Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Jc4UjjXDIHer7xI93ScihguvNyI.roa
File: Jc4UjjXDIHer7xI93ScihguvNyI.roa (raw, json)
Hash identifier: IRfvvMt08HvaaPswtbTpbce96zw5k4oSSFo123wdXVg=
Subject key identifier: 25:CE:14:8E:35:C3:20:77:AB:EF:12:3D:DD:27:22:86:0B:AF:37:22
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C3C73FDFDB39D7A2C90CA50AF8489
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Jc4UjjXDIHer7xI93ScihguvNyI.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 91.108.244.0/24 maxlen: 24
91.108.245.0/24 maxlen: 24
91.108.246.0/24 maxlen: 24
91.108.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:73:fd:fd:b3:9d:7a:2c:90:ca:50:af:84:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ce148e35c32077abef123ddd2722860baf3722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fb:96:e4:1e:3b:00:5b:dd:68:47:a3:f4:e7:
25:22:29:6c:71:d4:9d:88:34:6e:d6:e0:fc:e3:e8:
77:d9:af:ce:ad:27:66:1a:ce:56:45:15:c3:11:22:
8b:90:37:5e:51:9a:38:15:9c:10:9e:5c:90:8f:4e:
da:5c:99:6d:de:cf:3d:d2:e9:c5:2e:8b:06:03:61:
d0:fb:af:db:b8:d0:e2:0e:60:be:d3:a2:9c:ef:ee:
48:48:52:2f:e0:19:74:5f:07:04:6b:3b:8b:ba:f3:
e7:87:2f:88:15:f4:55:09:12:fe:c1:07:4b:18:d0:
55:b6:eb:6b:55:ea:17:a4:79:5d:d9:a8:68:38:5f:
1c:ec:41:ec:12:7b:d9:f3:4d:b4:b9:fb:77:8c:b4:
2b:0c:59:9b:fb:7b:89:59:0c:5c:6c:85:47:98:69:
db:d2:74:9b:c6:ef:01:35:5e:f4:7c:f9:88:e5:7e:
28:7f:bb:4f:97:a8:65:ef:8b:e8:3e:49:6a:92:c0:
2a:87:16:36:31:8d:27:78:6d:f9:a3:ba:40:8a:77:
dd:14:58:00:ed:b4:af:cb:f6:0c:cc:78:f1:a5:ed:
bb:68:97:4d:48:ed:60:4c:63:61:2d:e8:e4:cf:e9:
0c:07:96:78:de:0e:7d:e9:a9:da:62:6a:2c:bb:59:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:14:8E:35:C3:20:77:AB:EF:12:3D:DD:27:22:86:0B:AF:37:22
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Jc4UjjXDIHer7xI93ScihguvNyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.244.0/22
Signature Algorithm: sha256WithRSAEncryption
62:43:67:f3:ff:3e:a5:64:e6:c6:a0:f4:a4:c4:de:bb:ae:ab:
40:57:ff:af:18:b7:ca:7a:56:27:d9:f3:1c:b1:a2:52:3a:ff:
19:00:97:ac:79:4d:11:44:1a:cf:43:fd:0f:a4:4b:24:e3:14:
c0:22:b1:ac:ce:b7:79:a0:17:24:e3:b3:d1:ab:8b:10:b5:76:
8e:ee:43:79:7f:b5:ee:0e:e8:6b:8a:98:34:72:f7:40:5e:6d:
36:12:da:d6:cf:6f:77:00:b6:35:97:db:68:46:24:19:14:fb:
b5:24:9d:70:37:83:fe:86:03:1b:c2:25:89:50:95:49:1b:ad:
26:c5:58:35:81:71:04:46:a7:82:5a:86:79:ca:95:f3:3a:46:
c5:31:c0:f1:29:23:1f:6d:c3:7f:c1:01:07:3e:9f:88:ee:e8:
2e:2c:2b:cd:1f:03:10:82:54:13:ac:a5:6f:26:6c:eb:3e:7b:
e2:02:73:99:72:60:f9:93:02:40:04:83:9d:a2:9e:b7:db:4b:
02:5d:fe:63:9d:f8:1d:bb:f1:41:66:97:3a:29:b8:c3:d7:10:
24:09:ed:fc:49:fd:7c:bf:02:8e:bd:e3:32:2a:30:72:3e:31:
e4:59:8a:f8:ac:26:b8:81:7e:2f:9d:94:f2:9e:b0:38:f5:4d:
24:d4:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:44 2025 by rpki-client