Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/T3t-ArEOBhfdD7-teuw6oJPn3lo.roa
File: T3t-ArEOBhfdD7-teuw6oJPn3lo.roa (raw, json)
Hash identifier: xuLZFrm0+NbTvfhk+7aRSphe79xPMeEpUT9jWRxIrdw=
Subject key identifier: 4F:7B:7E:02:B1:0E:06:17:DD:0F:BF:AD:7A:EC:3A:A0:93:E7:DE:5A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F94A35FEFA82D0710F7E7E4D42C00
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/T3t-ArEOBhfdD7-teuw6oJPn3lo.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 91.234.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:94:a3:5f:ef:a8:2d:07:10:f7:e7:e4:d4:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f7b7e02b10e0617dd0fbfad7aec3aa093e7de5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:51:27:5a:cb:3f:39:32:d5:21:bb:28:7f:
91:04:b0:44:f8:67:a5:1d:03:0e:43:91:c4:67:d5:
df:4b:05:f4:f0:e6:72:3e:0e:17:37:1c:6e:a6:d4:
13:4f:00:91:5c:cd:a0:23:d7:48:70:a5:22:c3:3f:
7a:d0:6d:a8:e0:03:8d:94:d6:08:a6:3e:ad:3b:7e:
67:3e:da:fd:c7:47:95:0b:7f:19:f4:d7:e1:71:a5:
1a:93:7a:49:29:1c:6d:54:a7:7c:3c:e1:62:b2:25:
c2:d4:b8:84:6a:30:eb:f5:59:dd:f2:bd:8e:e2:f0:
5f:0e:b6:54:c6:35:41:92:fd:aa:27:0f:9c:b7:1b:
a0:26:63:1d:52:cc:1d:38:5f:e0:07:96:8e:58:86:
f8:00:be:dd:34:a5:46:59:6f:e3:41:6f:09:e1:a5:
88:a6:24:d9:24:a0:d7:4e:40:37:49:d4:d3:fd:d1:
44:46:6b:3c:a1:d6:24:55:59:47:93:df:c2:6b:24:
73:0a:47:8d:22:80:91:fe:5b:1b:f5:7b:4b:b0:04:
1a:ed:35:90:bd:41:1f:3b:81:00:be:68:b4:c8:54:
6a:b2:f6:be:93:a0:7d:71:5d:57:aa:ed:e6:21:a4:
7a:de:00:81:8a:ff:05:d9:3d:50:c9:be:b3:67:d5:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:7E:02:B1:0E:06:17:DD:0F:BF:AD:7A:EC:3A:A0:93:E7:DE:5A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/T3t-ArEOBhfdD7-teuw6oJPn3lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c5:b1:2f:4e:31:8e:78:ac:d5:54:6b:4a:28:8c:7e:2f:65:
b2:f0:00:28:29:e3:1a:47:0e:9a:95:39:5e:79:5d:48:60:74:
6c:bd:df:fb:89:90:7c:15:53:b6:a1:72:5e:30:ca:36:81:66:
ff:b7:64:32:69:ab:d8:8b:be:cd:58:9c:10:d7:87:83:10:84:
ee:00:5e:9d:4b:24:cf:9e:12:de:e1:03:32:5a:76:2e:f1:47:
a3:8a:17:63:6e:de:8b:a4:ea:a0:04:7a:f5:cb:1f:40:f4:16:
b8:d4:10:b6:fb:8e:0d:17:b3:b2:0e:f4:79:b0:b6:1d:8e:a7:
58:94:c7:89:55:38:44:4b:1b:9d:87:9b:ad:ff:23:f6:2c:92:
10:9b:b4:56:1d:8d:27:80:b2:71:f3:a4:14:d7:71:75:03:9e:
6f:63:15:89:02:76:cd:9d:2c:09:e0:82:ad:9b:d0:39:d5:f4:
78:0b:70:49:44:97:68:63:f9:de:f8:1f:6f:07:61:da:69:2a:
38:fd:b1:1d:a5:69:42:ce:22:3e:a9:dd:33:d0:81:88:1f:f9:
3f:af:4d:00:73:ae:ec:d1:62:15:44:ff:4a:d6:7a:19:90:2a:
36:69:06:c3:fb:d6:5c:39:b8:9c:97:4c:de:20:9b:4d:cc:ae:
7a:75:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:16 2025 by rpki-client