09:ea:49:9b:36:14:cc:8f:b6:4e:09:6f:34:f1:af:2d:56:
9d:3d:dc:ce:1a:83:9c:f5:5f:02:db:5e:dc:a4:23:50:63:51:
b7:8f:a1:24:d4:71:13:f7:9c:a1:08:19:a6:8a:c3:9e:00:f4:
cf:ab:2a:c7:b7:56:a5:4f:12:6b:af:2f:90:36:01:0f:41:67:
5a:04:75:0c:a9:63:ac:5e:84:e7:f3:1a:ba:9a:67:88:cc:4a:
cb:89:8e:5a:7e:11:bf:da:4b:c9:f7:04:77:f5:b0:91:a6:70:
d4:f1:23:bd:8c:70:a1:c2:61:6f:36:23:66:e2:4a:04:92:03:
e5:e1:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:45 2025 by rpki-client