Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa
File: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (raw, json)
Hash identifier: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=
Subject key identifier: 6F:4B:09:99:2C:6A:CA:4C:89:A7:66:71:4E:6B:28:CE:BF:3F:27:C4
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 0194258F1796DAE182EC691E632D60C41D9E
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 91.199.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:17:96:da:e1:82:ec:69:1e:63:2d:60:c4:1d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f4b09992c6aca4c89a766714e6b28cebf3f27c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:17:ba:ad:4c:f4:28:4f:dd:b0:72:f3:60:
ae:15:f6:a7:31:b7:57:44:c4:53:03:3a:ce:6c:81:
68:6e:a3:6c:99:b7:f7:38:d4:14:04:c0:be:fc:83:
47:9a:89:86:d8:c7:e1:b1:ff:df:95:fb:67:69:9e:
24:d0:f9:f7:17:89:23:e9:56:5a:a2:64:35:88:12:
0d:62:50:00:22:44:8b:be:59:ab:cd:0f:0e:65:8a:
fe:af:1c:93:6f:43:31:57:de:85:fa:82:d0:3e:3d:
8d:8d:3d:d2:7f:98:a5:36:31:63:a3:e1:30:ea:84:
31:40:ff:87:e5:38:95:87:44:eb:ce:c3:76:47:12:
5f:47:6b:8a:84:8b:a9:a0:66:59:7f:e2:7b:69:0c:
84:69:24:25:6c:7e:87:3d:96:52:b1:57:31:75:21:
fa:37:c5:5e:98:ae:4a:bd:a1:e3:68:21:ac:f7:8d:
04:95:67:12:48:96:88:11:2e:12:59:ee:59:a8:ab:
6a:ed:b4:42:ef:2d:b5:63:0d:41:90:76:55:db:f8:
4c:e1:30:6c:22:1b:04:42:04:34:77:8b:1e:e9:56:
04:4d:cf:63:83:85:cd:ce:50:a0:88:a8:a0:14:51:
b9:1e:f3:77:85:e7:34:40:b1:a7:e1:50:93:dc:9d:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4B:09:99:2C:6A:CA:4C:89:A7:66:71:4E:6B:28:CE:BF:3F:27:C4
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.181.0/24
Signature Algorithm: sha256WithRSAEncryption
00:41:93:d9:96:8b:8e:d8:3d:9f:c6:e6:5a:a7:9e:78:84:85:
42:f1:f9:f7:0c:61:77:d2:c8:1c:0c:da:b5:2e:39:37:ed:98:
22:6f:be:7b:88:0c:f6:76:1a:2c:01:aa:b7:c3:29:bd:8f:5d:
11:a7:c6:c9:da:44:85:24:9d:28:7d:a8:e7:da:20:75:a0:fd:
a5:2b:f2:f5:fb:37:de:3c:41:f3:0f:aa:70:e4:0a:ec:69:6e:
0a:a8:d5:ab:fc:de:89:0f:8d:a6:c7:7b:b0:96:fb:c8:8a:96:
78:4e:8c:89:2b:86:ad:b7:46:35:c7:1a:47:35:f3:79:77:43:
6b:b7:9c:7a:a6:3f:3f:0a:5f:54:8a:05:ef:6b:da:44:cc:12:
c1:45:e8:c2:7c:88:bb:0f:64:98:8e:f1:dd:5f:df:6d:fc:73:
40:b4:21:e6:b8:d4:b9:41:46:a7:08:6e:fb:70:91:1d:fd:8e:
8c:a5:7d:6f:2e:6a:aa:2f:ab:20:71:e0:41:48:aa:2d:b7:86:
6e:c7:13:64:ff:fe:aa:d0:1e:4c:c0:1e:d5:19:2f:ce:35:92:
48:83:b1:db:6e:76:c7:08:51:14:ab:03:75:b1:7b:70:6b:ec:
47:c7:27:68:c6:1c:20:90:aa:be:46:42:93:2b:4e:a5:43:eb:
ad:f7:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:54:16 2025 by rpki-client