Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2ig8VSY1W2YLDyWS5AUe2H2MBko.roa
File: 2ig8VSY1W2YLDyWS5AUe2H2MBko.roa (raw, json)
Hash identifier: cepDq6B1OpluD7FX2nEajQwO4/PW2dykAJ9HP+54RMA=
Subject key identifier: DA:28:3C:55:26:35:5B:66:0B:0F:25:92:E4:05:1E:D8:7D:8C:06:4A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F98BF0C0280E54DD91999CAE7F62C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2ig8VSY1W2YLDyWS5AUe2H2MBko.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57013
IP address blocks: 91.231.187.0/24 maxlen: 24
92.63.181.0/24 maxlen: 24
93.92.115.0/24 maxlen: 24
109.196.105.0/24 maxlen: 24
109.196.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:98:bf:0c:02:80:e5:4d:d9:19:99:ca:e7:f6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da283c5526355b660b0f2592e4051ed87d8c064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:db:3e:99:90:5c:52:fa:bf:d9:39:a1:fe:
67:c0:e4:97:da:e3:bb:ae:21:73:de:63:48:ec:60:
41:f7:90:54:e3:10:ec:10:2d:a4:77:c3:69:3e:74:
da:6d:8e:af:c8:31:1a:78:37:b1:82:c5:22:58:4e:
b3:1e:29:10:d3:05:08:d8:04:39:e2:25:22:fb:b1:
26:dc:a4:c0:79:df:f1:98:5d:4e:28:38:9b:b1:9f:
cc:16:74:a2:75:c2:dc:58:1f:33:1c:63:cc:e8:65:
c2:29:87:26:ef:d4:2b:c1:7f:cb:4b:79:4e:53:68:
6d:b5:3d:cb:2b:d9:6f:35:08:95:1d:de:28:f1:0e:
ae:bc:2f:06:04:17:14:0e:eb:73:f3:3a:b8:33:29:
99:e5:2c:ea:ab:7b:66:1c:70:7b:a5:c4:0e:ca:41:
71:ae:23:56:be:aa:44:8d:a2:44:db:9d:c8:a8:44:
f1:89:84:53:c6:3b:ce:61:9e:12:d5:90:ca:d8:44:
60:c8:1d:46:a3:be:bd:d5:79:c3:5d:71:21:00:0b:
bc:6d:2b:18:4f:11:83:b8:27:cc:6a:6e:e4:66:3c:
b1:32:7f:4a:46:40:5d:8a:72:12:ac:34:d4:84:0a:
61:2c:da:4d:97:ac:cd:3a:84:59:ff:48:ab:32:b9:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:28:3C:55:26:35:5B:66:0B:0F:25:92:E4:05:1E:D8:7D:8C:06:4A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2ig8VSY1W2YLDyWS5AUe2H2MBko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.187.0/24
92.63.181.0/24
93.92.115.0/24
109.196.105.0/24
109.196.110.0/24
Signature Algorithm: sha256WithRSAEncryption
88:24:79:15:74:bb:e3:34:e5:bc:54:4a:b9:8d:c7:f8:3d:bf:
f4:b7:76:04:9f:14:eb:53:01:b8:56:55:f2:5f:de:d5:de:59:
c6:a2:7b:3b:f1:4e:ea:59:70:b8:e5:1c:06:0d:4a:20:4f:18:
2b:ec:74:b1:24:91:f5:76:94:7b:32:54:c1:f1:cc:db:0b:04:
58:e9:12:ee:aa:90:a9:96:be:da:9d:eb:ac:e2:5e:4e:c5:d3:
47:0d:4a:68:be:87:96:aa:ba:90:b7:25:ba:ca:d2:22:f1:4c:
80:ab:87:f0:ae:c7:93:c5:d0:a4:99:80:9e:7d:42:f4:eb:c2:
72:2d:93:24:7a:0c:57:27:da:27:cb:74:ae:4d:c6:81:4f:c9:
40:33:21:14:89:8e:be:9c:e4:52:1a:6e:62:06:2a:fa:52:bd:
1e:f2:4f:2f:51:7f:83:7f:30:bc:39:f3:5e:8b:d1:60:05:1a:
53:89:01:12:6e:49:45:2c:f8:62:7c:8b:29:09:61:e0:a0:54:
69:63:d8:b1:ca:5a:51:10:a9:9e:76:d1:3f:66:db:2c:d9:f5:
b3:0f:d7:bb:78:26:f0:48:34:b0:44:7d:39:59:6c:38:03:51:
e5:54:46:dd:25:47:45:79:c3:64:a9:34:ef:43:85:70:52:54:
e8:3f:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:45 2025 by rpki-client