Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/CLemqr75Yb48Km-cD1hApiGwC9E.roa
File: CLemqr75Yb48Km-cD1hApiGwC9E.roa (raw, json)
Hash identifier: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=
Subject key identifier: 08:B7:A6:AA:BE:F9:61:BE:3C:2A:6F:9C:0F:58:40:A6:21:B0:0B:D1
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019421B21281F346DB4DF24563490CC9BC2D
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/CLemqr75Yb48Km-cD1hApiGwC9E.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 91.227.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:12:81:f3:46:db:4d:f2:45:63:49:0c:c9:bc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b7a6aabef961be3c2a6f9c0f5840a621b00bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:07:da:b2:ca:f3:11:fe:e5:fa:68:2a:d9:
fd:87:ef:a6:a5:9a:54:8d:4e:07:5e:6e:70:4b:af:
c4:35:6e:55:09:97:f9:0b:7c:ba:51:ae:64:fc:75:
15:5c:45:27:fb:ba:26:b8:e2:f2:bf:c0:40:e2:86:
c4:56:d1:14:d9:a4:62:27:dd:81:b8:88:99:ea:5b:
f8:cd:a3:6a:36:62:ab:16:fc:ef:f2:d2:4d:00:4a:
b4:31:18:78:45:c3:70:67:89:7a:57:ad:38:6b:3f:
f5:b4:0f:f6:d7:e7:b2:7e:7d:6e:8e:bf:2f:75:5a:
f6:96:ff:e5:07:52:fd:69:47:29:9a:2d:e8:f8:cc:
68:2e:c1:ec:34:74:21:07:9c:db:83:41:67:31:33:
17:41:ee:46:38:d1:09:4e:e9:d2:94:fd:32:2d:c0:
3a:15:df:9f:4b:91:6c:e5:c9:f8:25:8c:b8:d9:d2:
37:ab:a5:01:d0:f8:59:f3:d7:b9:9c:94:63:1d:1a:
c8:85:68:d9:9a:64:6a:2b:44:8e:c4:6f:57:1b:20:
fc:e6:2c:2e:d3:82:88:2e:16:81:c5:f0:8d:61:58:
3c:56:76:d0:12:b4:07:a3:e1:91:b9:3a:9f:2c:da:
62:6b:d2:5f:f1:39:13:01:8c:82:dc:14:04:f8:53:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:A6:AA:BE:F9:61:BE:3C:2A:6F:9C:0F:58:40:A6:21:B0:0B:D1
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/CLemqr75Yb48Km-cD1hApiGwC9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.187.0/24
Signature Algorithm: sha256WithRSAEncryption
36:13:e5:bc:b2:6a:bf:62:ce:b4:91:a4:b0:9f:9d:77:56:83:
b3:4c:1d:c2:f4:3e:f6:70:d6:74:17:3b:e4:8e:ff:52:af:55:
2b:c8:34:69:2b:c4:a8:50:45:38:fe:6e:60:bf:cd:0f:60:a8:
66:1e:c3:9b:d8:0f:72:69:09:00:fa:e8:d4:8e:e3:69:31:9e:
e5:66:41:0a:19:95:09:b5:32:bc:da:a8:5b:07:c8:71:4b:04:
99:ad:c6:43:ad:a6:30:6d:1a:f8:9b:f3:70:a2:00:c7:59:c6:
a6:39:92:d2:4e:0b:58:87:6a:dc:c3:9a:69:10:b8:f3:17:aa:
c4:9d:2b:13:10:0b:89:5f:c5:80:95:df:77:c9:49:0f:55:bd:
d3:e8:0a:39:65:40:0b:70:f0:12:bb:05:af:0c:7e:37:42:f4:
86:02:97:5f:0f:01:8a:18:f6:21:5f:88:2b:f0:a7:be:e0:9a:
13:29:27:60:29:d1:bc:5e:05:49:6f:7d:ac:5b:b1:40:fd:38:
7a:80:cb:8e:cb:b4:2b:f0:5c:01:ab:13:4a:24:4f:a7:7b:a4:
88:c6:19:86:89:c1:a6:be:e1:b1:48:5e:54:a8:2a:81:3a:1c:
77:d2:22:8e:a0:c0:1f:24:d7:90:1a:58:0c:9d:57:45:ed:fa:
0f:11:29:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:53:43 2025 by rpki-client