Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/uYoqxUmmvNO7Wii7YVSG5anWzrY.roa
File: uYoqxUmmvNO7Wii7YVSG5anWzrY.roa (raw, json)
Hash identifier: aA074fRdJxXnyU4wE12JFVrrch97b4B8/lsvIbEFtt4=
Subject key identifier: B9:8A:2A:C5:49:A6:BC:D3:BB:5A:28:BB:61:54:86:E5:A9:D6:CE:B6
Certificate issuer: /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Certificate serial: 01942444BD0CE17683311B001D57366BAC40
Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/uYoqxUmmvNO7Wii7YVSG5anWzrY.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61971
IP address blocks: 91.226.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bd:0c:e1:76:83:31:1b:00:1d:57:36:6b:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b98a2ac549a6bcd3bb5a28bb615486e5a9d6ceb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:c8:85:19:74:47:6c:f5:5d:04:29:02:5d:
f0:7e:fa:30:de:3c:62:95:d9:23:20:47:3d:76:74:
90:28:df:63:a3:61:c5:39:56:be:7e:0f:90:53:88:
37:24:08:fb:12:68:6c:78:43:a6:72:3d:f8:9d:66:
fe:a5:50:c6:9e:d8:9d:13:f8:eb:56:db:f4:d9:b9:
95:ab:2a:bd:62:3f:11:0a:e3:70:64:08:0f:49:d9:
dc:75:d8:82:5c:d5:5c:b0:a8:0e:e9:7d:0b:5b:2e:
40:1a:16:6f:95:3a:97:69:1f:9a:fd:3c:7b:66:9b:
f4:c1:bb:0b:a1:24:39:b0:fb:5d:38:c0:87:c2:11:
0f:c4:b1:8b:39:5f:bc:e8:1e:61:48:05:72:fe:6a:
bd:f4:2a:51:cb:e9:9f:5b:28:f5:a6:e7:bd:78:d2:
4c:be:17:8f:ba:3d:07:24:46:30:e6:82:d6:52:14:
f6:c9:8a:23:c0:a5:47:b8:b6:5e:ff:6f:32:fe:5c:
92:6a:75:60:f8:f8:b9:df:6c:2c:95:fd:3d:44:61:
c3:21:22:1e:81:ba:a2:fe:ea:7b:b0:30:81:29:e4:
da:6e:e4:94:40:e1:01:94:34:44:e7:10:7b:90:0f:
ae:9b:95:ae:8d:4e:de:e0:39:cc:d4:e4:de:0e:75:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8A:2A:C5:49:A6:BC:D3:BB:5A:28:BB:61:54:86:E5:A9:D6:CE:B6
X509v3 Authority Key Identifier:
keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/uYoqxUmmvNO7Wii7YVSG5anWzrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.136.0/24
Signature Algorithm: sha256WithRSAEncryption
19:29:66:b7:ec:31:d4:7d:12:24:05:bd:1a:ec:ee:db:47:1e:
2f:2e:bb:4d:98:f9:b6:12:77:c0:ff:10:ce:4c:70:ed:f9:2e:
ea:0a:00:02:a7:a4:88:33:6d:9c:c6:54:98:2a:74:58:c4:cc:
90:c0:15:ab:9d:cc:c6:b6:22:58:f8:a1:58:95:43:04:4c:ac:
5d:b3:ab:b0:3e:96:b9:ae:c9:25:39:d9:fb:a1:4c:e3:00:01:
b1:8f:bb:11:66:82:71:91:0c:c9:49:10:f2:3a:b7:6e:a3:14:
14:2a:cb:64:16:c0:29:cb:0e:19:39:3a:88:d8:5a:ac:bc:32:
1e:c4:b7:b1:bf:8d:ee:18:20:fc:6a:e0:a2:ee:c6:f9:c2:ba:
4b:71:a1:2c:b9:8f:fa:9e:67:d4:61:49:a9:c9:f9:1b:81:ec:
0c:de:f7:5b:c3:ee:4b:cc:61:67:7f:17:cd:86:e1:88:be:df:
09:c3:36:eb:79:7e:75:4f:1e:dc:a7:87:98:86:a1:d2:65:33:
ad:eb:33:f8:4b:f2:e9:30:18:a4:89:27:9b:c5:21:36:ce:a0:
02:9f:65:14:b4:32:dd:b3:a0:0a:31:04:e8:df:f7:9b:7d:e2:
c2:b1:98:1f:65:ad:b2:03:ea:ee:b4:df:c3:20:5c:ad:66:31:
ea:07:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:57 2025 by rpki-client